Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
File: YB3cYHmSY_-5vQ5e6whyhD3uanI.cer (raw, json)
Hash identifier: eW8pIwVV+9Kuvl4J+O8chkU5xSyKIbc9yCvbsZKnxxw=
Subject key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E9F323310A8D44E7C0F936F57E9D72575
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Apr 2024 14:24:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.235.15.0/24
IP: 103.54.88.0/22
IP: 103.126.48.0/23
IP: 103.209.228.0/23
IP: 2a00:9940::/29
IP: 2a04:e880::/29
IP: 2a06:4b80::/29
IP: 2a06:8540::/29
IP: 2a06:9dc0::/29
IP: 2a07:35c0::/29
IP: 2a09:2340::/29
IP: 2a0a:6cc0::/29
IP: 2a0a:cfc0::/29
IP: 2a0c:52c0::/29
IP: 2a0d:8180::/29
IP: 2a0d:c500::/29
IP: 2a0d:fd80::/29
IP: 2a0e:3dc0::/29
IP: 2a0e:7fc0::/29
IP: 2a0f:f9c0::/29
IP: 2a10:c80::/29
IP: 2a10:5480::/29
IP: 2a10:7b80::/29
IP: 2a11:3f40::/29
IP: 2a14:2b80::/29
IP: 2a14:5c80::/29
IP: 2a14:6580::/29
IP: 2a14:7080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:32:33:10:a8:d4:4e:7c:0f:93:6f:57:e9:d7:25:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 14:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:e8:2c:f9:86:ea:dc:63:a8:50:cd:9b:62:
88:e1:d7:01:d7:97:24:a0:24:3d:3f:3f:7a:f5:be:
57:3f:d6:27:02:62:d4:3e:ff:35:19:c7:17:6b:58:
ff:e7:77:b6:3e:c4:b0:26:b0:74:a2:7b:a3:2f:5f:
fc:74:c4:11:d8:7e:d8:21:72:f5:80:a9:af:78:e1:
5e:8f:2f:48:b5:88:8d:34:96:92:89:6b:9c:2b:70:
7d:ab:ce:e0:5d:dc:99:45:f2:49:86:bb:1a:cb:d5:
e4:31:c7:17:6e:d1:5d:e5:43:a0:7c:52:14:37:c5:
1f:e9:f5:2e:3a:1f:fe:8c:bc:47:73:86:8c:77:da:
5d:ae:cd:5c:16:31:a3:a4:83:96:9e:71:8d:c1:82:
3b:84:32:3a:21:c9:69:cf:75:2f:04:10:2f:78:02:
7d:41:67:d2:ba:29:f4:e6:7b:b4:d3:65:f7:92:ad:
13:3e:36:58:b4:fd:16:d2:ba:4a:e9:82:49:4b:05:
23:44:a9:32:51:4d:69:b1:e1:2c:88:20:e8:36:93:
bd:80:a4:b4:09:35:fc:dc:b4:a1:05:ef:36:d7:8b:
e2:ce:25:f2:58:9e:19:58:cf:df:9f:04:a0:61:e2:
46:c7:61:f6:7f:12:92:20:53:0a:42:88:4e:34:b8:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
103.54.88.0/22
103.126.48.0/23
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:4b80::/29
2a06:8540::/29
2a06:9dc0::/29
2a07:35c0::/29
2a09:2340::/29
2a0a:6cc0::/29
2a0a:cfc0::/29
2a0c:52c0::/29
2a0d:8180::/29
2a0d:c500::/29
2a0d:fd80::/29
2a0e:3dc0::/29
2a0e:7fc0::/29
2a0f:f9c0::/29
2a10:c80::/29
2a10:5480::/29
2a10:7b80::/29
2a11:3f40::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
82:a5:7e:06:d8:08:c2:cb:7e:19:9d:e5:56:23:8e:83:73:af:
73:28:e2:4a:a8:dd:1a:54:34:f2:2d:2a:5b:df:93:84:7d:89:
ca:f8:a8:3e:b7:06:29:df:b7:15:55:6b:46:ff:8b:cd:1d:bb:
57:ce:fb:6f:df:83:0a:b5:31:8a:0f:31:47:83:d4:c1:6d:50:
ad:98:29:3c:d7:75:99:1c:01:51:44:f9:e4:9b:ae:2b:54:fa:
63:60:9a:0a:0e:72:9b:61:89:57:c4:3e:de:e7:84:5c:e0:94:
b6:50:bf:db:24:0c:fe:16:2b:24:3d:e2:97:99:1b:22:50:99:
c8:79:77:5e:81:38:b7:76:2c:b3:f3:05:13:21:63:88:0a:1c:
34:ff:09:1c:e0:3c:56:55:d0:50:aa:e0:05:4c:f4:eb:26:0a:
ca:5f:19:ad:fa:33:9e:dd:9f:f8:3e:19:f8:a5:9d:1e:7e:b5:
f4:bf:93:1b:cd:0a:60:45:20:25:2f:be:3e:07:24:a8:cc:ca:
9c:f7:2d:b5:5e:69:91:a8:0a:5f:73:6f:e5:5b:70:b7:28:d5:
94:0a:9e:fb:b7:3d:58:b1:a9:ea:4b:ee:2b:e3:fa:be:27:3a:
50:cf:16:f3:19:6c:99:2b:55:65:e7:a1:0d:f6:5b:84:c5:cb:
95:77:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:04:25 2024 by rpki-client on console-ams.rpki-client.org