Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer (raw, json)
Hash identifier: lQ0Mh4fIWoJTEfqGWuN4TB81WFMEp5nYtADWqS99FGQ=
Subject key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000B9980E2562F3853D1379B4F9F27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 79.142.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0b:99:80:e2:56:2f:38:53:d1:37:9b:4f:9f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:f0:5a:d0:15:fb:95:92:73:bd:95:4d:2b:
12:4e:ee:f8:9f:31:ba:95:ae:f5:2c:c9:e0:3c:02:
e1:ef:0a:bb:58:a5:7a:bf:2b:e1:e0:af:e0:9e:c0:
0b:c5:25:7b:c5:5c:82:39:ea:1f:44:fb:e2:88:2e:
c4:76:ba:97:c3:de:48:80:8c:4b:37:83:37:70:ed:
5e:a7:0d:b7:ea:eb:7f:f9:23:e1:b4:98:0f:26:ee:
9b:bc:d2:13:b6:69:e8:ac:66:90:75:0b:1a:df:7d:
0f:93:47:02:06:c6:dc:a3:45:c2:f8:8f:cc:48:19:
8a:63:7d:2a:af:6d:20:10:0a:8b:9b:cc:ae:e9:f9:
4a:bc:ae:c8:cd:98:2f:2c:36:5a:8c:24:bb:78:98:
8f:98:6f:22:97:03:28:0d:2f:bb:be:d2:f4:e0:3f:
84:8e:4e:85:00:30:03:7f:e3:b7:bc:ea:e2:7d:de:
e4:1f:a6:fe:13:70:74:9c:99:5e:27:2a:5d:5d:aa:
aa:15:bd:df:0d:cd:70:27:42:b2:40:ee:00:f0:ea:
70:42:0d:b5:01:25:08:9f:46:55:a0:d4:84:b7:74:
44:45:e8:c9:70:fb:9f:5f:c3:48:3d:cf:ad:01:e2:
76:0d:73:bf:17:4c:3f:57:be:ed:28:08:ab:92:be:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:3d:2b:b5:cf:4e:3a:4c:87:56:f4:19:4a:bc:67:d1:3f:28:
62:a7:bc:82:b1:44:61:9b:9a:58:9d:b0:ae:d7:f3:a7:73:4d:
00:0e:d9:a8:f5:31:23:d0:4f:46:e5:69:13:b6:d8:3d:ff:e9:
65:b1:54:48:31:77:60:0b:1b:73:01:0d:fa:84:7b:86:20:6a:
1a:fd:cb:23:c1:23:56:d0:3d:81:14:6c:df:ae:78:0d:6b:71:
c4:a7:a4:13:63:b1:58:ab:a1:2f:2a:7e:87:3f:d3:72:1c:38:
15:c9:0a:2e:59:e9:c8:51:14:bf:4a:04:e9:06:36:d4:b2:17:
dc:e1:f7:5f:69:20:38:06:f1:2c:e4:70:27:e5:80:a0:56:75:
7f:91:dc:dd:35:51:45:f0:55:23:68:fc:36:ab:43:ea:66:5c:
29:37:eb:df:8a:d6:d1:ef:4c:15:9a:63:e9:ad:57:0f:39:36:
e4:22:85:28:ba:c3:3b:bf:0b:d9:c1:3f:9c:01:f9:69:78:e7:
e6:ef:16:d4:54:56:fa:b0:e2:de:af:3e:93:56:1b:6b:05:ee:
86:fa:f6:91:d7:3c:3c:6f:35:2a:7d:54:bd:b6:72:40:d6:f8:
c4:c1:ea:f9:0d:1c:e1:0b:9e:4e:37:55:d4:08:cd:d2:75:18:
ca:78:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:11:12 2024 by rpki-client on console-ams.rpki-client.org