Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer (raw, json)
Hash identifier: ZQS7olu0Qt2VYU7zmP6nc7u16NQYVixBsdw6Weq1Zns=
Subject key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC341B84701C262F1E9E7B581185AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12837
AS: 41684
IP: 193.35.25.0/24
IP: 193.41.239.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:34:1b:84:70:1c:26:2f:1e:9e:7b:58:11:85:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:a3:c6:23:19:5b:74:4a:20:05:8c:42:6d:
b6:da:ab:0c:31:80:fc:d3:c3:a2:ff:c4:b4:fc:45:
12:d4:4f:81:a3:86:84:88:c9:c4:ee:df:26:59:1b:
dc:28:e4:00:91:7e:33:a4:e3:5a:de:d3:6a:46:89:
35:0d:83:0b:8b:6a:70:6c:48:1e:0f:59:6b:75:fb:
9e:9d:fa:fa:08:01:e0:d6:93:c1:42:f1:70:d2:e4:
dd:e8:e5:0f:a9:86:3a:01:18:21:9e:62:5b:41:37:
f2:42:23:56:af:5c:d3:0b:99:df:2f:eb:50:63:12:
fd:ae:86:d4:44:99:3c:5f:db:ea:13:21:8f:dc:30:
bc:af:46:3f:3c:64:62:4c:5b:89:31:11:78:ab:27:
81:65:41:72:67:3c:c4:64:2b:42:12:50:e6:6e:55:
d0:a6:cb:e9:df:a1:8e:35:98:50:24:49:a6:a2:5e:
2f:b8:c3:0b:87:dc:50:17:1a:68:7e:b1:41:11:1b:
69:97:d2:4d:cd:72:81:6d:67:cf:45:88:97:7e:9c:
78:b0:88:7d:55:59:4c:37:a5:d1:2d:de:fd:37:e0:
5d:95:fc:c8:9b:be:b5:1c:c8:0e:e7:fe:f3:55:9f:
b1:ec:2e:13:0f:6a:a6:75:02:9d:c3:11:36:7f:f0:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.25.0/24
193.41.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12837
41684
Signature Algorithm: sha256WithRSAEncryption
60:6e:f7:0e:35:14:fd:9f:28:55:09:b2:01:88:0b:db:81:f3:
fa:8a:f1:04:2e:f4:93:d0:74:78:34:97:37:21:cd:02:21:45:
56:5c:a7:41:fd:03:b7:9d:b0:c8:c6:84:8a:86:86:70:74:bb:
4a:b1:b1:5a:3f:a5:3e:5f:42:31:31:95:bb:f8:d8:e5:f1:7b:
32:dd:f1:e8:d8:51:40:0a:cd:8b:d2:01:aa:1e:a0:8c:79:57:
b3:bb:1c:8c:63:7c:f5:f9:22:38:76:00:29:ab:b8:4e:51:e7:
30:d7:b8:42:3e:4f:27:5d:d2:f3:10:61:e5:19:9a:93:0a:64:
39:26:d5:a8:8f:a0:2f:41:cf:d6:2f:b2:9b:09:26:12:01:5a:
56:6d:be:0d:a3:c2:ab:84:5b:24:a9:25:a5:28:4e:7d:39:d1:
ff:b7:3d:7b:45:41:a1:4d:37:79:2a:48:1d:4f:be:1a:a3:35:
88:22:3d:84:a8:80:11:63:2a:e8:da:d0:ca:35:d3:8f:58:2b:
23:8d:f2:44:a5:c2:0f:92:f5:28:39:aa:49:b1:eb:b3:5a:ab:
f2:e9:03:6a:ca:67:a7:5b:6b:60:77:2c:b7:fe:ad:75:fa:89:
bd:38:0b:d9:5b:6a:6e:5c:e0:d3:7b:90:3e:13:b3:2c:9d:ba:
b5:03:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:13:06 2024 by rpki-client on console-fra.rpki-client.org