Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer (raw, json)
Hash identifier: V0043NAfF8LOW3hIfRXGOLVhHW9Q9/2yPVzeiY0nTyY=
Subject key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCCA7F5A70CD9F7B105DAB81190D2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56366
IP: 93.92.240.0/21
IP: 2a03:d200::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ca:7f:5a:70:cd:9f:7b:10:5d:ab:81:19:0d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63e30980305345fd5365b3515e3568f9cee58541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:ad:5e:74:bb:67:5e:8a:8f:d6:52:29:c2:
fd:ab:7b:4b:6b:eb:4b:54:1d:e6:81:6e:35:74:bb:
55:4e:d9:dc:8c:01:90:30:94:0b:31:72:df:c5:b3:
d5:5f:77:e1:87:5c:f8:c9:b8:ef:50:33:36:59:b5:
be:39:a3:05:86:dc:80:d3:35:47:5e:0b:7c:33:63:
7b:46:0a:c7:12:3f:96:63:96:d7:de:22:d6:1e:ad:
1b:49:b4:38:4a:df:0f:4a:23:e2:6b:ba:7f:bd:bc:
30:3e:22:94:c8:f7:26:dd:91:82:8f:dc:37:8e:57:
d0:0a:d8:78:f0:d8:31:b5:87:76:01:f0:2b:23:b8:
a5:86:01:36:4b:13:35:d1:47:0e:00:48:6b:87:40:
08:d7:73:c9:cd:11:3a:f7:e6:01:16:f2:ef:63:84:
5d:11:fe:4e:71:ef:1e:7a:b9:35:8e:ee:dd:7a:ea:
f8:1f:fd:1f:81:61:a0:ee:e0:aa:b8:86:84:ad:05:
9e:41:93:ce:ff:d4:14:0f:11:a2:30:03:ca:ce:50:
b5:40:3b:cd:be:23:5f:17:35:3d:fa:19:bd:d9:77:
b2:d1:c6:c1:0d:69:74:71:90:6d:fa:c5:38:58:76:
d6:2c:e3:49:07:30:51:0d:b4:bc:b3:34:79:3e:1a:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.240.0/21
IPv6:
2a03:d200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56366
Signature Algorithm: sha256WithRSAEncryption
9d:0f:15:64:d9:da:c2:78:d6:cb:62:53:cb:10:88:c0:fb:80:
f7:1d:f9:ae:21:d7:71:8b:07:d9:f8:03:98:70:6c:3f:7b:df:
7d:1e:4a:e2:08:ae:1e:8c:a3:9a:30:f4:38:1c:81:18:ed:15:
fc:ba:84:c9:56:c4:85:a7:34:48:34:1d:99:08:3f:7d:49:49:
95:2e:89:01:7d:e9:81:33:a5:85:e9:b3:cf:1c:61:d0:17:77:
7e:5b:94:c6:05:7e:78:be:3c:c4:e9:8a:cc:53:84:cd:9d:ef:
ea:f7:62:ee:54:b3:91:a9:8b:af:ef:2c:34:93:b4:b6:52:88:
fd:b7:3b:08:7d:c2:98:81:03:af:9f:7b:31:02:48:fc:d4:17:
92:01:30:fd:6b:13:23:e9:e5:62:ee:ef:29:35:5f:8f:e6:ad:
5d:fb:a8:b1:5b:a5:2d:b4:37:f8:10:c1:9d:de:6e:7a:33:99:
01:9b:cc:49:a9:f2:4e:d3:85:53:c7:90:ba:1e:15:c2:36:35:
12:96:03:fa:d0:b1:0e:31:02:a1:3f:99:b0:8c:73:69:25:bd:
fc:9a:0c:8a:4b:f4:68:9a:5e:bb:c7:2e:f6:46:10:61:88:44:
18:35:82:36:b1:51:4f:21:9a:0a:fb:86:9b:15:37:c6:15:f3:
6c:3a:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:37 2024 by rpki-client on console-ams.rpki-client.org