Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.cer (raw, json)
Hash identifier: QTjV4YgcBJJAb+sGnDSLSjCoMf7IpIT4SDDsUOn4WVU=
Subject key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A61579C7C5406CE44DC7AEA59AA27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44498
AS: 49906
IP: 2a02:2960::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:61:57:9c:7c:54:06:ce:44:dc:7a:ea:59:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:80:c4:83:2d:6c:e8:e0:ce:d9:e0:0d:8b:
50:cd:0d:2f:68:d2:3c:a1:42:26:ab:e4:9d:08:0e:
ef:96:32:a4:99:17:73:3a:66:90:2e:ba:df:db:10:
d5:56:84:ff:1a:32:54:ec:16:de:cf:b3:a3:51:0c:
7a:04:4e:12:3b:ca:fa:e8:b6:ea:33:22:6b:26:6b:
fb:ed:ab:7e:43:96:ed:ff:fb:ff:4f:00:f0:d3:70:
b8:b0:ce:c0:cb:02:0e:8e:a5:1d:e3:3a:98:81:e7:
d9:c7:7d:44:03:31:8f:e6:54:d0:ea:49:f0:5b:24:
a8:8b:38:2b:3a:0b:79:82:ff:c2:27:f6:ce:42:19:
7a:42:58:07:6e:4c:7b:ca:67:5a:09:31:74:68:b1:
17:d5:d7:06:a4:1c:d6:b6:3c:bc:17:08:ab:dd:58:
14:5e:8c:06:85:de:d0:f7:2e:c5:a9:ff:69:1f:c0:
54:70:5c:cb:0f:c1:7b:22:80:f5:37:82:c6:ec:d1:
03:58:ab:04:4a:e8:f4:ca:b7:ba:f4:b8:91:f8:2c:
87:5d:08:63:f1:d1:6e:e3:c9:aa:d6:67:20:c1:a7:
f2:1c:5f:f0:7b:bb:9f:8b:dc:f3:af:a5:af:33:18:
8d:ac:82:78:0a:f4:b2:d0:0b:57:1f:d7:54:59:2b:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2960::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44498
49906
Signature Algorithm: sha256WithRSAEncryption
9a:97:6a:43:a1:00:85:90:07:c7:e5:57:20:7e:a9:b5:f2:90:
2d:7e:55:50:d1:43:92:4b:15:42:99:63:4d:35:d4:fd:93:4c:
42:eb:9a:32:b6:f7:23:83:33:2e:e1:0d:95:f1:f7:19:35:36:
4d:d4:7f:21:7c:6c:13:30:71:58:9e:40:06:54:36:19:db:71:
29:d9:b1:24:2d:4d:93:98:21:1c:cb:88:f5:8f:7d:33:0b:97:
30:f1:61:60:73:b1:6d:dd:b9:1e:24:25:17:84:4e:eb:ab:50:
50:73:f0:49:d0:86:7d:6e:c6:76:fb:b8:e9:44:82:78:d3:ce:
20:fb:99:3b:cf:e0:fb:c4:24:8f:d1:96:35:ec:73:7a:a7:9a:
33:e0:da:80:3a:91:59:6c:a3:b7:bc:ef:3c:6b:75:db:b5:a5:
e2:92:9c:25:94:6b:95:71:5d:d6:58:39:32:25:c7:81:fe:65:
65:77:75:72:81:1f:d8:60:83:79:43:58:e5:ee:2e:10:52:f5:
ab:2c:cd:2b:2a:8c:d2:d0:0b:11:bb:8c:17:f6:18:a3:83:a8:
fe:07:81:08:c7:10:86:9f:6e:42:fe:6b:a0:f2:ac:f0:00:8f:
45:d9:65:ac:b4:72:bf:88:56:f3:07:3e:92:71:ec:cc:e6:86:
48:79:78:9f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzKKmFXnHxUBs5E3HrqWaonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmNiOGMxMjMzYjAxNmIxZjA0ODEwODk3M2Q2YWMzZTc2MmY2M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNyAxIMtbOjgztngDYtQzQ0vaNI8
oUImq+SdCA7vljKkmRdzOmaQLrrf2xDVVoT/GjJU7Bbez7OjUQx6BE4SO8r66Lbq
MyJrJmv77at+Q5bt//v/TwDw03C4sM7AywIOjqUd4zqYgefZx31EAzGP5lTQ6knw
WySoizgrOgt5gv/CJ/bOQhl6QlgHbkx7ymdaCTF0aLEX1dcGpBzWtjy8Fwir3VgU
XowGhd7Q9y7Fqf9pH8BUcFzLD8F7IoD1N4LG7NEDWKsESuj0yre69LiR+CyHXQhj
8dFu48mq1mcgwafyHF/we7ufi9zzr6WvMxiNrIJ4CvSy0AtXH9dUWSt9xwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFGLLjBIzsBax8EgQiXPWrD52L2PtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzQwMmVl
YS00ODE0LTQ4NzctOGQ3YS0zY2EyZjc5NmI1OTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNDAyZWVh
LTQ4MTQtNDg3Ny04ZDdhLTNjYTJmNzk2YjU5Ni8xL1lzdU1Fak93RnJId1NCQ0pj
OWFzUG5ZdlktMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgIpYDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMArdICAwDC8jANBgkqhkiG9w0BAQsFAAOCAQEAmpdqQ6EAhZAHx+VXIH6ptfKQ
LX5VUNFDkksVQpljTTXU/ZNMQuuaMrb3I4MzLuENlfH3GTU2TdR/IXxsEzBxWJ5A
BlQ2GdtxKdmxJC1Nk5ghHMuI9Y99MwuXMPFhYHOxbd25HiQlF4RO66tQUHPwSdCG
fW7Gdvu46USCeNPOIPuZO8/g+8Qkj9GWNexzeqeaM+DagDqRWWyjt7zvPGt127Wl
4pKcJZRrlXFd1lg5MiXHgf5lZXd1coEf2GCDeUNY5e4uEFL1qyzNKyqM0tALEbuM
F/YYo4Oo/geBCMcQhp9uQv5roPKs8ACPRdllrLRyv4hW8wc+knHszOaGSHl4nw==
-----END CERTIFICATE-----
Generated at Fri May 3 11:36:59 2024 by rpki-client on console-ams.rpki-client.org