Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
File: Yv8lPFoTQ6JWma4I51dnrya52-U.cer (raw, json)
Hash identifier: FhizkEjh435uDsiQGZ5YQcB1QX4NYvN2NuUWZoQr3IE=
Subject key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AB4FAA47D5992919E3023BB6B1E41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.32.19.0/24
IP: 195.182.43.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b4:fa:a4:7d:59:92:91:9e:30:23:bb:6b:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:f4:19:0f:07:4c:ea:39:98:2c:2c:c6:2c:
e5:ce:d9:6c:a1:87:58:95:29:8b:a0:96:2a:cc:1f:
fc:d0:f7:77:1e:af:36:c6:4f:9f:17:14:91:82:e8:
06:03:5c:bf:b9:30:be:07:09:53:a1:4b:e5:92:ad:
a0:1a:cc:ce:63:65:d6:31:7c:f2:d0:87:05:a1:86:
f0:73:11:d6:14:ba:cf:e4:d7:4e:99:92:84:86:79:
a2:1c:55:92:22:1e:b0:e0:42:16:30:2a:cb:b8:46:
fc:89:45:64:da:4c:ac:08:7c:08:69:3c:0e:cc:75:
7b:8e:af:1a:86:14:a0:ab:d0:ea:76:fc:a4:6d:2a:
7f:7b:49:1c:d6:f2:f0:9f:d6:1e:64:ba:f5:45:5e:
19:ce:cd:3c:08:64:d2:0e:a2:24:5e:bb:46:e9:8e:
fc:4a:5c:61:cf:cb:4e:93:39:cf:8f:fa:5b:7c:da:
55:a7:16:3b:3c:ea:68:53:f6:1c:00:58:e1:9d:4e:
a0:25:b1:8d:1e:bc:35:1a:af:0b:75:2a:a4:85:d8:
23:c9:91:93:91:e2:bf:07:22:57:3f:d8:4f:7d:73:
46:ad:94:fc:94:57:d7:96:07:5a:d0:37:82:0b:53:
23:9b:c9:91:82:41:9d:b4:c6:38:f5:49:f9:db:7c:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.19.0/24
195.182.43.0/24
Signature Algorithm: sha256WithRSAEncryption
73:41:fb:bd:60:75:12:75:21:ab:8a:04:2e:b9:10:1b:4c:3a:
f1:ff:99:8a:5c:b3:1d:d5:78:8a:5a:6b:80:04:e7:16:09:6f:
78:5c:fe:3e:57:ee:6c:84:3d:0b:21:37:da:88:08:e4:dc:b6:
e3:03:8b:a1:c7:b0:f1:f5:cc:e1:bc:89:2a:8a:b1:1a:33:6f:
7c:9c:22:ff:ac:c5:09:08:79:4b:2d:0b:e8:b9:29:11:6e:c7:
36:5c:fb:92:3c:2a:15:b0:35:55:d4:e7:d0:99:63:f0:40:54:
64:f3:3d:3c:ee:1c:ef:ae:78:53:f1:f7:44:7f:6a:0e:0f:e5:
c0:c3:67:02:6b:95:a3:e6:bf:a0:c4:88:54:b1:0c:ef:0f:a4:
84:52:2e:5f:62:7f:58:2b:fc:1d:9c:f7:f1:66:0a:c8:93:e0:
02:a9:d8:b7:c5:0b:e3:be:e7:ab:81:d4:7f:67:76:19:ed:2f:
27:05:c0:39:b2:07:f9:d4:2b:fc:63:4f:fa:7a:18:24:ea:40:
ca:5c:70:12:08:73:aa:f0:5d:9e:de:a4:14:aa:2e:fb:56:2d:
f1:6d:17:8e:d1:ba:5c:96:6b:f9:2a:1c:7a:2d:5e:56:a2:f9:
ba:61:d1:02:d1:5a:04:4b:f0:6c:d4:f3:2e:15:17:5c:ff:47:
ca:20:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:37:00 2024 by rpki-client on console-ams.rpki-client.org