Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
File: YihBc2HBxAaumnJX2qn7BiB4LTU.cer (raw, json)
Hash identifier: W+OC8ygST6B353nevksl0H1kTyvesgUs6T7G1vijr00=
Subject key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8015856B83A1C315F148E0590546758
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207732
IP: 45.129.93.0/24
IP: 195.88.221.0/24
IP: 2a12:3480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:58:56:b8:3a:1c:31:5f:14:8e:05:90:54:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:51:b1:24:42:d2:eb:26:d6:b1:eb:37:df:
6b:29:32:75:65:4e:51:9b:f7:da:f3:b8:73:f5:bb:
fd:54:3d:85:73:d0:f4:75:8b:03:cd:2b:8d:90:d6:
21:e2:a9:d9:3c:50:85:4c:9b:5e:dd:70:ff:8b:c2:
68:fb:c5:5f:f9:96:bb:0d:47:ec:51:55:2e:08:66:
c7:75:09:6e:7c:17:9b:b6:e7:93:35:56:42:a2:0d:
b6:ec:7d:18:5b:3d:aa:61:cd:64:4b:87:f6:52:8c:
67:08:7f:28:dc:9b:d3:64:6b:13:fc:76:36:ee:05:
ad:97:f1:98:c7:33:82:37:a7:df:6a:d8:30:0a:83:
5c:ed:10:ee:23:a2:a6:8a:4f:41:5b:e9:ef:2f:af:
1e:eb:1f:98:5b:6a:07:7d:a9:ef:d4:20:87:3c:5b:
22:ac:87:18:74:2f:6b:55:67:69:11:f0:97:dc:34:
6d:9d:e0:ca:ff:00:44:0b:79:78:a1:b9:f3:19:78:
fb:53:50:14:73:3d:22:79:3a:7f:3d:04:ac:81:19:
5d:4f:98:8f:94:d2:65:86:27:d5:ba:41:23:2a:47:
e4:ab:e1:f7:11:dc:4f:8d:32:0a:2e:85:7e:c7:a8:
a2:b8:51:ff:5e:bc:47:f9:54:ea:d2:e4:ec:ce:e3:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.93.0/24
195.88.221.0/24
IPv6:
2a12:3480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207732
Signature Algorithm: sha256WithRSAEncryption
9f:36:1d:1f:f6:1a:1d:00:5f:90:f9:14:4c:95:7d:af:14:5c:
b1:32:b7:dc:c4:60:13:7b:93:49:73:9c:c7:bf:d0:e6:b9:cf:
34:7f:15:b2:e7:e5:57:96:f7:fb:ef:e3:d4:50:1a:74:1d:05:
31:8a:db:c4:7b:d4:4a:4f:a2:5f:44:1f:ee:ee:0a:43:4c:21:
75:96:13:78:46:33:ae:35:c7:cf:c0:2f:bf:ae:17:6c:37:ec:
5a:25:5f:60:c2:14:8e:1b:8b:3f:43:1f:6c:7d:23:7a:ed:7b:
a8:03:11:a6:86:3b:a8:ab:80:bc:f7:9e:15:a9:ef:b4:85:c5:
62:ca:1e:27:ad:a8:d9:1d:b2:08:02:06:d8:91:05:94:ec:15:
40:43:aa:12:66:6a:1c:10:10:b5:fa:75:5d:0b:18:34:68:65:
cf:14:c4:82:fc:50:4b:b9:a5:f8:cc:95:b9:d2:86:6a:7b:0c:
ee:4c:3a:28:f2:5c:44:af:50:a8:6b:56:d7:92:2e:17:11:ab:
28:ea:d6:bd:7f:a1:49:d3:85:c4:26:84:de:bd:65:75:1a:5f:
c8:05:89:a1:7e:3f:ab:b4:fd:28:f3:91:46:2a:56:0f:33:3c:
73:8a:10:89:1c:72:8a:9c:80:ed:9e:7e:22:02:76:e1:ba:cd:
7a:49:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:11:20 2024 by rpki-client on console-ams.rpki-client.org