Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
File: YAG5U8a-H5GDHWilwBFcIODNf5o.cer (raw, json)
Hash identifier: C1t254wW/W03ExrmFHZtbT6x9py2FZdg5OvZxXsOln4=
Subject key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CED8021800A6B64234F0D8F05CB64ED3C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 09:14:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42220
IP: 185.214.176.0/22
IP: 217.18.160.0/20
IP: 2a03:9520::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:80:21:80:0a:6b:64:23:4f:0d:8f:05:cb:64:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 09:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:b8:fa:4e:83:74:96:0c:36:07:ce:55:28:
fb:b5:5f:86:4a:a1:99:54:1d:45:27:65:98:ef:42:
d7:ac:45:3b:3d:9e:5d:ce:af:e8:58:a6:c9:b6:f1:
f6:dc:6f:55:b0:df:2f:e7:c8:c7:08:30:5c:d1:e2:
ec:f5:80:2a:a6:da:96:5d:d6:6f:04:08:ad:88:89:
0d:fd:85:13:99:b1:2a:d6:02:20:03:c2:17:2a:cb:
ea:a2:8a:4b:88:28:6a:35:60:bc:6d:d6:d6:8b:83:
2f:9a:53:3a:6f:18:1f:17:78:14:3b:0a:7c:f6:d1:
e3:58:ef:76:5b:e8:27:b1:9b:65:bd:95:cb:be:1e:
bb:43:25:aa:2e:69:4b:fe:7a:df:a9:4f:fc:e9:9f:
27:5b:9e:d0:bb:34:4c:b1:66:d1:79:3d:71:18:5e:
20:16:2a:94:a7:e5:f0:c7:44:66:11:c3:5b:22:a2:
a7:c0:e5:00:f8:78:dc:11:ca:bf:55:e3:b4:33:f3:
de:81:32:fc:14:36:02:3b:dc:47:f6:10:ed:98:23:
06:54:5c:35:1d:99:49:78:54:f9:72:b7:67:b9:fa:
68:bc:70:b6:c5:fc:8f:95:c4:ce:5f:bd:69:dc:93:
58:d3:4e:64:a5:48:f1:24:5a:26:71:64:a2:17:1d:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.176.0/22
217.18.160.0/20
IPv6:
2a03:9520::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42220
Signature Algorithm: sha256WithRSAEncryption
00:22:f5:df:fe:6a:96:9f:f8:6b:89:8f:ec:c4:56:c4:02:c7:
6f:db:18:d3:01:07:06:2e:81:a9:c9:79:2f:0f:6a:8f:78:ad:
e3:a5:b8:71:40:03:59:21:2a:55:df:d9:ea:bf:c7:53:a7:78:
58:f0:65:f6:2f:20:11:41:26:3c:26:35:e1:01:0f:12:7f:b1:
64:df:c0:b9:19:af:56:27:c2:dd:9b:d9:ba:9c:cf:7f:24:b9:
18:95:fc:70:5c:d2:d9:f4:8a:31:d6:2b:69:26:79:e4:3b:b6:
55:c7:10:2e:64:bd:25:9f:5d:55:7a:7a:c7:54:ce:51:ce:cb:
5f:50:1d:f3:65:94:31:73:22:e3:07:06:9c:8c:c7:28:2e:be:
3c:02:2f:0b:67:38:c3:95:92:9c:d1:08:9b:b0:5c:ec:34:fc:
9c:f5:75:f8:fd:2e:d8:19:92:ff:d6:94:18:f2:d6:2c:ed:92:
3c:3d:46:4c:b9:83:17:e7:3b:e1:85:f8:5c:7d:a9:48:98:ff:
8c:ac:90:f5:71:06:a9:18:26:49:8a:01:52:e8:ab:0d:53:88:
dd:31:69:73:27:ad:2a:6d:53:59:f1:20:91:e4:ee:92:83:0d:
db:54:5b:66:51:1d:11:1c:7c:5a:e4:87:8f:8c:b6:e0:3f:75:
f5:2f:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:43 2024 by rpki-client on console-ams.rpki-client.org