Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.cer (raw, json)
Hash identifier: iDrc9dColmwcWyVbDy8NgxAFVz+Wp63ii/vLaUgbP+Q=
Subject key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D5F867807AF40B96F98040CFF44B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 2038 -- 2040
IP: 131.154.0.0/16
IP: 141.108.0.0/16
IP: 192.84.127.0 -- 192.84.156.255
IP: 192.135.8.0 -- 192.135.37.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5f:86:78:07:af:40:b9:6f:98:04:0c:ff:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6311a69c8172044854931f100a59bd089cb8881a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:68:24:ca:86:e9:fb:01:ad:ee:a7:cd:c1:
59:44:bb:4f:50:d7:ca:de:eb:4d:8a:c6:c1:60:d2:
c1:9c:18:57:57:30:f8:49:e3:66:be:a4:8c:9b:0e:
c4:46:ab:3f:f5:1f:77:25:db:3d:63:ee:b5:49:04:
27:3c:9b:89:d5:1a:ef:65:93:b3:1b:01:a9:78:b8:
2a:19:5e:62:c9:89:83:17:bd:dc:cd:a3:0d:fc:04:
7a:dd:d1:1b:31:9a:60:c9:97:44:80:09:16:21:23:
eb:5d:94:d6:56:1f:b8:48:a3:d8:10:72:39:0e:6f:
c0:d0:51:58:6e:03:85:51:e1:f4:f1:8e:e0:1a:f3:
c6:be:cc:fa:40:08:c8:1e:1e:a8:1d:46:5b:50:e5:
30:64:00:a5:74:37:63:05:f8:2e:1f:31:4b:28:41:
d3:8e:b4:7d:d9:9e:f7:db:d2:f0:47:bb:0c:be:41:
ff:36:43:53:2e:a8:0b:18:72:25:57:8a:c3:1f:4c:
9d:a0:bb:ca:2b:89:91:26:8b:7e:6e:ac:ed:7b:82:
2d:73:ef:ee:f2:ec:2d:32:b6:91:51:34:73:2d:56:
07:60:4a:ac:ab:7c:1f:62:96:4c:aa:d7:59:76:10:
94:d8:e8:aa:40:01:ef:59:2d:ae:72:11:d3:ad:ea:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.154.0.0/16
141.108.0.0/16
192.84.127.0-192.84.156.255
192.135.8.0-192.135.37.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2038-2040
Signature Algorithm: sha256WithRSAEncryption
42:95:1f:2e:a2:87:7a:9c:5e:51:b3:8d:62:b1:c9:03:e1:a7:
b9:20:df:5a:b0:e2:d2:31:f7:c7:b9:04:d5:2c:98:e0:4a:38:
03:69:c9:b0:70:84:af:c2:16:e7:f7:3d:8b:4f:d6:d9:47:94:
7c:a5:00:d9:e0:a6:3f:2a:03:7a:6f:41:c0:06:c5:4d:b1:81:
66:31:50:2e:08:e6:3f:39:59:4e:af:af:84:12:b4:98:7a:5d:
a8:e6:3e:8a:62:c4:0c:20:ed:2d:1c:42:37:8e:2b:c6:cd:b3:
fe:ad:a9:f5:6f:fd:e2:93:d5:51:2b:46:7b:18:94:66:ea:35:
b6:a4:ac:18:a5:e5:84:7f:0c:4b:9d:bf:d3:07:66:8e:44:e6:
89:d4:7f:c7:cf:f9:e6:cc:c7:97:23:93:40:b6:f3:ed:2f:f6:
aa:51:06:49:0d:bf:c2:ca:8d:2a:64:27:5a:6e:cc:2f:fc:f7:
1c:05:76:4b:ba:e0:7a:17:0b:23:55:49:9d:0f:0b:1d:13:c1:
cb:14:7f:3b:a0:82:d3:97:ec:c9:ae:dc:42:85:72:72:3b:12:
55:20:51:78:49:32:86:91:84:eb:8f:a9:44:dd:fc:eb:96:71:
26:4c:18:2e:51:94:67:ee:31:50:60:bd:d6:5e:30:b8:99:ab:
5a:ad:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:05:53 2024 by rpki-client on console-fra.rpki-client.org