Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
File: YsD62Il-olgvlTB3ng5o6gjM5kM.cer (raw, json)
Hash identifier: y+hcKi/EtLqoTLokLTKuLr1NczqVXroJywumrVmCVVU=
Subject key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4250C47724E75588BD5B0F31F31DEF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207325
IP: 84.205.163.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:0c:47:72:4e:75:58:8b:d5:b0:f3:1f:31:de:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:5e:75:62:23:64:de:0a:23:83:bf:6c:d6:
03:25:bb:11:39:2e:a9:18:46:05:d3:2e:39:c5:01:
bb:e5:74:38:e2:ed:34:19:54:8e:2f:b8:bc:c1:82:
92:91:2c:02:cb:88:91:6f:d7:f5:ee:bf:02:a2:90:
36:95:22:03:4e:bc:ba:66:2e:01:33:fb:07:a3:5e:
b8:c8:bc:1a:2a:2d:8e:37:8e:3e:a4:69:92:cf:34:
c9:77:a1:cf:10:37:7b:77:4c:fa:76:84:33:a4:d5:
fc:ad:1d:35:83:3e:e8:e0:1f:d7:87:9c:48:53:34:
91:17:a1:ca:97:c7:1a:0d:0d:0e:bb:e0:a0:4b:96:
39:90:0d:04:67:e8:56:c3:d7:d5:53:7d:36:85:64:
71:dd:f2:29:fe:da:30:83:70:ec:25:e2:31:1e:8d:
e7:c3:3a:0b:d3:22:9b:f4:0a:ba:8e:ce:1c:09:7c:
d0:01:26:f1:2d:54:54:d1:95:cf:21:ec:f9:b5:76:
06:79:d3:1c:42:76:de:17:bf:b5:c9:87:1d:57:2f:
d0:f6:15:c7:ce:00:67:12:3b:65:b1:2d:49:f4:f3:
3f:e5:6e:cd:0c:42:f2:54:1d:70:8f:99:70:09:21:
04:47:7e:a1:56:54:5b:30:ea:8b:4a:80:eb:20:f5:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.163.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207325
Signature Algorithm: sha256WithRSAEncryption
7c:46:53:ab:0a:86:be:10:88:25:a5:b7:26:c5:b4:35:59:a9:
98:94:d6:e2:8d:5d:e3:50:d4:8b:3b:31:0b:85:b1:9d:c5:4b:
0a:a7:e5:ef:73:4e:e2:1c:39:f9:eb:4f:dc:82:d6:c2:1b:b9:
e7:c8:b0:67:fe:94:3e:94:a8:f3:09:71:13:b2:ad:a8:e6:4e:
24:04:44:95:21:53:0a:44:99:47:4a:b2:56:b6:65:cd:e4:0b:
40:e0:10:75:e5:ee:13:8c:b9:5d:42:ab:85:29:35:5b:cd:31:
2e:92:e8:2f:13:b6:41:f9:d6:8a:a5:9d:31:ea:08:e3:71:e2:
1a:ac:dd:74:30:65:c4:f6:ac:3f:1a:fc:9b:4c:33:d8:ea:12:
3b:4c:e8:55:a4:b4:2a:73:c0:f5:b3:b6:76:2c:a3:e0:58:2f:
d2:3e:22:c2:43:8b:5d:e2:9a:5b:d4:d7:be:0d:ba:e0:d5:73:
b4:26:c6:b6:89:06:f3:cd:0f:d8:c9:e5:ea:b4:ae:55:15:c3:
ff:df:bd:d2:5b:73:63:1a:84:e0:40:51:ce:e5:a6:70:63:bf:
24:62:7a:c7:e7:a3:43:4b:8a:92:14:82:d2:a0:08:46:32:13:
d2:48:59:dc:86:fe:f5:dd:84:8e:fe:e1:bc:b8:bd:36:98:ec:
b5:c5:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:11:24 2024 by rpki-client on console-ams.rpki-client.org