Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
File: Yn3peM3C6wXD8IkGGwq-PF9piu4.cer (raw, json)
Hash identifier: MOcsauEK7JHvVT9sWGznvU5EOou7HSbKxge1BCZLrw4=
Subject key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50145673CD021B37F2940F96B67AF09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.162.29.0/24
IP: 2a12:5980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:45:67:3c:d0:21:b3:7f:29:40:f9:6b:67:af:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:17:15:73:5f:a2:ec:8a:8d:91:46:2d:f5:
20:00:95:e2:b6:91:bf:36:93:02:c7:12:11:37:8e:
e6:fb:4a:d1:fd:06:c1:59:62:79:5a:cc:6b:2b:42:
30:3b:f8:66:a4:fc:67:d4:cf:db:ca:21:37:e2:c6:
3d:68:a8:ea:48:58:6e:2f:42:1b:a4:e7:f5:c9:b6:
d1:5f:16:92:3e:ef:9f:52:89:3d:be:ce:0d:17:28:
d4:93:15:c6:d3:d8:72:86:9e:1f:1b:48:7b:38:8c:
40:55:d3:13:f9:a7:a1:31:6e:e4:1b:3b:a4:f3:aa:
01:24:06:18:59:ea:09:97:e3:a1:57:67:a7:3d:45:
61:a3:ef:26:25:9c:05:7c:3f:48:46:a2:4f:90:29:
68:10:1f:d9:1e:3c:8a:1d:2e:0a:e3:7f:a5:90:03:
96:8e:85:02:30:12:06:b6:e0:97:e3:23:a4:91:ae:
6a:48:74:8b:23:ac:b1:02:3f:75:f7:5f:52:94:de:
66:9e:7f:bd:f6:bc:28:58:7b:ed:79:f1:92:06:6d:
86:fd:fe:2a:65:b3:db:6f:b2:62:6a:4f:8b:76:35:
7d:a0:65:6c:69:88:68:ca:c9:9d:5d:59:c1:34:bf:
f1:8b:aa:f9:55:30:87:e6:37:18:a6:fb:18:03:b9:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
IPv6:
2a12:5980::/29
Signature Algorithm: sha256WithRSAEncryption
32:18:18:5c:b5:8f:39:58:af:59:c7:ba:7b:98:7f:2a:b7:52:
11:b2:a1:1a:52:43:0e:4e:29:b2:03:10:7e:47:2e:93:77:77:
6f:8b:de:d9:63:21:15:61:ff:6b:69:cf:ed:0d:8c:d2:eb:37:
bb:e0:7f:e8:60:e8:36:35:ce:c0:b4:e6:0a:7e:1c:f3:61:82:
cd:9d:c3:30:be:6f:b9:b5:04:9f:a1:ce:8a:ed:a5:8f:35:b5:
de:7d:62:3b:f4:65:a9:0b:dd:48:c1:ab:52:7b:d0:99:90:bf:
95:67:5b:d0:7f:ab:65:a3:80:2c:91:8e:61:d3:20:8c:b5:fd:
fe:5c:dc:d8:87:74:0c:06:2b:b8:5c:ee:d8:d6:66:ee:9c:a0:
2e:21:9d:be:96:d1:f2:9c:db:e4:01:54:c2:ec:bf:25:8a:30:
d2:80:aa:ce:cd:87:8d:9d:78:42:5a:49:0b:b7:cf:4f:73:8c:
34:4b:a8:4b:0f:3b:7c:d7:17:06:68:e9:44:54:71:52:a5:2e:
21:fb:77:8b:fc:d8:c2:a8:0b:bd:03:5b:ee:61:76:7c:bd:9c:
10:0e:6a:a1:92:bf:97:0c:09:73:9f:f8:00:28:f7:a2:9c:e9:
6a:3e:d2:a6:7c:6a:fa:be:58:72:85:d5:eb:3c:69:75:38:51:
92:3e:28:b4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFAUVnPNAhs38pQPlrZ68JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjdkZTk3OGNkYzJlYjA1YzNmMDg5MDYxYjBhYmUzYzVmNjk4YWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1kXFXNfouyKjZFGLfUgAJXitpG/
NpMCxxIRN47m+0rR/QbBWWJ5WsxrK0IwO/hmpPxn1M/byiE34sY9aKjqSFhuL0Ib
pOf1ybbRXxaSPu+fUok9vs4NFyjUkxXG09hyhp4fG0h7OIxAVdMT+aehMW7kGzuk
86oBJAYYWeoJl+OhV2enPUVho+8mJZwFfD9IRqJPkCloEB/ZHjyKHS4K43+lkAOW
joUCMBIGtuCX4yOkka5qSHSLI6yxAj91919SlN5mnn+99rwoWHvtefGSBm2G/f4q
ZbPbb7Jiak+LdjV9oGVsaYhoysmdXVnBNL/xi6r5VTCH5jcYpvsYA7kkGQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGJ96XjNwusFw/CJBhsKvjxfaYruMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2FkNjBl
OC00NjA5LTRkNDMtODlmZi1lM2MyZjRkMmFiM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvYWQ2MGU4
LTQ2MDktNGQ0My04OWZmLWUzYzJmNGQyYWIzYi8xL1luM3BlTTNDNndYRDhJa0dH
d3EtUEY5cGl1NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwaIdMA0EAgACMAcDBQMqElmAMA0GCSqGSIb3
DQEBCwUAA4IBAQAyGBhctY85WK9Zx7p7mH8qt1IRsqEaUkMOTimyAxB+Ry6Td3dv
i97ZYyEVYf9rac/tDYzS6ze74H/oYOg2Nc7AtOYKfhzzYYLNncMwvm+5tQSfoc6K
7aWPNbXefWI79GWpC91IwatSe9CZkL+VZ1vQf6tlo4AskY5h0yCMtf3+XNzYh3QM
Biu4XO7Y1mbunKAuIZ2+ltHynNvkAVTC7L8lijDSgKrOzYeNnXhCWkkLt89Pc4w0
S6hLDzt81xcGaOlEVHFSpS4h+3eL/NjCqAu9A1vuYXZ8vZwQDmqhkr+XDAlzn/gA
KPeinOlqPtKmfGr6vlhyhdXrPGl1OFGSPii0
-----END CERTIFICATE-----
Generated at Fri May 3 01:49:05 2024 by rpki-client on console-ams.rpki-client.org