Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
File: YEEHLuGhscBoQS37A1XSdZkyxfU.cer (raw, json)
Hash identifier: YJY4iPswiGf7Vi8AohWZIaTol6DsM3LfaumTFya/jcM=
Subject key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4EDCE624ED62E1197AA5CDB796EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29302
IP: 5.63.144.0/21
IP: 37.130.224.0/21
IP: 146.185.16.0/20
IP: 185.2.136.0/22
IP: 2a01:5a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4e:dc:e6:24:ed:62:e1:19:7a:a5:cd:b7:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:77:78:bb:86:f5:52:39:3d:9a:02:c4:d5:
5c:51:f1:80:0c:61:56:90:5b:0e:73:37:5d:dd:1d:
e3:fa:3d:36:f1:f5:5d:68:ff:9f:33:a1:ed:2f:a8:
ab:9d:58:0d:8b:9e:e6:e8:38:02:de:2c:d0:2e:dc:
e4:d5:a5:0f:c3:f9:20:67:d8:58:76:08:a6:c2:0d:
31:ad:f9:2f:05:17:47:a1:33:cd:1e:50:76:04:fd:
80:99:99:97:80:86:23:10:88:d8:15:02:67:54:c6:
d7:3e:8d:e1:3e:b6:51:ab:c7:d5:78:98:2b:3f:a3:
3a:b7:cc:a9:9d:f4:aa:20:71:2b:7a:06:df:bc:79:
28:21:6d:a3:51:78:b2:4f:d2:3d:6e:5c:a1:49:e3:
4d:c8:1f:ff:f4:90:a0:47:50:1c:be:9f:f9:72:be:
62:bd:25:97:bf:9a:69:ca:69:0b:88:6b:4f:44:6c:
64:6f:99:64:1e:b1:42:97:ae:69:1a:8e:48:a4:19:
32:b6:c4:da:9c:08:6d:6e:43:3d:c8:8c:29:bc:39:
83:b7:f4:bd:25:a4:50:a8:71:65:47:96:b9:7e:c4:
bd:93:64:a3:66:87:0a:54:9c:9e:14:f7:e9:40:e7:
cc:f1:af:3b:75:2a:b9:c8:62:6e:f6:2a:b3:1e:eb:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.144.0/21
37.130.224.0/21
146.185.16.0/20
185.2.136.0/22
IPv6:
2a01:5a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29302
Signature Algorithm: sha256WithRSAEncryption
06:69:12:73:f5:f9:58:82:7e:1c:58:53:4d:8f:cd:78:78:af:
e5:a7:9b:28:cc:72:c7:3f:e3:25:78:ee:e6:d8:fd:37:d3:f4:
24:ef:a2:c5:c0:10:8e:10:b3:08:ba:ae:6d:5b:42:16:b3:11:
d9:4c:2f:ea:73:0e:99:5a:da:f3:18:92:c4:cc:57:ba:33:de:
d0:cf:a5:26:8d:37:f6:a3:1b:c9:d4:49:a9:f1:c3:c1:f4:bb:
08:94:93:9d:1d:1d:cc:09:1d:3a:8e:73:2e:84:af:5c:49:b6:
06:49:7f:52:02:39:3a:0c:dd:4b:4c:9a:81:4a:60:ef:32:7b:
74:99:db:06:83:37:d5:c3:a4:1b:61:ac:80:2c:92:cf:db:f3:
b4:89:34:79:65:39:ef:ed:5f:db:9a:2f:9d:bc:a0:99:a6:df:
83:43:38:8b:7b:a0:bc:6e:44:70:68:14:a2:73:94:39:8d:30:
b5:d3:31:9f:8f:9b:d0:ae:46:d2:46:26:60:d6:16:eb:31:ab:
0b:df:16:41:59:6c:b4:69:43:13:b9:1f:be:22:c2:ce:a5:63:
f5:f6:f6:12:03:cc:0d:99:37:ba:41:3f:35:83:48:10:4b:c6:
1d:c7:39:13:44:ed:99:61:c5:5d:32:63:34:50:de:09:1c:80:
85:14:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:36:35 2024 by rpki-client on console-ams.rpki-client.org