Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
File: SY_UU_XjX5x30dcG5WUTit-CJWo.cer (raw, json)
Hash identifier: 0dkDdCCDKXj4V0dLAmNLTCXVCkBaksEw4DQY1yMwWyA=
Subject key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B692C4152A16749788046ADCD57F7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203931
IP: 217.29.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:92:c4:15:2a:16:74:97:88:04:6a:dc:d5:7f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:55:0c:4a:12:82:f8:51:96:c0:52:1b:2f:
3b:4b:e7:66:99:13:e8:27:7b:08:a0:38:ab:b9:20:
e1:db:71:03:be:57:a9:e9:01:b9:a9:c3:dc:ec:ae:
03:46:69:34:a9:a3:cd:bc:89:04:31:fb:84:7b:a0:
5a:ab:f5:21:52:33:07:71:79:b4:db:9a:75:9b:58:
72:86:9d:53:0a:22:4c:3a:6b:29:c6:1a:23:9c:33:
df:0a:ce:10:a8:1b:92:2d:47:ce:88:59:54:0c:f2:
1e:cb:dd:0e:e0:e2:9d:94:6b:2e:2e:4a:f7:9b:fb:
50:49:a6:9d:eb:3f:4a:d9:d3:4e:6a:b9:63:53:9d:
a8:41:64:ff:e9:01:0a:91:ec:c8:07:2a:ca:63:be:
be:94:88:2c:6c:8f:0c:53:59:e2:23:a7:b6:15:19:
97:31:a3:17:36:ab:d8:9c:12:86:1e:e0:d9:7c:cb:
91:4a:93:57:35:42:00:e2:f9:38:99:0d:cf:d9:aa:
44:29:29:2b:88:a5:b9:9f:6f:26:bd:f9:34:75:2d:
57:ef:60:d1:e3:d9:b2:27:2f:06:60:31:59:ea:a8:
b2:6f:40:37:68:b7:8f:dc:f9:a9:f2:28:f5:28:5b:
ee:ff:f5:a2:43:10:0a:ab:dc:28:62:05:7f:76:d3:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203931
Signature Algorithm: sha256WithRSAEncryption
a2:b8:a5:97:0c:17:d7:fe:96:5f:fc:f0:43:82:fa:c9:30:b4:
17:1d:b2:09:1f:57:34:9c:e6:9b:b9:35:83:96:af:ec:ce:76:
05:0d:6b:a2:0e:48:d7:a2:63:a0:38:10:7b:8b:fc:52:89:c2:
cd:a1:b1:ba:9a:83:f9:e9:5a:90:93:3f:a8:da:bd:21:35:00:
9f:ed:3a:66:3c:ae:1b:ee:f2:0c:9c:ff:6f:e4:cc:53:88:40:
98:97:e9:23:58:d7:78:95:d1:a4:b1:af:be:21:8c:45:8d:a2:
9a:d2:7e:b5:2d:10:29:0a:c7:99:9a:e6:0b:ff:49:c3:14:47:
a5:4e:4d:b3:65:cd:fd:d1:6c:ff:a2:80:9a:8d:72:12:9e:95:
72:56:73:4a:ae:d9:ae:bc:ed:07:56:74:89:fa:68:b9:b2:c8:
f2:49:00:32:25:d2:12:c1:5f:9d:32:4f:ba:48:11:9a:4f:17:
53:03:4e:6c:d7:a8:d8:c7:40:41:77:14:21:a8:32:2b:be:70:
40:94:de:d1:52:f2:0c:cd:c0:c9:27:91:fb:0d:bf:0d:f1:42:
7f:1a:59:89:7b:e8:47:70:e2:04:a4:c6:dc:f1:56:46:a8:32:
1f:0d:05:b3:bf:40:0f:ca:f3:05:74:af:a1:ca:70:39:56:99:
aa:e1:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:32:00 2024 by rpki-client on console-fra.rpki-client.org