Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y99pI0Ffxi0cSaXLfT0lBdYfBlw.cer
File: Y99pI0Ffxi0cSaXLfT0lBdYfBlw.cer (raw, json)
Hash identifier: S2TnBQecDfFNsncaIjVfOqu7/CjcrXsCATdgjbfkQiQ=
Subject key identifier: 63:DF:69:23:41:5F:C6:2D:1C:49:A5:CB:7D:3D:25:05:D6:1F:06:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2D657F4BD630BBC4F8DBE4F5B36EF29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/4/63DF6923415FC62D1C49A5CB7D3D2505D61F065C.mft
caRepository: rsync://0.sb/repo/sb/4/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 02:24:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210937
IP: 46.175.133.0/24
IP: 2a11:1d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:d6:57:f4:bd:63:0b:bc:4f:8d:be:4f:5b:36:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:24:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63df6923415fc62d1c49a5cb7d3d2505d61f065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:c4:9c:ea:8b:d0:dd:16:f9:7b:70:d7:66:
b4:65:76:09:a0:f9:7c:9d:05:17:16:9a:4e:01:7b:
4b:96:b4:c7:9d:1c:46:88:56:7d:04:23:86:8e:f2:
d9:37:bd:0c:8e:44:6f:c2:c7:28:da:c1:b8:08:79:
40:54:26:0e:70:f2:34:8d:72:9e:e1:01:23:d6:64:
a5:d9:33:5f:67:08:af:c7:92:6b:0a:8e:08:ce:96:
1a:ee:c5:3d:c6:6f:16:e7:b3:ab:cf:c9:a5:76:98:
55:94:05:04:26:30:e0:f8:b4:10:72:f5:bf:ce:5d:
a1:80:bf:c8:5b:f5:82:44:5c:f7:ed:4b:29:6a:6e:
02:68:35:df:35:f8:4c:58:e0:7f:3c:45:ea:e4:5c:
23:30:c8:3d:ec:62:a8:e2:f0:e6:3b:1d:a9:82:0b:
13:3a:b8:2c:e0:82:f0:31:fc:08:9d:b9:91:7a:bc:
85:63:ba:ad:4d:0e:e5:4e:28:06:96:1c:8f:6f:b7:
a4:e3:65:d9:07:ec:45:2f:ea:9a:55:04:16:b9:c0:
ec:1b:32:1a:50:91:d0:4a:d6:ca:67:dd:c5:bb:6b:
fc:c6:61:0a:16:13:e8:78:3c:50:ab:11:95:7b:48:
01:f6:8e:7f:8e:26:2b:73:3c:63:4a:23:63:e5:36:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:69:23:41:5F:C6:2D:1C:49:A5:CB:7D:3D:25:05:D6:1F:06:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/4/
RPKI Manifest - URI:rsync://0.sb/repo/sb/4/63DF6923415FC62D1C49A5CB7D3D2505D61F065C.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.133.0/24
IPv6:
2a11:1d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210937
Signature Algorithm: sha256WithRSAEncryption
b0:df:f3:bc:5e:a3:7f:88:db:0a:16:2a:5b:20:a4:d3:ae:10:
ac:d4:b7:a0:8f:77:b6:94:ab:cc:1c:d2:b4:e1:3b:e5:e3:32:
2e:3c:21:0c:14:2d:08:47:fa:b0:38:79:8c:42:61:77:f9:ca:
e9:85:3b:cf:e1:a1:ec:93:6a:08:93:bc:72:cf:9d:f7:80:ea:
fd:19:9f:15:18:ef:63:5c:e9:74:9a:16:6d:8d:bf:e5:c3:6a:
7e:19:ee:00:ba:aa:b0:15:ba:d7:b0:35:5e:97:37:37:72:9d:
d1:c1:b8:3d:74:2c:ed:80:83:f4:f1:b1:74:2e:bd:24:c7:aa:
b1:da:09:ec:30:6b:86:70:f4:66:37:e1:e8:18:50:6e:e7:23:
aa:58:41:f9:1d:49:92:5d:b0:99:8f:00:96:01:c4:d0:44:37:
00:20:38:3c:5f:55:df:81:eb:bd:34:57:ac:be:03:9e:36:d7:
40:d8:19:3f:f5:6d:a2:03:c2:ba:52:03:e6:92:3b:b6:d3:67:
39:ab:b4:f9:26:d7:74:ec:22:14:f9:b3:cf:b6:ca:94:7e:26:
8b:24:58:02:6e:d9:a7:aa:61:97:d8:5f:9b:e8:57:6f:e2:d7:
04:0b:8f:d3:2d:4d:83:b4:c0:9b:de:cf:02:24:58:bd:50:7b:
18:31:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:21:08 2024 by rpki-client on console-fra.rpki-client.org