Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer
File: YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer (raw, json)
Hash identifier: FxhS2bwrgpcWrOIgmkHL0dp8jYWYToDt4bhm4P+aMB8=
Subject key identifier: 60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349609AEE258C8FC6F04DC2F592EBCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.22.243.0/24
IP: 193.22.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:60:9a:ee:25:8c:8f:c6:f0:4d:c2:f5:92:eb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:d6:fd:4f:fa:b1:44:dd:a2:12:24:57:ec:
1c:e8:fe:ab:6f:c4:04:6f:9d:ce:5f:3d:1f:28:3d:
0c:2a:fa:ba:eb:d5:0d:83:c9:88:05:23:b1:de:28:
ea:d8:12:00:54:77:c6:35:95:1c:e8:6d:e4:de:9b:
c5:26:0e:63:f7:f2:9e:3b:c8:b6:58:c0:9c:68:96:
b5:30:d2:3e:98:f8:db:c6:2f:55:f1:8f:c9:d9:bc:
68:26:de:62:da:c4:34:14:16:67:4c:2f:a5:3a:fa:
c0:c3:88:94:f0:78:bf:1a:bf:b1:94:ac:d9:a2:e1:
dd:db:07:fb:68:0a:e0:0f:9e:ef:37:fd:db:c8:72:
10:b7:78:66:6b:10:68:28:aa:ff:64:76:53:bc:a8:
a0:03:15:f1:cc:49:5a:cb:cc:84:37:b9:58:31:8a:
8a:05:11:b0:31:eb:b7:69:bf:f8:f8:fe:57:c7:31:
cc:7e:e8:03:54:e9:b3:ea:e9:6b:a6:b3:b7:d0:94:
44:d8:d8:f8:d7:f4:46:3a:40:9a:41:e8:84:98:dd:
33:fd:33:f1:72:bd:d1:45:c7:9e:8c:5b:50:a9:8f:
77:3d:0f:06:fd:07:a2:ed:23:5f:59:10:03:14:01:
e4:12:b1:11:42:d4:c7:9d:fe:71:d2:40:0f:44:d8:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.243.0/24
193.22.245.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f2:f1:05:d2:14:e5:5c:b6:d8:e3:a7:ab:2e:9f:0f:21:a4:
ed:14:a4:ed:2c:c6:37:d1:d6:da:5f:e1:1f:a8:89:8b:73:5c:
1f:e5:e0:48:4b:03:11:ea:6f:1b:12:99:31:7c:93:08:95:ba:
7a:7e:be:71:52:69:68:27:5d:ea:d6:c4:0f:4b:fc:3e:0c:13:
d8:00:2b:e3:97:90:2d:af:d8:cd:48:15:82:c0:8b:09:ac:12:
b3:ba:d3:ec:b2:b0:68:c8:37:c9:8b:87:e8:3e:ac:37:f6:5d:
bb:91:aa:5e:a1:21:84:59:d4:8e:41:5b:fc:4f:22:6e:23:0d:
e4:ba:7d:9a:a9:dd:e1:a5:71:b6:36:63:5e:bf:e0:02:a8:ba:
2f:0d:e4:85:e4:31:44:7f:bd:dc:8b:88:24:22:cb:95:3e:b0:
38:c6:ba:cc:77:93:76:60:ff:48:1e:e2:1f:28:ad:fc:90:39:
60:92:fc:c5:4e:26:4a:44:ab:f1:e2:88:b9:25:2c:99:bc:5a:
c3:db:30:9b:6d:9a:d7:26:6a:5c:f7:ad:14:60:d4:2b:04:7a:
d1:b7:eb:35:3a:ec:60:0b:78:f8:25:7e:8b:29:68:d4:94:e9:
89:93:58:0f:09:02:ad:1b:11:cd:cf:8f:eb:80:98:4a:fa:0c:
ca:da:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:21:19 2024 by rpki-client on console-fra.rpki-client.org