Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
File: YTXB97cUDIcufz_zRitO3GMddnQ.cer (raw, json)
Hash identifier: vKS/5hP17YNNfGhoJf6aJvj1o0G3DRIyHJzPai2jAPA=
Subject key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CCA5937398B07EA9D3048ECE32198
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.231.244.0/22
IP: 194.147.114.0/23
IP: 194.147.148.0/23
IP: 2a0c:9300::/29
IP: 2a0f:4240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ca:59:37:39:8b:07:ea:9d:30:48:ec:e3:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:51:27:4b:8a:1e:15:ee:cf:e3:2f:d3:b2:
24:b7:dc:e0:ea:ff:b8:91:a0:15:67:53:bb:e7:8f:
4e:ed:8b:72:d2:21:45:60:70:88:81:5e:b2:83:a8:
1d:4e:a7:ea:03:b9:e4:a7:fe:7d:fd:61:50:04:8a:
28:09:88:2a:f2:68:08:7c:98:ae:34:fd:03:cb:f1:
42:da:85:44:3e:2b:4c:7b:c3:cf:67:eb:0c:9e:3b:
4b:26:84:40:ca:b6:19:6c:e1:e8:d7:27:5f:d8:eb:
f4:4a:ce:7e:48:3b:df:0a:06:2b:8e:37:e1:e4:61:
ff:a9:de:46:f7:02:64:15:46:b8:e6:52:af:fd:4e:
c1:2b:45:92:e3:27:59:b3:eb:39:fa:5d:d6:2f:77:
81:c0:7e:4d:33:fa:4f:5e:24:bb:36:95:84:8c:d1:
0a:5e:f2:c0:52:c6:91:9a:16:23:38:7f:04:eb:69:
66:1c:d3:b4:5d:f3:84:ec:61:f6:75:b9:74:aa:1a:
1c:47:fe:af:93:06:a9:5f:5e:26:fa:2d:c3:dc:bd:
3e:e4:1c:d1:0d:54:dd:c3:53:23:4a:cc:db:23:d1:
df:2b:e0:70:e2:07:39:d7:99:b2:c0:ee:17:f3:20:
c3:12:14:19:b0:15:24:4a:28:64:c9:7b:5c:71:5b:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/23
194.147.148.0/23
IPv6:
2a0c:9300::/29
2a0f:4240::/29
Signature Algorithm: sha256WithRSAEncryption
18:78:0b:2a:22:76:dd:5b:5a:b3:06:cc:b9:6e:e2:fb:59:bf:
05:99:0c:63:d9:53:b6:72:53:de:62:c7:ef:f7:14:92:41:4f:
0c:1a:c2:3c:72:17:2c:e0:c5:57:e7:18:e3:b4:44:26:61:c2:
e0:a7:36:b6:4e:45:e5:ec:6f:c3:10:c6:23:63:b4:bb:8d:15:
ce:1e:fd:62:9d:2b:72:54:0f:d1:df:07:3a:b9:7c:49:80:cd:
55:33:97:e1:b8:b3:dc:c5:6e:23:17:45:79:6d:b8:15:3c:7f:
8b:93:b4:1d:df:d9:2e:ca:29:c0:d0:ac:ff:1a:53:64:d2:20:
0a:78:2c:dc:32:01:9f:2c:ed:e7:d5:b3:35:84:01:ba:e8:a5:
8c:48:0f:92:6e:e2:6b:5d:69:03:ae:40:4b:5f:1b:e5:9e:5c:
5a:64:61:40:92:b4:90:e2:8f:1d:ad:5f:d1:7e:84:a5:92:fc:
aa:e2:f0:5e:a6:02:53:19:ed:c8:fb:d3:20:5b:87:7e:13:51:
6b:5f:fa:6b:e3:08:e8:ed:b5:e4:d6:02:48:ef:d0:b4:d6:a8:
69:f7:97:16:16:37:b4:f3:da:18:99:64:f4:19:cc:95:a4:b7:
93:9d:22:23:15:44:f3:06:6a:13:ff:14:b8:3d:49:9f:e9:02:
02:05:24:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 07:04:36 2024 by rpki-client on console-ams.rpki-client.org