Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.cer (raw, json)
Hash identifier: RW+bF8xxBGI5e8qzfDBIKW8VCs/zAFxknZiHl0ZY/XU=
Subject key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C2E4422147A0F03F3F000BA7C74D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199936
IP: 31.131.48.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:2e:44:22:14:7a:0f:03:f3:f0:00:ba:7c:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:e0:23:a8:56:02:30:76:4e:7f:6a:eb:59:
99:b9:24:98:cf:5a:85:ba:5c:2e:ed:b0:c9:73:e3:
be:34:dd:19:45:9b:74:b4:af:01:13:7d:00:5a:db:
f3:e0:be:98:0a:00:e7:16:cf:a4:4c:d4:cc:ca:4c:
01:8b:49:23:8f:65:4d:0d:56:42:bc:eb:61:0b:58:
ff:80:0e:4b:63:b1:9a:9a:3f:94:bb:a2:5b:b0:cc:
75:8e:96:a6:63:63:92:46:31:0e:d8:be:81:21:f0:
8b:37:09:03:d6:0a:2b:a0:a5:52:45:36:ab:e6:df:
72:9a:d9:07:8e:34:af:61:62:db:ff:fb:53:ff:46:
c7:b1:e3:d8:cb:8f:bb:b4:7e:09:ba:d4:25:66:5c:
61:05:6f:90:d3:01:60:ab:b8:5e:fa:fb:90:ae:8f:
0c:a3:e3:bb:06:24:6f:9f:3e:d4:11:30:aa:cc:6b:
af:31:1f:94:20:d0:c4:19:c0:9d:e8:03:20:22:49:
ac:67:be:4b:b5:aa:69:96:51:09:0e:e9:ee:96:2e:
f3:4e:92:2c:7b:3b:31:2e:9f:16:33:99:0a:bc:db:
39:87:bd:01:20:f6:13:c9:23:49:5f:6e:12:1e:08:
5f:c0:ad:c1:67:df:8d:66:2b:1d:08:e9:ac:13:4d:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.48.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199936
Signature Algorithm: sha256WithRSAEncryption
68:25:ac:13:1b:24:77:82:ac:00:48:c6:88:9f:8e:4b:e8:d1:
09:1e:2f:30:4d:b4:11:6b:84:89:bd:32:d0:e3:4f:bd:18:ef:
7e:43:ef:12:16:40:92:59:a2:03:ba:2f:c3:fb:08:49:2a:a4:
00:3a:11:47:bd:cd:13:bd:1f:1b:a9:83:49:f0:f6:11:22:80:
00:1b:c1:27:9a:0d:29:f0:55:c0:52:45:b5:27:cb:18:64:eb:
f0:a7:e4:f1:dd:ba:d3:e0:d0:3b:85:82:89:a8:31:94:a6:1f:
8f:2c:0d:45:d0:69:d7:c3:06:93:6b:0d:d5:4f:2b:fc:c6:54:
70:61:9a:ed:d3:0a:fe:b4:aa:9e:da:4a:97:4e:09:ee:a2:4b:
5b:c6:be:9e:5b:b6:4f:53:0d:95:29:05:64:e2:e2:86:0b:15:
9b:95:ba:88:05:85:0e:44:5e:83:20:4f:ac:88:8c:fb:89:a6:
5e:ec:fa:51:13:af:f1:57:71:80:da:52:39:55:46:ed:bf:09:
c2:42:a6:f2:9b:c6:15:a0:25:d6:5b:3e:67:60:66:f8:e0:e0:
b7:f0:9e:f4:07:e7:96:f7:b6:ce:8d:d9:c5:3d:c4:13:ce:ad:
75:49:88:eb:8e:04:a7:b8:df:f8:41:dc:4f:71:67:1a:1f:78:
fe:3e:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:47:56 2024 by rpki-client on console-ams.rpki-client.org