Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer (raw, json)
Hash identifier: pzr7y9b/oBJJCGsKNxdt7SFpIdT2Xf4MbVJmcsvWRcc=
Subject key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F2945827A50BDB4081F74F6D5F2271D24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Apr 2024 09:52:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.147.0/24
IP: 195.64.120.0 -- 195.64.125.255
IP: 2a14:2500::/29
IP: 2a14:2700::/29
IP: 2a14:2b00::/29
IP: 2a14:2d00::/29
IP: 2a14:2f00::/29
IP: 2a14:3300::/29
IP: 2a14:3500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:45:82:7a:50:bd:b4:08:1f:74:f6:d5:f2:27:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 09:52:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:a5:67:01:73:da:c8:23:8f:44:4d:1f:2b:
ad:23:f7:45:f9:60:2c:d0:81:84:00:b5:57:8c:db:
18:87:5a:60:1e:c2:b1:d0:38:35:22:64:ff:20:87:
9a:63:be:e9:77:da:9b:75:9c:76:28:16:c4:24:09:
8a:39:d3:5f:ca:92:ff:e1:16:d3:98:62:86:3b:7f:
f6:24:3b:62:8b:58:54:a6:dd:71:9b:30:49:86:f6:
61:74:86:f5:f5:40:cd:91:ae:ea:dd:51:ef:39:3d:
f2:06:2a:ab:48:ed:aa:e4:29:d3:83:97:86:e3:ad:
f5:11:9c:0f:5d:88:25:0a:a0:9e:40:7a:f3:ec:85:
f5:0e:26:ac:cd:f8:92:bc:1a:9f:74:08:c4:03:51:
c3:bd:38:4d:2f:01:a4:a9:44:a5:29:c0:0e:78:f7:
3c:11:9f:8d:06:63:75:57:dc:c5:06:16:cc:6a:01:
f6:fa:ba:e7:4e:f7:84:24:dc:98:72:ff:e9:bf:c6:
4b:42:04:48:c2:db:fe:5b:91:24:37:10:49:a1:c6:
17:35:d1:0b:33:04:bc:49:5b:be:07:95:bc:d3:fe:
f3:26:39:f9:9f:d4:6a:ca:2a:5c:18:df:05:40:c5:
ce:ab:6d:00:15:e7:85:68:1a:a7:fd:c6:cb:10:c0:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
195.64.120.0-195.64.125.255
IPv6:
2a14:2500::/29
2a14:2700::/29
2a14:2b00::/29
2a14:2d00::/29
2a14:2f00::/29
2a14:3300::/29
2a14:3500::/29
Signature Algorithm: sha256WithRSAEncryption
11:98:b0:0f:90:7b:0d:b8:e7:59:01:f3:e0:4e:2d:e1:25:93:
4b:4e:cb:53:50:21:da:18:aa:34:07:9f:ff:cd:17:73:b5:91:
c1:57:f2:7a:41:04:11:cb:6d:b7:0c:26:e1:70:70:b0:1a:f2:
5b:51:08:87:90:e2:8b:88:02:a4:53:da:b1:ca:41:25:58:a1:
5b:0a:ec:bf:01:54:cd:1e:7e:70:21:0b:14:85:22:2a:bf:e6:
8c:61:37:7e:a8:0a:85:60:19:64:d1:b7:36:46:28:9c:7e:93:
9a:24:a5:2d:a7:ea:12:99:a1:71:87:ac:d8:d3:be:7c:ff:fe:
2f:2e:2a:e8:aa:86:3c:3d:e2:a2:cb:e3:70:88:f0:90:f2:58:
67:7f:30:b9:1d:60:a2:b5:e4:6b:ce:04:93:68:4c:58:dd:d9:
03:7b:51:71:0c:16:49:a9:8b:b2:6e:43:b8:ce:1c:78:44:b1:
3d:fa:70:4d:b3:51:21:65:5b:71:66:05:55:d4:12:ec:f1:b6:
a1:2f:95:15:8e:66:0c:90:f4:21:d2:1b:11:f7:46:94:fe:43:
dd:a4:e5:27:7b:05:1c:1c:1b:b1:c2:b8:7c:6c:93:c9:32:00:
2b:46:a2:ac:0c:86:ad:e7:06:0b:73:f6:80:0a:20:e7:e9:0f:
aa:ba:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:05:26 2024 by rpki-client on console-fra.rpki-client.org