Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.cer (raw, json)
Hash identifier: NI5YmC5HsPEoYdL4KlDhfHGLvRN2W47k1oKuJGr8JKw=
Subject key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254B158F4ABFB2CDE0C2702934338C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.149.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4b:15:8f:4a:bf:b2:cd:e0:c2:70:29:34:33:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:51:64:51:54:06:1a:f8:ee:d7:87:7b:ea:
cd:51:88:6a:09:01:4d:8c:38:65:80:0b:fe:2f:29:
28:ec:9b:1d:53:0e:bd:6a:b2:39:61:87:6f:7d:6d:
c8:d2:47:da:46:18:c0:51:25:54:50:25:ee:35:82:
a7:1a:a4:6d:27:bf:c2:3c:45:01:54:55:9a:23:10:
7b:20:46:e6:ad:17:06:89:91:7e:81:7d:9b:f9:9c:
3f:39:c2:2e:78:eb:6d:30:4b:b3:14:64:56:56:3e:
cc:7c:b9:ad:ff:e9:44:66:2c:98:5b:c9:7a:ad:8e:
ae:e1:25:bc:21:bc:e6:26:b0:76:a6:a5:13:be:6d:
b4:1e:9a:50:9a:fb:3b:ad:e7:01:c6:5c:be:f0:54:
a3:71:1b:5b:7a:86:ce:f4:43:45:32:fc:a7:85:c3:
4f:3f:33:10:7e:94:20:18:32:ba:f6:de:c0:e8:44:
dc:cd:a0:04:e4:01:5e:d7:bb:59:4f:3b:ba:d6:4c:
17:31:a5:e9:01:2b:a4:9f:b4:31:b9:1f:b9:26:26:
81:1c:86:11:20:24:1e:53:8f:25:c7:aa:b0:93:19:
29:bc:43:96:83:4c:97:e3:06:ca:78:c1:fd:58:a8:
80:76:ff:ec:74:71:37:90:a8:5e:ad:10:96:d2:2f:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.71.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5b:fe:e3:ff:e4:1f:f1:c7:aa:c4:7e:c1:40:23:21:ac:49:
fa:43:72:73:c5:b5:bc:24:b8:23:18:b1:f9:a4:86:51:c6:35:
2f:53:d9:74:02:e9:05:f7:45:cc:53:bf:07:d2:98:b3:4d:80:
3b:dd:75:9a:cc:9e:3f:43:70:5f:8f:74:1d:7f:06:3b:67:2f:
71:fe:2d:92:01:ad:f1:9d:21:7f:6b:8a:3e:4a:e9:6d:d6:8a:
09:a0:ae:55:8f:ef:90:4d:20:78:97:aa:75:8e:46:2c:21:c8:
1f:84:db:ea:bd:31:6a:b9:06:a5:ca:2e:08:a2:d8:e1:ce:31:
1e:82:dd:17:dd:2d:f6:7e:21:cd:45:fb:b7:03:7b:ea:95:c8:
62:70:1f:2b:17:40:ac:ea:ce:59:5a:66:0e:e3:45:e5:95:63:
f1:4f:0d:cc:5c:96:c2:e7:6c:64:25:ea:16:73:4a:7b:49:65:
a7:31:16:45:b8:20:cf:d1:dc:70:74:b1:8b:ce:48:55:19:a5:
c9:2c:e3:92:16:1b:6f:e5:ef:f4:85:3b:09:2c:a2:ee:1a:15:
fc:71:27:9b:03:32:24:81:39:4a:75:53:f9:3b:2a:42:5f:ec:
12:15:fd:e1:54:76:74:7a:5a:3e:b5:56:83:c6:61:ff:25:5d:
1f:a4:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:05:14 2024 by rpki-client on console-fra.rpki-client.org