Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.cer (raw, json)
Hash identifier: wYnLQnPZj/wl9A15brb8ldOCrucunIKWDVOSQspLJaA=
Subject key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCB0EB29A13BAF5AAD074B926EDDFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209681
IP: 95.214.68.0/22
IP: 2a09:d980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b0:eb:29:a1:3b:af:5a:ad:07:4b:92:6e:dd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:cd:27:df:a6:d0:27:6b:2c:78:0b:76:e1:
3e:af:e7:98:ad:90:b5:e0:39:8b:64:b5:aa:fe:f3:
85:10:5f:64:86:49:f6:1a:25:73:5e:f0:1a:0a:68:
b4:3f:25:fc:df:a4:76:62:1e:1a:92:46:6e:cd:fd:
40:fe:88:09:d2:a3:1b:6e:f5:73:6e:5a:d5:b1:2d:
a4:5c:e3:f3:06:5a:a7:61:4d:3a:67:3e:08:59:4e:
92:99:96:f2:78:20:8f:f3:72:6b:b3:02:78:ae:cc:
de:57:8a:de:f4:76:8e:74:c9:c5:a2:aa:94:48:94:
e6:99:2c:b1:30:98:74:09:11:dd:f8:ec:a9:80:d1:
19:56:cb:24:2b:bf:67:1e:42:e7:40:b7:b6:33:dd:
c4:ee:6c:ee:c3:6d:29:4f:2b:1e:a2:43:38:33:61:
f9:18:33:fc:0a:62:88:d8:64:74:f3:11:cd:6d:6a:
5a:53:b7:44:9d:01:9d:43:81:e9:22:79:d5:51:52:
e9:b8:c4:ed:ba:e7:d1:9c:87:c4:c9:66:b5:ee:b1:
76:f7:0f:d2:46:7e:2d:ff:c0:d1:fa:a5:73:d3:76:
6a:c4:c4:57:56:a9:a6:97:8a:09:66:cc:6d:e7:67:
10:82:40:46:86:49:e3:41:a5:d1:61:13:b1:69:fe:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.68.0/22
IPv6:
2a09:d980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209681
Signature Algorithm: sha256WithRSAEncryption
6e:30:7a:a0:3f:26:1c:05:c0:3e:ab:16:26:1b:95:6f:79:ca:
39:30:4b:78:c4:0d:07:1c:b5:0d:9b:c9:fa:58:d6:d6:a4:5c:
8b:e1:c9:83:58:92:49:83:9c:3b:9e:06:74:a9:0d:06:54:b5:
88:5d:12:62:63:13:b8:08:60:b9:cc:18:48:44:46:10:a5:41:
c6:58:31:90:ec:db:77:86:c4:6c:2d:d6:72:e8:fb:22:65:66:
49:ce:0b:76:c0:13:42:5d:9e:17:dc:40:ac:fb:fa:9e:8e:60:
53:f5:21:b0:e4:66:9a:86:e5:ad:9f:17:7a:6b:0b:86:21:ff:
8d:13:19:af:56:1c:b9:b5:3f:bd:df:5e:2a:d0:91:75:53:7e:
fc:84:b9:24:c6:c1:88:11:15:03:94:5c:b1:94:ae:8b:a8:e3:
ee:eb:b1:91:7b:38:fe:ff:93:99:25:2d:fb:6f:cb:98:c0:2f:
fc:87:0a:a6:c0:92:ef:8b:f5:92:ec:f7:df:83:9d:a7:80:0c:
b0:08:c2:fa:d2:c7:eb:31:bf:7e:43:cb:71:21:2e:e9:dd:b3:
86:71:63:37:ad:f5:00:29:e2:23:d8:67:a8:9e:d9:12:95:b5:
e7:be:76:69:c4:15:19:f3:bf:0c:ba:c2:5b:af:22:73:15:8a:
26:e6:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:15 2024 by rpki-client on console-ams.rpki-client.org