Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
File: YP9t9Egm-fEGScV46sQWFnBSlCc.cer (raw, json)
Hash identifier: 2uDyhgz7I/jfWFwcPdshWOln/U0gFjnY34Bwy5GBiC8=
Subject key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D40ACD9A3558EB554D6C6D4CF6362
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205389
IP: 185.192.80.0/22
IP: 2a0c:1a00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:ac:d9:a3:55:8e:b5:54:d6:c6:d4:cf:63:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ff6df44826f9f10649c578eac4161670529427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:88:0e:7a:f9:88:b5:18:70:19:36:3c:ca:
84:9a:36:e4:c8:4a:df:3e:df:79:7c:65:ce:63:d3:
d1:71:d0:c6:72:e5:e0:e7:87:1f:70:e7:0a:36:92:
30:87:31:d1:97:b1:8a:cd:f4:d1:8a:a0:90:77:e9:
62:d1:59:07:d5:ac:5c:e0:1b:40:89:aa:5d:77:4c:
b5:9f:69:e3:04:5d:1f:14:f6:32:3e:3d:e3:91:60:
75:b3:1f:2f:c3:c8:32:39:89:2d:e1:e4:ab:45:ac:
a1:48:54:51:55:64:f9:a5:e2:e1:14:43:be:a4:2d:
cf:b0:f8:2a:93:4b:d7:f7:14:71:76:9d:d1:85:bb:
bf:64:7f:53:88:7a:77:ea:84:0c:c3:9e:d7:21:57:
c2:e8:12:08:38:18:1d:ab:c6:56:dc:d1:2b:eb:25:
35:94:ea:0c:0c:7b:ae:69:68:48:31:ef:ae:46:09:
8f:36:68:2b:d2:bc:ff:76:68:b1:7c:df:42:4d:18:
26:81:72:9a:fa:17:31:0c:2d:22:94:c8:bc:e9:03:
8c:1e:40:41:9b:42:05:f6:1e:5c:65:9a:fa:17:6e:
fc:d0:8a:fd:c5:57:07:d4:7a:11:8e:cc:a6:2d:67:
79:fe:a9:c2:ca:4a:8a:ef:c4:61:cb:01:d0:0e:26:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.80.0/22
IPv6:
2a0c:1a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205389
Signature Algorithm: sha256WithRSAEncryption
0a:41:58:a2:fb:70:39:cf:55:33:e0:bc:7d:81:73:25:b0:a8:
3a:df:33:26:6f:a8:a5:84:10:ca:b2:f6:8e:1e:99:42:3d:e1:
94:d3:1c:f7:fb:ad:87:0b:05:0e:d1:dc:81:0d:fe:b9:41:95:
df:21:2f:e6:b5:57:85:bd:bd:7a:52:b2:40:19:a3:1c:6e:9a:
ca:c0:9b:2a:c9:dc:ef:bd:ca:77:23:6f:6f:28:8e:cd:5e:41:
6b:9f:f9:ad:3d:be:82:82:55:4b:eb:41:38:88:d1:0a:70:54:
de:69:9b:71:77:35:88:2c:ea:b9:64:c2:b1:28:f1:5a:aa:bf:
d6:b9:87:2d:ff:a8:6d:44:33:20:8e:6a:cc:03:a7:2a:bf:c8:
02:1c:65:1a:02:f0:bb:5e:77:93:20:7c:39:1f:c5:b7:dd:c5:
9b:97:c4:4a:b0:73:5e:98:08:42:b1:eb:02:eb:d9:3b:63:0e:
b6:a8:d2:ed:9e:95:72:c1:4e:46:94:59:36:5a:34:cc:7b:fa:
da:df:0e:5a:e8:4d:d4:4a:72:a2:b2:ab:06:17:9f:95:21:ae:
a8:14:94:2b:2c:94:bd:f4:a1:12:6e:47:7d:5c:f0:b7:6d:1b:
a5:ab:39:57:d0:34:d0:33:58:63:47:7e:f8:e9:3a:3c:cc:51:
16:31:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:05:25 2024 by rpki-client on console-fra.rpki-client.org