Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer (raw, json)
Hash identifier: YF8t+c6fZ8O6X8CQbgyYybsVTMRQ+fBYCvT8labj1Ik=
Subject key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7A2B31B44B201729D66AC1260D8C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.236.45.0/24
IP: 2a10:9340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a2:b3:1b:44:b2:01:72:9d:66:ac:12:60:d8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:a0:17:42:ad:b7:27:b5:c7:c0:34:f1:26:
89:b4:f2:90:d4:61:d3:de:ae:4d:98:05:24:f2:d4:
ac:cf:56:91:20:c1:41:66:f8:e5:69:99:13:92:f4:
fe:59:6c:a8:55:56:3b:05:c3:96:c0:78:f7:42:50:
4a:ee:1a:9b:de:4c:89:f0:54:6b:12:60:b5:d3:2d:
2a:ea:ce:94:9b:7a:99:52:6b:8a:26:4d:2c:fb:e4:
a4:87:2a:93:f1:ec:77:2c:df:98:fe:36:ed:80:94:
ae:1a:d1:25:b9:02:d7:0a:86:ba:f1:f2:fd:3a:69:
4b:1e:8c:29:36:ab:2b:33:91:fa:a7:8c:44:6d:89:
3b:ac:9a:43:0d:d8:c7:35:9e:e8:e2:08:33:7a:56:
bc:86:61:08:d9:61:7f:bf:9b:f2:54:06:58:1d:7f:
c3:4a:30:08:08:bc:dc:26:f8:ae:67:8b:9e:59:bf:
b9:46:7b:df:b6:be:7a:5b:73:7d:d0:2a:5d:c6:e2:
4a:15:93:48:cc:cd:49:99:9a:7e:e4:09:6b:d3:92:
f2:2f:50:61:35:36:59:a0:69:e2:4e:45:ed:df:1c:
89:c2:0c:85:e6:27:d9:21:5d:19:a8:f3:9f:4f:d6:
f2:93:44:90:51:5d:72:dc:bf:b2:9b:95:83:97:4c:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.45.0/24
IPv6:
2a10:9340::/29
Signature Algorithm: sha256WithRSAEncryption
20:2f:3e:f7:06:9b:f5:01:60:02:26:00:36:65:ef:17:30:28:
1e:d7:52:53:34:03:52:77:9b:8b:50:3d:3c:d1:e0:81:69:12:
56:e4:be:1d:26:d3:a3:c8:00:16:43:61:34:00:ab:d3:a8:28:
ce:0e:fe:92:b7:7c:de:c6:8a:76:09:69:87:b2:33:d6:46:1d:
61:21:b8:3e:47:27:d9:3a:52:b2:25:b0:1d:89:5f:2d:5c:33:
57:46:88:5e:a0:44:38:23:54:ff:6f:18:7b:1e:93:b0:73:53:
41:a3:97:bb:99:cf:54:5b:bb:48:9c:e3:80:f8:e6:00:9c:c7:
2b:99:fb:87:35:08:83:56:a1:c5:f8:86:18:cd:b2:e0:4a:e5:
b5:36:75:a7:0a:74:ae:62:5f:96:10:b7:70:d7:d8:53:4b:1c:
92:40:c9:14:3d:f9:eb:8a:ae:24:3a:50:75:ff:35:6d:3c:4e:
52:57:30:e1:6f:14:72:e8:65:13:d1:4b:59:57:f8:ba:cd:fa:
ac:41:07:21:f6:a1:b8:25:12:fe:9b:f3:37:c6:e9:e2:ef:06:
37:4e:28:06:d0:ba:82:56:e8:3d:6e:5d:7e:6e:17:b6:58:04:
7a:cc:15:6f:61:05:58:f8:ca:6a:9b:b8:6f:78:24:82:c9:6d:
7b:a3:99:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----