Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer
File: Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer (raw, json)
Hash identifier: DYl6PFBuQe8gWk/gG/pUonJSLtPQN9a2S0RsL1s1IcM=
Subject key identifier: 63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4C4D7F649C7D5B2883A0C132F47182A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 11:24:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202076
IP: 185.0.2.0/24
IP: 2001:7f8:137::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:c4:d7:f6:49:c7:d5:b2:88:3a:0c:13:2f:47:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:24:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=635199cdc46cb6919367127d69c22339e990ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:d6:9f:21:d0:b7:01:23:f7:40:98:88:be:
5a:3a:b1:58:f0:1e:8d:22:52:56:86:f2:d0:43:c9:
de:54:bb:bb:93:06:de:da:bf:c8:19:48:f3:bb:09:
65:82:90:8a:d4:ce:4a:26:1a:c2:21:ec:66:24:92:
a6:bc:92:fd:fc:64:4c:0e:5d:53:52:c5:a8:d6:2c:
bf:6a:80:88:0c:ce:c5:e2:fb:a6:1d:34:6d:03:32:
39:54:c2:03:3d:12:10:63:a0:48:9f:a4:8b:b2:8e:
bb:50:fd:8f:f7:92:58:e8:9d:e6:92:aa:a1:d3:2b:
e3:aa:1d:79:42:1e:6f:ac:46:c7:f2:19:1a:2f:b0:
da:09:f8:61:c9:bd:a0:a6:2c:53:1e:74:84:c5:d4:
e7:0f:7c:f5:f9:96:d2:42:f5:c5:20:54:f1:30:c6:
b7:c4:2d:84:bd:63:9c:4f:ce:49:3c:a8:67:a8:9e:
f3:bd:b3:1e:ee:5f:41:1a:fc:48:2c:ce:b5:f5:7f:
30:3c:ec:96:76:3c:91:88:58:41:9e:0d:a9:42:b6:
e3:a6:a5:4d:27:a4:43:1a:a7:b8:93:17:52:39:49:
d0:f8:f4:6a:1f:1d:9c:d5:d8:a5:0b:fd:5c:60:36:
bb:5a:c1:76:aa:2a:5e:2b:49:62:96:43:d2:06:19:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.2.0/24
IPv6:
2001:7f8:137::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202076
Signature Algorithm: sha256WithRSAEncryption
35:ec:8c:f6:b6:89:19:df:78:4e:1b:5f:88:2a:93:e5:e9:1c:
0e:ca:ac:45:4d:bb:6a:48:db:34:ce:b7:c6:db:28:7f:ca:30:
3d:b0:de:a4:81:d0:6b:ad:04:b5:b0:2e:c9:d2:df:97:ba:12:
0a:bb:b9:62:29:f0:84:39:d9:8e:f8:63:e0:22:2d:24:6b:5d:
fb:eb:7d:76:51:c7:ee:d2:23:36:72:5b:3f:97:bc:e4:29:80:
46:8d:b3:7f:8b:48:a5:4c:41:85:44:ad:36:68:00:8a:e2:66:
67:13:64:96:e9:5b:e1:15:47:ff:6a:81:f2:bb:13:cc:61:13:
30:e7:80:bc:46:46:0c:91:0e:aa:82:da:af:51:05:f9:22:99:
d3:fc:29:6b:9f:11:31:6d:22:9b:b5:36:79:da:24:65:61:46:
9f:b3:79:a9:75:a3:06:56:23:5c:ce:9f:3f:8b:a6:eb:42:2c:
fa:aa:55:4d:79:da:e4:55:3f:ad:1a:49:7c:a7:f4:6b:07:e4:
04:ef:e2:73:f2:31:5d:3b:63:83:d6:87:09:b9:9b:49:a9:19:
02:8d:a1:a8:b5:75:b5:9e:83:e3:db:7e:fa:29:4f:3f:b7:2f:
ab:57:a4:dd:63:fc:b8:12:16:c2:ef:85:c4:1a:e4:ea:24:90:
c8:79:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:05:03 2024 by rpki-client on console-fra.rpki-client.org