Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer (raw, json)
Hash identifier: efpvZEIvNOfI9yruQe7RIzIkuFJSEWEWYbxXcOIvQRE=
Subject key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E331A625192D2F04FBB2D2A46EA847011
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Mar 2024 14:39:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6876
AS: 41544
IP: 31.31.96.0/19
IP: 37.203.0.0/19
IP: 45.130.0.0/22
IP: 45.140.120.0/22
IP: 45.156.36.0/22
IP: 62.16.0.0/19
IP: 79.140.0.0/20
IP: 85.238.96.0/19
IP: 88.214.8.0/22
IP: 95.214.40.0/22
IP: 130.0.32.0/19
IP: 176.119.64.0/18
IP: 185.21.51.0/24
IP: 185.23.104.0/22
IP: 185.145.104.0/22
IP: 185.166.220.0/22
IP: 185.177.240.0/22
IP: 185.184.168.0/22
IP: 185.206.36.0/22
IP: 185.226.112.0/22
IP: 185.228.104.0/22
IP: 185.247.20.0/22
IP: 188.115.128.0/18
IP: 193.163.196.0/24
IP: 193.178.48.0/22
IP: 195.78.92.0/23
IP: 195.138.64.0/19
IP: 212.24.112.0/24
IP: 212.90.124.0/22
IP: 212.178.0.0/19
IP: 2a04:2c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:1a:62:51:92:d2:f0:4f:bb:2d:2a:46:ea:84:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 14:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=602be661e57c14659a608e9f6be605d6250047fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:ec:a2:17:2b:17:d2:61:bd:07:69:c1:1b:
36:ee:e2:21:29:31:83:26:56:a2:17:f9:7b:56:49:
ca:e8:f2:f4:b0:19:35:93:61:14:1a:d4:07:9d:a1:
0c:23:35:e3:d6:4b:f8:46:67:30:03:30:75:43:0d:
13:9f:84:9a:60:d1:0c:3f:7b:f4:9b:1e:74:b4:52:
7d:37:16:a0:e3:c5:01:90:ba:bc:a4:12:c7:6b:94:
c2:1a:f9:8e:e0:9e:04:be:b5:f6:4d:6c:8f:4e:b5:
80:db:87:5c:3f:f1:7b:40:51:4f:e1:65:52:8c:6a:
7a:eb:17:ad:8d:28:32:bf:4a:99:89:bb:bc:e3:81:
e4:98:95:f0:a5:b1:20:ba:9e:ab:4d:97:41:d3:67:
59:51:0c:12:54:c1:2e:b4:1a:41:cf:fd:34:9b:40:
07:53:36:78:e9:1e:2e:ae:00:71:43:b4:da:80:2d:
3f:b6:12:44:04:fb:46:19:ab:5a:67:38:1b:86:be:
00:f4:99:b6:7c:0f:47:9c:9f:06:1e:51:f2:aa:7c:
07:7b:a1:23:d9:ca:8a:d2:0d:18:d8:ac:d2:48:8d:
e9:c0:ed:29:8e:76:fa:e3:49:63:99:40:63:f8:c7:
12:ec:5f:6b:99:f8:1c:27:1e:fe:04:41:69:13:dc:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.96.0/19
37.203.0.0/19
45.130.0.0/22
45.140.120.0/22
45.156.36.0/22
62.16.0.0/19
79.140.0.0/20
85.238.96.0/19
88.214.8.0/22
95.214.40.0/22
130.0.32.0/19
176.119.64.0/18
185.21.51.0/24
185.23.104.0/22
185.145.104.0/22
185.166.220.0/22
185.177.240.0/22
185.184.168.0/22
185.206.36.0/22
185.226.112.0/22
185.228.104.0/22
185.247.20.0/22
188.115.128.0/18
193.163.196.0/24
193.178.48.0/22
195.78.92.0/23
195.138.64.0/19
212.24.112.0/24
212.90.124.0/22
212.178.0.0/19
IPv6:
2a04:2c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6876
41544
Signature Algorithm: sha256WithRSAEncryption
46:2e:4c:e3:60:27:2f:e1:54:e2:a3:d1:53:f0:fb:09:ff:3b:
2d:5b:1c:78:87:d6:6f:41:12:50:3d:2f:11:94:1a:d5:2d:85:
a3:c3:10:0c:26:4c:71:2c:56:56:e4:b3:d9:45:aa:6b:26:db:
4c:af:de:3b:56:b8:37:49:1d:91:d6:62:43:3d:e9:22:c9:43:
09:90:59:ee:88:9e:88:18:e5:a2:c5:fc:32:03:fa:be:98:c7:
3d:3d:fd:fb:96:5f:dc:f3:e9:f5:29:d2:d1:eb:7a:a2:d5:d9:
22:7a:ce:d5:a8:a5:b0:ec:c8:d7:e4:ad:cc:49:56:39:dd:5c:
53:93:4e:53:86:55:62:69:3d:88:5f:0a:90:75:6a:d0:f4:8c:
53:be:77:d5:dc:2a:54:ee:79:71:bf:26:5a:70:73:85:51:f8:
4a:54:5c:4b:e1:9f:f9:39:4f:27:68:88:8b:eb:a3:88:b5:16:
8d:2d:b6:91:d7:7d:a1:72:e3:48:92:bc:46:2d:b6:19:cb:17:
0a:07:ec:8e:f9:ae:d1:56:ca:2e:12:f4:ff:27:d6:ab:62:12:
28:17:d1:0c:68:03:bc:79:d7:2f:7a:f2:21:e7:db:f2:ed:4b:
df:d4:5e:22:67:dd:8e:5a:44:d4:d3:d2:00:1d:88:e5:97:14:
21:ce:56:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 13:23:09 2024 by rpki-client on console-fra.rpki-client.org