Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer (raw, json)
Hash identifier: zDZ5eBLEFHaZ2EZClLRq5x40t7D/PlpKYh+JU8mC/No=
Subject key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D200279F909DCA1CC9A85D20D00CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205345
IP: 185.221.124.0/22
IP: 2a0d:c000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:20:02:79:f9:09:dc:a1:cc:9a:85:d2:0d:00:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:3e:67:14:bd:28:c4:24:03:7e:9b:c8:01:
7d:ae:05:d0:2b:e8:6d:08:dc:74:b6:30:5a:3c:ae:
4e:c0:3b:11:9e:5a:bb:6e:4e:8d:98:4f:32:92:96:
6b:c8:e3:29:ba:63:98:41:b9:ce:84:de:1a:e9:06:
5a:58:7e:cd:98:a6:82:3c:b4:d3:44:d5:04:1a:e1:
ec:e1:d1:18:4e:f9:88:92:c1:21:01:af:8a:f3:b0:
e8:63:82:ee:8e:62:c0:ea:2f:a1:66:a1:22:4c:ef:
1d:0c:c9:00:63:ba:06:af:76:29:7a:3a:eb:f9:00:
89:2d:9d:b4:b2:6c:ab:a1:08:05:7e:59:36:5f:c0:
b4:66:15:bd:42:58:db:a3:23:44:eb:d8:2d:a9:2e:
de:42:9c:a2:59:3b:f7:61:e1:ea:57:74:72:99:df:
42:c2:ef:c1:a0:2b:2e:9a:b1:4a:a5:d4:dd:29:c9:
72:d1:15:82:c7:90:db:ae:25:37:53:c8:14:0a:a6:
83:98:51:ab:e1:d7:25:34:21:9b:52:46:55:12:e3:
db:31:3b:68:16:6f:0c:b9:67:aa:b2:39:3f:51:ab:
d8:11:bd:eb:34:a6:09:38:42:c4:27:18:79:59:53:
f2:3c:50:f6:36:e9:30:da:5b:19:d3:e9:9f:79:f0:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.124.0/22
IPv6:
2a0d:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205345
Signature Algorithm: sha256WithRSAEncryption
80:4d:d8:b5:18:0d:38:b0:08:2c:8c:2f:55:4c:62:16:5a:4a:
b7:ea:d3:26:12:47:dc:37:79:ee:7e:1b:c6:63:f8:c8:3b:09:
4f:2a:b9:5a:95:2d:d3:a0:bd:1b:5f:cf:d8:7a:cb:a5:ae:3c:
81:75:a3:03:61:9a:03:56:c1:7e:7a:2d:c1:0b:25:ea:35:7c:
b4:72:13:6e:67:19:48:1d:24:87:56:6c:68:fe:82:27:8b:8a:
7e:2c:61:15:ba:bd:28:a1:e2:81:02:d5:0c:80:bf:c1:80:c2:
c9:e4:fa:f8:f1:63:63:b7:1e:e0:88:14:19:b3:72:c9:0f:22:
d5:c8:41:48:4c:59:3a:13:77:18:b1:7b:98:f7:84:b9:15:9b:
7a:37:38:60:61:ac:5e:10:c0:3b:e1:80:d8:35:9d:70:2b:2b:
84:61:41:37:e2:d4:b8:aa:c1:3d:ae:4c:8d:e4:17:ac:07:04:
b3:a1:17:f1:19:50:30:98:99:fd:be:1c:ed:9c:fb:7a:b8:03:
bb:89:e4:59:f7:24:e1:58:7b:04:3f:82:09:fd:e8:62:e3:12:
75:32:9b:7c:07:db:de:d6:22:0a:24:ea:86:9f:cb:b8:35:d5:
15:ed:9e:98:1b:63:c9:13:ee:43:9e:1a:11:9a:08:87:e9:e8:
a4:d2:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:05:50 2024 by rpki-client on console-fra.rpki-client.org