Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer (raw, json)
Hash identifier: 01uTw6Z/wpKDGsvz6GoWgflcXW+BqwgNU/Zj+PpgBwk=
Subject key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC73E257758D22B0C68424E828BAC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202516
IP: 193.58.164.0/22
IP: 2a0c:9540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:73:e2:57:75:8d:22:b0:c6:84:24:e8:28:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:88:a1:0f:ae:f3:07:29:32:e7:40:4a:e1:9e:
42:f8:b3:4d:e7:97:2d:06:1d:8d:55:48:8a:0f:13:
80:18:c6:48:88:4a:bb:67:05:a9:6f:c9:9c:8f:54:
a6:e4:81:f7:16:03:76:56:37:71:73:c7:b7:c9:67:
30:8c:fc:65:25:77:04:4c:5a:0c:6e:f1:d2:78:b4:
86:e0:0e:60:31:85:2f:db:a7:8c:71:49:02:89:ca:
f4:62:f6:66:5c:dc:49:6e:d2:1e:69:db:17:14:c6:
42:4c:de:d8:27:67:a4:1d:b4:02:c9:8d:11:c3:5a:
a4:40:59:b6:f8:ca:95:28:f7:84:51:0e:c8:db:05:
97:c5:73:0d:f1:ca:d2:83:75:bb:7a:14:34:3a:94:
15:2d:b5:a5:9c:f8:9d:07:75:9d:3f:af:2d:aa:59:
9d:5c:bf:43:0b:af:18:78:f4:db:08:80:ac:f8:17:
d3:a0:9b:24:f4:e4:11:a0:6e:83:6b:ea:15:17:97:
03:2d:b2:17:1d:91:03:89:0f:55:4c:fc:98:d7:3d:
6b:a8:f1:10:ef:c2:8a:cb:f0:16:3e:11:e7:04:c2:
1c:b4:f4:4c:d7:00:34:1f:ce:5c:57:3b:30:6f:11:
06:eb:f9:9c:ee:40:29:21:33:ec:cf:26:e6:c6:e5:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.164.0/22
IPv6:
2a0c:9540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202516
Signature Algorithm: sha256WithRSAEncryption
91:ce:3d:0b:74:29:44:39:df:be:ce:66:80:05:04:88:6b:ad:
4b:3d:19:f7:07:97:63:1f:bf:b1:a0:17:6d:3c:be:41:ee:ec:
5c:45:34:98:da:d7:d6:43:2b:db:ad:09:3a:7e:2a:9d:cd:e6:
f6:15:d2:5e:d1:aa:5d:26:e9:86:d8:3c:62:b0:ef:6e:78:89:
fb:07:1d:9f:f8:f3:46:04:1b:45:82:1d:f8:0d:e9:d9:8c:ab:
46:cf:d5:a1:18:a8:13:30:b0:39:17:89:62:c7:a7:5e:b9:db:
da:70:96:0c:96:73:9d:f3:12:7c:47:fc:1e:39:a1:39:a1:6b:
f1:ae:cf:a9:a2:73:11:e3:5c:b2:3e:84:aa:fb:41:86:a4:c7:
f5:b8:3d:ad:f1:dd:3a:43:ea:11:a6:15:cb:4c:0f:87:d9:86:
c9:b8:fd:b9:0a:50:97:85:4a:5b:58:40:91:84:dd:fb:b0:df:
57:ad:48:05:04:b6:11:b6:6c:06:81:3f:d9:84:9d:9d:19:5d:
91:af:02:53:0d:4b:aa:a7:cb:7f:ae:19:08:9f:61:96:07:55:
45:37:3f:33:7a:33:5e:f9:be:ab:68:4d:81:51:38:5a:15:9d:
e6:d4:0b:9c:a9:e0:47:69:7a:9d:5b:c7:ed:2f:85:2b:81:47:
06:f6:30:2f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzF3HPiV3WNIrDGhCToKLrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjVhOWY2OWZlMDc5N2UwODNiNTE2MjgxY2FiM2YwYmE2NWUyZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oihD67zByky50BK4Z5C+LNN55ct
Bh2NVUiKDxOAGMZIiEq7ZwWpb8mcj1Sm5IH3FgN2Vjdxc8e3yWcwjPxlJXcETFoM
bvHSeLSG4A5gMYUv26eMcUkCicr0YvZmXNxJbtIeadsXFMZCTN7YJ2ekHbQCyY0R
w1qkQFm2+MqVKPeEUQ7I2wWXxXMN8crSg3W7ehQ0OpQVLbWlnPidB3WdP68tqlmd
XL9DC68YePTbCICs+BfToJsk9OQRoG6Da+oVF5cDLbIXHZEDiQ9VTPyY1z1rqPEQ
78KKy/AWPhHnBMIctPRM1wA0H85cVzswbxEG6/mc7kApITPszybmxuUX/wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGJan2n+B5fgg7UWKByrPwumXi6oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzYzYjZh
ZS1kNGY1LTQ5NDYtYmJmNS1iMTMzZTZlNmZhODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNjNiNmFl
LWQ0ZjUtNDk0Ni1iYmY1LWIxMzNlNmU2ZmE4NS8xL1lscWZhZjRIbC1DRHRSWW9I
S3NfQzZaZUxxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwTqkMA0EAgACMAcDBQAqDJVAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMXFDANBgkqhkiG9w0BAQsFAAOCAQEAkc49C3QpRDnf
vs5mgAUEiGutSz0Z9weXYx+/saAXbTy+Qe7sXEU0mNrX1kMr260JOn4qnc3m9hXS
XtGqXSbphtg8YrDvbniJ+wcdn/jzRgQbRYId+A3p2YyrRs/VoRioEzCwOReJYsen
Xrnb2nCWDJZznfMSfEf8HjmhOaFr8a7PqaJzEeNcsj6EqvtBhqTH9bg9rfHdOkPq
EaYVy0wPh9mGybj9uQpQl4VKW1hAkYTd+7DfV61IBQS2EbZsBoE/2YSdnRldka8C
Uw1LqqfLf64ZCJ9hlgdVRTc/M3ozXvm+q2hNgVE4WhWd5tQLnKngR2l6nVvH7S+F
K4FHBvYwLw==
-----END CERTIFICATE-----
Generated at Fri May 3 11:36:55 2024 by rpki-client on console-ams.rpki-client.org