Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer (raw, json)
Hash identifier: tsFFsqKLknxwKeytQgNHwEHSM/6uM+60k84rkZUK0lQ=
Subject key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4B811271AFC7650F89DFF7479496
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51644
IP: 91.199.61.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4b:81:12:71:af:c7:65:0f:89:df:f7:47:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:cb:96:85:e6:f4:b2:45:f3:83:52:c2:82:
9c:65:cf:6e:ad:d5:a6:0b:2e:29:fe:76:39:08:bd:
fb:20:8e:21:4a:cd:a1:e3:16:c8:40:b6:f0:0e:cb:
5e:f2:24:08:33:28:58:8e:c7:a8:12:bb:22:e2:1e:
a6:d8:e3:0b:ac:d7:06:bf:91:4e:95:7f:14:30:6c:
a7:9d:ef:30:b3:fc:f0:15:a8:a1:6f:e7:eb:19:79:
78:e6:20:e5:d0:b0:aa:98:e2:a2:a0:8a:7b:3b:ea:
c5:e2:70:27:e9:3e:d8:ad:6b:f9:91:ef:5b:b6:a5:
60:6f:06:82:df:19:c1:be:0d:4c:10:83:f7:3e:e6:
d5:8f:1b:d4:59:46:4e:7a:6e:59:65:ef:1d:84:ae:
23:ad:08:47:81:39:d4:90:cb:f6:4b:d1:db:96:8d:
b7:75:3f:b1:52:1c:20:2e:f5:dd:72:18:29:c3:e9:
c3:7b:4d:c1:49:77:10:31:48:e1:fc:5e:94:ca:5e:
f0:36:f6:cd:0f:eb:21:2e:96:bd:bf:b9:94:eb:3d:
a0:7e:3f:80:55:7c:54:95:a0:46:bc:c6:4e:30:c1:
f4:52:3a:ee:e4:5b:67:c4:7f:5d:cf:56:c5:34:e9:
ac:dc:91:dd:fc:32:42:60:1e:bd:b9:fc:2d:36:13:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.61.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51644
Signature Algorithm: sha256WithRSAEncryption
80:db:91:28:76:71:d0:9a:54:9b:6a:f7:2c:2d:0d:b4:69:e1:
d0:cd:27:cb:bb:13:e6:59:b5:11:73:8e:9d:11:cb:f0:69:61:
98:e8:ff:80:34:77:08:8a:be:90:c3:d4:6f:e3:fc:83:18:7a:
a7:75:14:31:8f:09:e8:3b:be:d1:7a:cd:f0:03:76:40:53:a6:
a2:86:d2:0e:26:c0:f4:0c:d9:4d:64:ad:57:4d:e7:c7:d9:6a:
11:f4:da:4c:f7:b0:f9:17:29:a6:21:5b:93:4f:31:8a:b6:1e:
1b:90:dd:f1:6c:54:b8:55:e6:52:86:68:84:3c:cd:f5:09:a1:
25:1d:20:7f:38:41:63:54:0a:a8:30:f7:30:53:f5:3c:91:c8:
5a:6e:44:b7:5c:0c:c8:4b:e8:47:d1:02:d8:bd:11:5b:95:c5:
26:b5:8b:4e:42:78:fa:99:15:c5:e1:95:f9:0c:29:bb:5f:7e:
bf:cf:da:d2:0d:9e:d6:52:a5:e3:d1:3b:ec:8c:ab:09:8f:a7:
bd:05:ae:c2:68:e2:ea:24:3c:0c:34:b8:e5:2b:8e:3f:28:26:
da:a3:a8:69:c6:a4:20:a5:31:c8:40:6f:07:c7:e3:ec:a1:d3:
01:7b:7d:ad:22:d3:ae:f7:8e:2a:1e:b0:e2:7a:34:33:75:9e:
04:40:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:59 2024 by rpki-client on console-ams.rpki-client.org