Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer (raw, json)
Hash identifier: 3FEdWkMs0MvWI3JZJQZMc/h11pLJNEhryCfzB0TrQ+A=
Subject key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFD509FAF2830D8F778C0506456CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 171.22.145.0/24
IP: 185.243.129.0/24
IP: 195.149.74.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fd:50:9f:af:28:30:d8:f7:78:c0:50:64:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:56:ab:78:d6:84:c2:19:1d:46:9b:d3:cb:
ec:45:42:97:ca:b5:a2:12:d3:d5:f2:ee:0f:58:13:
7d:0f:5e:8b:90:81:9a:95:78:bf:b2:af:9e:c0:1a:
c9:73:07:12:be:22:19:9a:35:eb:de:fb:16:b0:67:
5d:95:d3:30:3f:c8:ed:1a:36:29:77:72:28:b9:2b:
60:7e:b3:0f:32:19:d6:49:a5:b8:3b:12:97:b6:59:
a7:24:74:fb:81:c0:1e:b8:eb:d3:63:ce:e1:ac:06:
ad:8b:3b:25:17:5a:51:7e:29:03:04:58:8e:9c:46:
4c:b3:4c:24:d6:2c:93:e9:4d:4b:cb:47:1d:23:8a:
71:c1:03:da:1e:6e:0e:eb:c9:eb:86:9e:f9:c5:2b:
88:97:e4:c3:b0:55:9c:ac:ea:82:5e:c2:72:20:51:
1b:c8:8a:6f:70:8c:5c:f3:44:70:f4:d0:7e:9d:72:
22:94:c9:40:79:2a:8a:ff:c2:ba:89:d8:c6:a3:a6:
bd:6e:70:1b:6f:3c:63:87:80:ca:3b:d1:07:3b:6c:
91:a1:72:45:85:9a:cb:22:d7:99:97:93:35:5a:a7:
09:6a:d4:cd:09:8b:c1:05:b3:fc:ad:52:8b:ad:f1:
0a:b5:d0:95:d1:94:6a:91:45:38:f1:ca:67:3e:97:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.145.0/24
185.243.129.0/24
195.149.74.0/24
Signature Algorithm: sha256WithRSAEncryption
04:21:b2:96:03:0c:f7:d0:f4:67:54:99:3c:7d:51:3c:c4:57:
72:c8:cb:a1:23:0a:67:8e:43:9f:3a:87:22:98:7b:c4:ed:d6:
3c:80:c8:6e:a8:e0:93:e4:a5:1a:da:c5:f1:d2:01:b9:c6:a2:
f6:25:0f:42:eb:c3:d4:9d:7e:60:58:81:52:47:82:7f:44:db:
1f:fc:57:b8:7d:19:38:24:aa:b9:30:f5:16:ad:69:84:43:fc:
f7:c4:a3:8a:48:1b:f7:52:6d:22:4b:51:9c:46:11:bc:33:b2:
61:df:f7:e9:c6:f7:59:bb:dd:b7:64:56:b9:4f:00:1f:5b:7d:
4c:c2:ee:4d:3b:44:20:11:b6:d9:d6:8b:bc:a9:d8:66:ca:3f:
d6:33:da:ed:22:19:77:8d:70:e2:98:97:0a:26:47:7c:1c:28:
b8:15:e7:e9:0f:af:5c:1f:1e:e7:17:ee:ef:a2:5b:c2:d6:fe:
46:ec:ee:ff:61:dd:6d:8b:fc:45:e3:bf:a3:6f:6a:e3:6b:52:
04:62:cc:50:66:c0:a0:37:ce:7b:fc:84:8d:e7:b7:93:36:59:
c2:5f:d2:4c:35:12:33:0d:2d:03:52:ab:e5:ba:0c:09:af:e3:
6d:7f:9a:f4:1d:ed:c3:2e:62:32:6d:54:fe:df:6d:a1:cd:2d:
63:80:a9:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAYzC2v1Qn68oMNj3eMBQZFbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzJlM2QwMzdiZjA1MDc1NzFiMmEwNjhjYjkwMzA4Mzc0Y2U1M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZJWq3jWhMIZHUab08vsRUKXyrWi
EtPV8u4PWBN9D16LkIGalXi/sq+ewBrJcwcSviIZmjXr3vsWsGddldMwP8jtGjYp
d3IouStgfrMPMhnWSaW4OxKXtlmnJHT7gcAeuOvTY87hrAatizslF1pRfikDBFiO
nEZMs0wk1iyT6U1Ly0cdI4pxwQPaHm4O68nrhp75xSuIl+TDsFWcrOqCXsJyIFEb
yIpvcIxc80Rw9NB+nXIilMlAeSqK/8K6idjGo6a9bnAbbzxjh4DKO9EHO2yRoXJF
hZrLIteZl5M1WqcJatTNCYvBBbP8rVKLrfEKtdCV0ZRqkUU48cpnPpfO1QIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFGMuPQN78FB1cbKgaMuQMIN0zlPtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2Y5ZjRh
OS1hMGNkLTQxMDctYWE0MS1kNTJhMTg5ODU5OTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvZjlmNGE5
LWEwY2QtNDEwNy1hYTQxLWQ1MmExODk4NTk5OS8xL1l5NDlBM3Z3VUhWeHNxQm95
NUF3ZzNUT1UtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQAqxaRAwQAufOBAwQAw5VKMA0GCSqGSIb3DQEB
CwUAA4IBAQAEIbKWAwz30PRnVJk8fVE8xFdyyMuhIwpnjkOfOocimHvE7dY8gMhu
qOCT5KUa2sXx0gG5xqL2JQ9C68PUnX5gWIFSR4J/RNsf/Fe4fRk4JKq5MPUWrWmE
Q/z3xKOKSBv3Um0iS1GcRhG8M7Jh3/fpxvdZu923ZFa5TwAfW31Mwu5NO0QgEbbZ
1ou8qdhmyj/WM9rtIhl3jXDimJcKJkd8HCi4FefpD69cHx7nF+7volvC1v5G7O7/
Yd1ti/xF47+jb2rja1IEYsxQZsCgN857/ISN57eTNlnCX9JMNRIzDS0DUqvlugwJ
r+Ntf5r0He3DLmIybVT+322hzS1jgKnT
-----END CERTIFICATE-----
Generated at Fri May 3 07:41:23 2024 by rpki-client on console-fra.rpki-client.org