Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
File: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer (raw, json)
Hash identifier: n+vfKg6iMoAPlXYhimcCZvczUDKWxqqQIctbRGD/QLg=
Subject key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB1827E4F7E40B7E3D4CAA1C263EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49704
IP: 2001:678:924::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b1:82:7e:4f:7e:40:b7:e3:d4:ca:a1:c2:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:3d:ce:b5:84:1f:ad:5e:d5:99:99:c7:15:
10:9d:b9:cd:98:af:ab:ff:5c:68:a3:3b:81:d9:7c:
0a:5e:06:29:94:93:23:cd:46:e8:87:bf:77:07:c1:
fa:d2:e0:d4:85:6e:72:40:03:36:b3:69:95:92:d3:
f0:81:e7:7c:94:e8:9b:5e:b7:17:4c:d0:90:e8:ac:
b2:7b:b1:d8:e8:2c:9e:04:a6:d0:7d:dc:4a:ad:55:
de:9c:87:21:8c:5d:e4:98:cc:1c:4b:a9:c7:23:1b:
07:4a:9e:cf:9e:84:22:f8:8e:76:d6:c8:31:32:46:
15:98:e2:e7:91:19:1b:8e:9e:34:f7:2e:34:97:75:
43:34:3c:52:4c:f3:5e:48:a5:4f:1c:47:84:af:bc:
d4:43:c9:79:a6:c9:fe:7e:71:68:96:f4:eb:08:bc:
8e:5b:15:66:af:86:dc:5f:21:e8:08:30:2e:a0:8d:
74:5c:ac:b2:61:83:f9:92:b0:1a:c3:b0:c8:d3:ff:
85:7e:6e:50:c6:cf:8b:a4:00:ee:e0:ae:1a:c1:b4:
96:90:ff:63:fd:5b:39:9c:d1:cb:85:30:9e:cb:99:
cc:78:47:82:c0:3a:66:d7:08:1c:1d:03:2c:35:ad:
b2:2c:ec:90:b0:bc:96:9a:03:63:17:3d:88:d8:3f:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:924::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49704
Signature Algorithm: sha256WithRSAEncryption
28:1d:7d:97:ff:23:b9:cc:bf:d2:1d:db:17:c2:36:08:91:b0:
3d:07:ef:b7:39:27:68:32:6d:71:89:76:f2:7c:94:98:14:fb:
31:7a:08:52:64:85:43:4d:20:b6:73:30:eb:0a:70:01:be:20:
a6:c0:1d:60:10:df:7c:52:7a:70:f1:aa:1f:44:f2:61:62:0b:
80:25:7e:7d:ed:e6:1f:24:11:9a:05:a2:c0:d8:9c:00:cf:06:
45:4d:a5:81:6f:8c:34:90:73:2d:a8:1a:1b:1d:91:80:dc:52:
c9:44:42:f8:f3:ed:fb:e4:22:03:4d:fa:d5:d7:7e:1f:41:71:
61:60:45:d9:f3:b7:a5:72:ee:04:73:d9:6d:de:a6:3a:b4:b2:
d0:67:3d:6f:96:30:1d:a8:65:fb:cd:c8:8d:da:b7:90:df:7e:
93:8d:8a:e2:8a:aa:06:5b:3c:7f:4e:fc:e8:ad:cc:00:a9:63:
64:9a:ac:f9:68:57:7e:d4:83:07:bc:3d:2c:1f:18:7a:aa:64:
ee:44:1a:27:a2:ec:48:bb:35:c5:a8:63:f1:1e:a7:ba:3f:8e:
0a:d8:61:e4:ba:b7:68:8a:0d:08:db:af:cd:a0:24:82:d3:6a:
fd:90:6e:c5:b5:69:f2:2e:47:ac:41:18:78:be:95:45:dc:0b:
dd:5e:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:08 2024 by rpki-client on console-ams.rpki-client.org