Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.cer (raw, json)
Hash identifier: 5/R8sSQ1ClkZ+SAzIwaxlmPey424YOWlvekE6zDizRA=
Subject key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70DF6418220D8849004E6135BDCB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199803
IP: 185.45.200.0/22
IP: 2a01:7fe0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0d:f6:41:82:20:d8:84:90:04:e6:13:5b:dc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:87:0e:a0:3f:0e:0e:e3:0f:bc:46:ed:85:
3c:b8:40:92:c4:ec:bd:6b:2d:7f:fc:00:8b:36:83:
07:bd:d3:b2:9a:a7:71:23:06:52:48:f1:68:8d:26:
9c:21:5a:3f:5b:dc:91:df:f9:e2:a0:91:4f:9a:bd:
db:0f:32:a4:3d:1a:e2:4f:a1:93:4e:04:01:21:38:
04:7a:51:94:00:90:1d:03:93:e6:d9:6b:5e:44:18:
fd:e2:51:b2:5d:8c:de:93:a2:e3:87:fc:66:54:b4:
3e:e2:e9:9c:7e:54:90:a9:03:5c:05:65:21:7b:79:
46:83:9c:f3:0e:66:ba:50:c1:d2:b4:6f:08:66:1f:
f4:e7:36:d0:67:9f:d6:a5:94:70:fe:90:be:a6:fc:
80:70:35:b5:ae:be:b0:28:ee:c0:6a:6a:7c:37:15:
24:c2:bb:8f:16:a8:4e:89:fd:88:66:4e:f1:c8:40:
ca:70:9a:a2:14:34:0d:f3:8d:09:ba:c7:1e:d5:19:
2a:04:d2:15:91:df:98:97:1d:89:49:96:8f:42:71:
94:38:97:52:53:52:10:2b:df:cf:dd:f9:55:2e:ed:
68:0f:cd:b4:e1:2c:b1:b5:5e:87:bf:b6:5e:c1:5b:
b4:03:c4:2a:95:58:b4:03:f3:c0:28:df:b0:e5:4e:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.200.0/22
IPv6:
2a01:7fe0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199803
Signature Algorithm: sha256WithRSAEncryption
8f:ff:43:7a:a8:b1:6c:f5:7f:3e:9b:41:5e:47:75:a8:78:28:
22:e3:9f:5d:0f:d8:d6:7d:6a:9e:9f:d5:02:25:2f:ba:ce:eb:
66:5e:87:b6:7a:1b:6a:ab:ae:06:7b:50:80:1d:e8:f1:de:90:
61:39:80:1f:bf:72:01:96:75:f2:02:ad:d0:75:e7:64:76:b3:
a8:7c:bf:2a:b9:6f:1f:a6:9e:8d:c9:68:5e:b1:9c:9a:f0:a9:
6c:a6:f1:0e:ea:6e:79:65:2c:04:1e:9d:53:a7:14:c1:83:5a:
c6:24:24:37:3f:97:6d:e7:64:d0:16:3f:16:45:fd:ef:fb:7f:
53:20:8a:c5:25:74:ce:33:38:80:30:58:3d:7d:12:c7:bd:b3:
30:6f:45:9d:78:4b:c9:f7:ff:a4:4f:7c:76:48:7c:8e:ef:38:
ae:67:93:33:2e:ec:9b:9e:3b:8a:8c:5d:d2:82:3d:4e:58:dd:
09:8e:c5:b9:9f:32:42:06:4c:f2:3d:39:5d:44:cc:33:1d:d6:
d1:1d:78:4b:61:11:c2:b1:c5:bc:61:88:52:2a:bd:04:86:db:
bd:c5:6b:d1:7b:6b:3f:f5:2f:db:17:f6:b5:f9:8d:d8:e3:d4:
9f:98:02:39:24:dc:de:7d:89:8c:c0:c3:b5:fb:3a:4d:f8:cb:
2c:a2:9a:2e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDtw32QYIg2ISQBOYTW9y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWIxZTMxYzA5ZmU4MjZmZTRkNzkyZTdmYTg4NTVlMGFkMzkzNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTCHDqA/Dg7jD7xG7YU8uECSxOy9
ay1//ACLNoMHvdOymqdxIwZSSPFojSacIVo/W9yR3/nioJFPmr3bDzKkPRriT6GT
TgQBITgEelGUAJAdA5Pm2WteRBj94lGyXYzek6Ljh/xmVLQ+4umcflSQqQNcBWUh
e3lGg5zzDma6UMHStG8IZh/05zbQZ5/WpZRw/pC+pvyAcDW1rr6wKO7Aamp8NxUk
wruPFqhOif2IZk7xyEDKcJqiFDQN840Jusce1RkqBNIVkd+Ylx2JSZaPQnGUOJdS
U1IQK9/P3flVLu1oD8204SyxtV6Hv7ZewVu0A8QqlVi0A/PAKN+w5U7+mwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGGx4xwJ/oJv5NeS5/qIVeCtOTQqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2ZiMmE0
NS04ZDk0LTRhOGQtYmNiMC02MTkxYjlkMGNkYTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZmIyYTQ1
LThkOTQtNGE4ZC1iY2IwLTYxOTFiOWQwY2RhMy8xL1liSGpIQW4tZ21fazE1TG4t
b2hWNEswNU5Dby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuS3IMA0EAgACMAcDBQMqAX/gMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMMezANBgkqhkiG9w0BAQsFAAOCAQEAj/9DeqixbPV/
PptBXkd1qHgoIuOfXQ/Y1n1qnp/VAiUvus7rZl6HtnobaquuBntQgB3o8d6QYTmA
H79yAZZ18gKt0HXnZHazqHy/KrlvH6aejcloXrGcmvCpbKbxDupueWUsBB6dU6cU
wYNaxiQkNz+Xbedk0BY/FkX97/t/UyCKxSV0zjM4gDBYPX0Sx72zMG9FnXhLyff/
pE98dkh8ju84rmeTMy7sm547ioxd0oI9TljdCY7FuZ8yQgZM8j05XUTMMx3W0R14
S2ERwrHFvGGIUiq9BIbbvcVr0XtrP/Uv2xf2tfmN2OPUn5gCOSTc3n2JjMDDtfs6
TfjLLKKaLg==
-----END CERTIFICATE-----
Generated at Fri May 3 01:48:59 2024 by rpki-client on console-ams.rpki-client.org