Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer (raw, json)
Hash identifier: 49v7pZYmXJ0SIsEdIMYtAyRP7TlqhnPMTkuU57t/9CE=
Subject key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CEEC5A8AC8F7E3B32AD4749F0E30F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202767
IP: 185.135.116.0/22
IP: 185.155.60.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:c5:a8:ac:8f:7e:3b:32:ad:47:49:f0:e3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:23:85:a1:cd:ad:8f:f3:ee:1b:97:1b:d8:fa:
e6:5f:b8:d1:e8:17:13:44:12:c1:2a:6e:a0:5b:05:
77:cb:fa:2b:f6:e4:76:fb:88:5b:f2:63:1c:f8:2a:
9d:ed:3b:7e:f1:f5:25:4e:f9:61:fc:0e:5b:68:14:
e6:cc:23:6c:ea:55:9c:69:ad:92:84:3c:77:88:d3:
6f:87:8a:b1:0f:a5:b7:cc:79:16:36:7d:f2:71:ae:
96:03:b1:4b:a2:33:7c:5a:91:53:8a:31:b8:07:cd:
c3:c4:3e:40:c2:8c:5a:4c:da:08:2d:65:a2:99:7b:
e3:d9:0e:81:01:81:87:bc:28:a3:93:a4:ae:db:fd:
65:e7:fc:c4:26:d4:9a:a5:ea:f2:93:f8:4e:26:ae:
bc:b2:5c:14:77:f4:fa:e1:1d:63:c2:5d:f5:d8:af:
37:39:b1:60:a2:0d:d2:c2:95:d8:36:4d:db:88:55:
b1:81:fa:38:6f:53:43:45:eb:67:e7:f6:00:9e:14:
37:3a:e3:ca:29:b9:2c:da:3f:94:5b:34:da:21:39:
63:98:f4:29:4d:4a:ef:1b:77:1b:07:51:3b:55:b8:
5a:ef:b0:9c:e8:f2:1d:64:e3:c2:e3:79:fb:7f:50:
b3:3b:3c:93:63:59:1e:5e:bc:1a:0d:a4:be:5f:2c:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
185.155.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202767
Signature Algorithm: sha256WithRSAEncryption
a9:56:31:d7:3a:93:26:f0:75:21:68:74:0f:fd:f9:59:85:47:
28:1f:fe:36:e9:24:d2:37:ed:1a:f8:df:70:29:5a:e3:db:c8:
1e:d4:cb:0a:6f:bb:7e:ff:d3:90:cc:25:5d:16:9d:dd:41:22:
fa:b8:e7:b2:4e:de:fd:bf:19:07:1a:38:eb:9d:03:80:92:16:
8b:19:a8:5e:59:f6:14:0f:e6:ac:92:40:67:1f:48:96:33:2c:
4c:e3:58:7a:d2:0d:a7:aa:75:44:8c:f6:4b:7f:28:d4:b7:2e:
37:c1:a5:a1:d9:1d:0b:f0:66:7a:f7:ad:3b:7c:a9:52:36:ee:
7e:99:88:b7:88:3f:36:d0:ab:68:98:b1:db:7f:ec:19:d1:72:
43:63:25:72:58:8c:6b:94:83:d1:2b:47:4d:04:33:f3:dc:02:
ae:66:46:15:5f:00:64:b7:32:bb:6f:4e:dd:ca:73:c9:40:97:
7e:fa:dd:70:66:ad:68:ad:9c:15:95:0e:93:01:c8:db:fb:bf:
fe:12:7c:95:84:50:a7:12:e0:da:51:82:4f:a1:a1:93:a0:8f:
53:c2:14:82:d2:d9:8a:f7:ab:3e:9d:cf:b5:61:06:2b:e1:08:
ca:64:25:68:11:35:b7:8c:e8:0d:3f:98:62:9c:dc:c0:fd:bf:
97:7c:af:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 10:21:16 2024 by rpki-client on console-fra.rpki-client.org