Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer (raw, json)
Hash identifier: MnNk9OPUFrHy6EsF5c2BmFGNzn5wmS8kiSKu2i2TjYI=
Subject key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B838980D0700A99AC865B1FB463774
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207017
IP: 185.168.196.0/22
IP: 2a0a:1f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:38:98:0d:07:00:a9:9a:c8:65:b1:fb:46:37:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:dd:84:d5:40:7a:85:4c:42:6f:7a:cf:c0:
d9:d6:3c:7b:36:7f:22:1e:3c:9e:63:02:b3:5f:94:
f3:dc:3e:fa:17:d6:8f:7c:c1:6b:18:a3:73:25:2c:
de:6d:b6:98:b9:df:76:97:c2:df:29:ea:48:e0:1a:
67:8a:70:91:1b:55:68:52:09:a4:eb:8a:73:e6:84:
72:97:cb:b3:d4:52:2d:9d:42:b1:4f:b2:5a:75:84:
af:c4:40:c8:d7:19:b9:ee:1a:24:0a:1b:a4:1d:55:
f9:ff:70:18:45:72:38:d3:2a:6b:a8:e6:c0:28:fb:
27:59:e6:a4:13:43:26:73:fe:58:bd:55:40:81:33:
fd:f3:ee:ac:5f:65:a2:73:94:57:a4:c5:56:20:d2:
89:74:c2:46:ae:39:4b:8e:99:6a:a9:3f:48:f1:d3:
6e:86:1b:01:94:c0:2d:a3:e6:13:b8:aa:df:08:9f:
24:2a:27:d0:88:41:50:07:d6:21:31:e8:43:55:15:
da:e4:be:a8:c4:f6:ef:fa:5d:e5:f3:48:de:ef:1e:
0e:70:7a:43:d7:c2:58:bd:73:6b:b1:ba:c6:60:82:
9e:a9:71:35:8e:c4:4b:c7:31:b9:38:db:c8:10:6c:
eb:87:c5:1a:40:f8:67:fd:d1:39:61:75:e9:49:a6:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.196.0/22
IPv6:
2a0a:1f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207017
Signature Algorithm: sha256WithRSAEncryption
8f:9e:97:12:68:90:d4:30:5c:09:7c:f2:e9:2d:9b:1b:a4:5e:
5a:35:67:2f:cc:03:d8:79:78:a5:b1:91:2b:96:cb:ed:4c:9d:
34:ab:3a:71:e4:f6:9d:18:dd:9b:51:f8:34:68:94:e2:0b:31:
6e:e9:64:77:cf:9a:ce:6d:d2:ec:e2:03:6b:20:84:59:79:ab:
43:e7:57:24:a5:04:d9:10:ce:a7:d3:59:6f:a0:71:86:27:79:
54:9b:d2:3b:8b:7b:e8:8f:b5:c4:f1:d0:38:e5:36:18:72:1c:
6e:3d:b4:83:4b:b6:7d:25:75:a9:19:34:8c:8e:d4:e3:c5:39:
4d:e1:bb:f1:f6:ab:1b:5b:5f:59:ec:b4:b3:14:3d:2d:db:e4:
5b:f9:2b:0f:b6:9a:83:3b:eb:03:27:20:e2:87:32:d3:ae:95:
9a:28:92:a5:c9:5e:09:7e:30:20:c0:df:47:4f:5f:09:1b:88:
75:ac:c9:f9:70:a1:f8:a9:f4:e0:60:66:59:4d:97:94:0e:b1:
61:93:9d:0f:67:0b:75:cf:12:ae:47:19:50:b8:8b:69:7b:4b:
53:d6:7a:1b:ec:d1:ae:f8:10:34:92:fe:20:19:ba:74:c6:f4:
71:b2:7d:21:9b:73:69:f6:61:11:f4:2d:b4:d7:15:7c:0c:00:
20:5b:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:40:58 2024 by rpki-client on console-fra.rpki-client.org