Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
File: Y9krglYVmJTSubJfTYWYbBcnI8M.cer (raw, json)
Hash identifier: pwkVDQajk+N/mvGphlVvOqVDxSkXborKZyKEnFbA7Us=
Subject key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC501553D49FE35707B10DB133E53D0EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29033
IP: 81.20.32.0/20
IP: 185.129.176.0/22
IP: 2a00:1fd0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:55:3d:49:fe:35:70:7b:10:db:13:3e:53:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:36:68:73:fb:48:1d:ee:dd:18:38:eb:9c:
82:29:e4:d0:83:99:b7:cb:9f:f8:c5:bb:34:3a:58:
cc:87:05:82:72:76:62:02:82:3a:ee:a9:c0:e6:c4:
a1:62:cf:03:2d:70:06:22:10:3f:ca:f4:81:41:43:
b9:aa:6f:e7:46:8f:0c:36:d5:da:a2:d7:d1:ad:0f:
79:78:b4:e8:a0:a5:d7:0d:af:bb:f4:1a:3d:eb:f8:
91:a1:bf:ba:41:96:f5:2f:ea:f2:73:50:b8:b8:1d:
c9:80:b2:88:66:90:1f:be:fc:36:32:ad:57:ac:b8:
25:60:c6:3f:6c:5e:4d:c4:52:08:c0:9e:a2:b9:d2:
a7:44:d0:fd:2d:b2:84:03:51:95:f8:40:40:2b:4f:
54:9a:2e:44:82:02:31:32:c6:96:3c:95:dc:57:16:
56:56:73:b4:70:51:89:38:aa:a3:05:9c:ee:c9:c1:
33:3c:fb:71:5f:a5:b1:d4:fa:a0:c9:4a:e6:7a:f9:
45:f3:73:3a:76:b8:03:e2:15:41:69:dd:ca:d8:a3:
fa:cf:89:d9:be:da:41:a0:da:ba:43:ad:03:1c:c6:
a5:a0:08:0d:57:df:b1:f1:09:45:95:d2:5e:de:50:
6b:aa:cf:12:b3:b7:80:f7:3c:43:5f:26:33:5a:ec:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.32.0/20
185.129.176.0/22
IPv6:
2a00:1fd0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29033
Signature Algorithm: sha256WithRSAEncryption
5e:12:b3:64:35:90:7f:1a:24:79:4f:94:4f:28:c5:42:04:e9:
ff:76:0b:2a:ef:0d:b8:c0:3e:ce:8b:78:3e:8c:83:5a:68:93:
a9:a7:4d:ed:fc:4a:05:2f:36:2f:a6:65:cc:4f:f9:10:05:a6:
63:52:1a:4c:7f:07:f3:f3:61:40:26:79:ff:40:fc:14:db:37:
da:d5:f2:52:8e:72:e0:17:4c:09:56:01:85:dd:56:72:4f:61:
30:dc:18:28:83:36:11:c9:3a:e1:0b:c4:02:0b:63:23:0d:f5:
b7:4b:1f:dc:96:23:3d:5c:f3:84:67:e8:35:ba:65:b6:3e:7a:
50:28:33:b9:89:66:c0:dc:2d:05:f1:50:78:7c:c7:cd:98:b9:
cb:6b:43:af:b0:05:84:95:66:26:ef:00:88:ec:57:0b:4f:16:
80:11:89:bc:10:c6:ed:8e:a9:63:73:5a:52:0f:b4:a2:bd:0a:
fe:24:13:77:6f:47:61:8e:f5:d8:ee:03:4b:47:6e:14:b5:35:
39:a2:bf:b2:d8:df:10:bf:aa:e5:eb:1f:50:10:36:4c:6d:63:
20:b0:40:c5:e0:11:7c:0e:8d:5b:35:d9:ea:f3:45:5c:f5:ee:
0a:61:4f:53:9f:b0:3c:54:b9:e7:62:8f:74:d0:3b:b8:44:40:
2d:10:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:04:24 2024 by rpki-client on console-ams.rpki-client.org