Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.cer (raw, json)
Hash identifier: 90yck9Zx0XQWv+SaNjNtio117RRNRUAJ1rzoU8FX/4s=
Subject key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4879A5600C4A538AAF033E65704C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.238.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:79:a5:60:0c:4a:53:8a:af:03:3e:65:70:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:a9:a9:5b:59:0c:54:f8:ba:53:da:04:f5:
f3:86:f4:ea:b2:57:29:08:1e:d5:b5:1f:81:04:f8:
49:63:54:e0:b5:be:5f:2a:37:25:7d:c6:d3:5b:0f:
15:26:39:05:d1:f7:8b:42:a8:0d:28:06:fe:c9:9f:
35:9a:0a:2a:cf:2c:80:c7:65:69:65:93:1d:26:ae:
d9:8e:9e:dd:ab:a1:de:cd:63:82:e9:7e:89:13:19:
a3:2a:0f:7e:10:ad:73:73:f6:5e:78:80:7f:fb:da:
ec:a1:b6:2a:41:29:3a:cf:9e:5f:dc:ab:6f:dd:19:
d1:a1:22:78:96:95:b1:07:0e:a4:e0:81:5c:ec:c5:
b5:f4:0e:8e:c0:9d:89:18:fb:de:96:e3:12:5e:bc:
27:2b:92:7d:81:bc:b7:90:2a:ec:67:1e:69:bb:5f:
61:ae:f1:87:a7:37:8e:c4:44:bb:eb:bc:50:e8:6d:
b8:3c:9e:5f:3d:39:37:ea:f1:9b:1c:1e:90:b5:9b:
37:6f:c9:8b:8d:00:6e:0a:b1:71:a4:93:e3:b2:b1:
09:da:0d:14:18:55:2c:46:b8:3e:0c:1b:1b:77:67:
d0:fd:1d:b0:5a:73:41:29:c4:62:b7:2c:ce:b1:fc:
5b:6e:93:d6:c9:f5:ef:e9:55:ad:c2:5b:f6:16:41:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.27.0/24
Signature Algorithm: sha256WithRSAEncryption
52:87:66:41:1b:6a:c0:8d:71:df:b7:80:62:41:ba:b4:de:fe:
2a:45:4d:50:d0:22:47:72:d7:a1:d6:6a:2b:1b:a0:2e:51:21:
e5:1e:08:65:a3:a0:61:50:77:9d:5a:74:3e:6b:8a:ae:0f:51:
82:b8:87:03:50:83:bd:d8:4d:39:a7:aa:55:c4:d6:06:b1:95:
b9:e8:05:42:19:e0:69:3e:d5:3f:b8:37:ae:a4:97:ca:2d:b5:
04:fc:b1:57:f7:ed:a5:c2:f1:ee:96:97:6a:7d:84:9d:d5:b1:
bd:c3:ff:29:e2:51:0a:8e:73:46:d1:bf:96:42:92:e9:bd:4a:
82:51:2a:03:4e:bb:1e:c0:fd:30:87:07:e0:8c:4b:93:e3:be:
bf:97:98:6e:e0:99:cc:fd:7a:82:e6:e7:97:f6:90:62:34:f4:
1c:77:a8:00:b0:b8:50:d0:22:1c:c3:20:9d:9c:39:77:5f:ca:
31:d5:19:9f:f6:f8:e4:3f:5d:b6:5b:b6:ac:b8:db:7c:43:89:
24:d1:57:37:d0:10:fa:b2:40:71:71:f4:fe:21:fc:65:13:88:
d0:36:1b:52:ae:cb:54:40:ff:e4:56:91:94:ba:01:3b:b5:ef:
5b:f9:fc:9a:c6:c3:f6:ef:e2:49:eb:b7:c0:f9:04:e1:62:36:
63:76:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:11:00 2024 by rpki-client on console-ams.rpki-client.org