Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer (raw, json)
Hash identifier: WxwQDELtKdoY6SEwa8XYguxXVr+RVaqXBgu7U/JxhH8=
Subject key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4928C8A498FB08141DC71B34C5B20B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59494
IP: 185.145.140.0/22
IP: 193.187.80.0/23
IP: 2a07:4480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:8c:8a:49:8f:b0:81:41:dc:71:b3:4c:5b:20:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:ed:29:34:9b:17:77:c1:ba:ca:7b:cf:d8:
fe:83:d8:8c:17:44:80:6b:25:dd:c7:14:8e:55:7d:
17:c3:ec:07:d3:b7:fc:46:16:3f:83:4b:ee:63:f4:
37:df:3c:87:8e:32:ab:1a:7d:87:11:2d:57:e0:3f:
9b:ab:c5:8e:7a:49:79:9c:ab:50:43:c1:7b:09:da:
47:2a:79:5b:7e:fa:00:d5:33:06:b6:b7:b0:73:f5:
a2:c9:41:03:c3:36:42:74:91:da:c6:88:35:2f:b8:
dc:c0:c6:e2:b2:fc:4b:58:76:f8:44:00:e4:34:85:
c1:fa:cf:e3:e1:73:0f:ed:d1:f0:ce:99:20:49:ad:
61:74:7a:48:4d:1e:ac:89:00:c7:a7:12:98:55:52:
d1:5c:97:44:94:87:a6:ee:f0:12:e3:58:71:86:61:
ef:c4:77:d6:0e:ed:17:f2:2e:c9:f4:94:00:cb:65:
42:e2:f5:3e:e6:26:f9:0c:54:e8:4a:25:d6:a5:c1:
57:dd:95:e4:fc:1b:fd:39:98:c9:d6:a5:91:97:40:
e3:9f:4b:14:f6:58:45:35:ce:60:b7:bd:4f:3e:ad:
b4:5e:a0:3b:e6:ea:1f:06:1d:31:2d:be:47:b0:9f:
d9:60:16:4f:20:b2:b4:72:bf:48:61:ef:14:68:45:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.140.0/22
193.187.80.0/23
IPv6:
2a07:4480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59494
Signature Algorithm: sha256WithRSAEncryption
71:7c:a5:7a:5e:1f:ad:28:28:9e:b8:ff:7f:33:38:bd:f4:09:
c5:8b:fb:04:65:b1:d5:e0:57:15:a2:a8:05:cc:d2:08:d8:79:
f0:df:94:dc:88:a0:88:26:13:47:5e:a1:1d:d6:32:93:0c:76:
86:1c:52:2a:f0:75:34:50:f2:24:d0:b5:24:7f:33:ab:e0:f6:
52:46:07:95:a6:bf:c1:c1:65:0d:75:ee:46:c8:25:34:d6:b8:
f7:9b:76:b3:e8:5d:de:0e:02:86:03:83:61:88:3d:d1:d7:c7:
77:8c:dd:4e:19:b4:47:de:af:b6:6c:ff:f3:c3:f4:96:b0:f8:
e9:38:40:b6:ae:f9:b9:38:58:45:fd:f2:56:23:14:0a:0b:29:
83:f3:5e:90:c1:0d:a8:80:4b:1e:38:bb:62:66:79:75:4a:84:
83:3c:8a:8c:86:fb:8a:10:45:e5:6b:68:ee:ad:db:ef:a7:9d:
18:5a:e9:90:78:15:8f:c7:52:cd:e5:08:c7:b0:e0:60:c8:0b:
f9:4e:23:21:bb:7e:7e:75:58:96:77:03:9d:32:7e:4d:d2:39:
f5:e0:80:6a:f7:98:9e:22:9b:fc:85:f4:da:ed:52:d8:92:7e:
73:67:b1:5b:a5:b3:b7:94:93:92:49:8b:d1:5c:f9:d8:1b:e4:
29:22:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:11:10 2024 by rpki-client on console-ams.rpki-client.org