Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer (raw, json)
Hash identifier: ofW2bJQtX7f9dkenl1oYCgACXUoB9RvdPNnFH5UMMEU=
Subject key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D6E92E27A203D7BE83B336CF2F5B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47815
IP: 94.125.64.0/21
IP: 188.92.200.0/21
IP: 194.30.185.0/24
IP: 2a03:4080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:6e:92:e2:7a:20:3d:7b:e8:3b:33:6c:f2:f5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:c7:70:a1:0f:1d:16:65:ef:43:06:20:77:
c6:b0:c0:d8:4e:8a:23:d5:d1:cc:6f:bd:e4:dc:14:
e8:95:98:40:c9:0c:92:76:65:6a:9a:de:8c:ac:3b:
ea:fe:af:a8:db:bf:39:f3:d2:e8:de:3e:5d:61:c4:
0f:35:91:1a:84:0b:c3:77:e7:98:57:16:b8:81:6f:
06:78:54:ac:e1:15:35:c2:c0:94:85:ae:5a:62:81:
43:1d:53:01:a9:95:d8:28:8b:24:7c:f5:80:4c:bd:
74:6d:11:c0:a5:64:40:84:e1:c0:ca:83:ec:c9:79:
d5:be:f0:74:9f:5f:07:bc:fe:93:f0:44:91:a6:5e:
66:24:31:5d:50:dc:7a:28:4e:05:b1:59:8f:e5:92:
09:98:97:ff:79:23:01:fe:8d:77:6b:95:a2:ed:a1:
21:2a:3a:a8:8c:b7:1e:b1:b6:ea:e5:a0:13:b0:0b:
ce:fe:88:2b:64:4a:e1:a0:b0:a7:2d:df:89:b9:b0:
3c:52:b3:e0:53:fd:ab:af:2a:00:44:13:c8:74:e3:
1d:b8:5c:7d:3d:fc:d1:9f:a7:b2:22:f3:c8:31:8a:
a5:52:90:ad:fb:6a:70:3f:6a:06:bf:1a:13:72:f9:
5e:17:7b:d3:f7:9a:c6:be:8b:10:ee:27:ff:82:58:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.64.0/21
188.92.200.0/21
194.30.185.0/24
IPv6:
2a03:4080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47815
Signature Algorithm: sha256WithRSAEncryption
66:5a:35:af:73:27:1c:8e:c7:35:8f:33:49:cb:36:e7:96:e8:
f0:fd:0b:b3:04:65:77:44:72:44:06:36:77:4c:f9:19:95:49:
8e:c9:3e:66:8c:b9:78:d9:75:ce:38:b9:ae:fc:b6:97:da:0c:
3a:de:b6:08:46:c2:a3:78:34:92:c4:c2:1e:22:24:d2:3b:4d:
68:19:57:5e:fa:61:93:2e:d0:45:90:0f:fc:69:b3:43:c0:41:
44:03:65:27:39:93:1c:fc:a7:16:b2:45:ec:bb:19:62:cd:52:
01:0e:0b:4a:e4:3f:ca:05:75:33:a9:a3:58:8e:06:59:60:81:
36:4d:fe:83:9a:31:d0:2e:64:85:c9:b4:d0:ae:c6:a5:dd:b3:
65:20:4c:d9:bb:bd:b4:e1:8f:4c:4b:12:2e:56:8a:29:59:01:
cc:1b:06:01:61:3b:e1:14:5e:2d:05:6f:3e:b8:47:6f:cd:5f:
91:ca:15:34:cc:15:c7:58:bf:ee:a7:67:03:c5:d4:ca:8c:92:
d6:83:32:86:bd:37:8e:5b:3b:1d:e9:b2:42:2a:36:ff:48:c1:
10:a6:2b:ae:3d:0d:2d:4b:17:52:84:0a:07:96:bc:69:14:7f:
1a:65:53:49:a5:7d:45:43:b9:e3:db:fd:f0:69:8c:e8:f9:46:
4d:c7:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:33:49 2024 by rpki-client on console-fra.rpki-client.org