Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
File: YzvKDtH5tgvA7UIwItA4nim2zdQ.cer (raw, json)
Hash identifier: IQA3Z1xcepbrEX5ozxiBGQMLAZuMnbhlG2OmRZ/CSBI=
Subject key identifier: 63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3492CDDB15FDC8035EDA9649F0DCBA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210385
AS: 211728
IP: 2a11:5cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2c:dd:b1:5f:dc:80:35:ed:a9:64:9f:0d:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:2b:a1:24:36:f1:14:ba:de:f9:f5:dd:94:
44:c8:87:75:df:68:1a:f5:09:24:89:50:83:64:84:
69:b9:41:b4:e2:62:80:a8:a0:97:08:d3:70:56:8e:
25:bd:5e:07:9a:69:5f:46:80:3e:72:bf:2e:5e:c2:
d1:46:68:96:f3:3d:47:ff:11:a7:4e:23:f8:60:49:
9a:6f:a4:a2:dd:da:4a:c2:30:26:3e:e5:ee:c3:dc:
62:74:fa:b4:90:68:2e:82:20:ea:ea:b8:58:32:a4:
ba:01:d2:77:a9:5c:a7:14:c1:57:35:a1:a7:61:0e:
bf:a6:4e:91:e2:57:7a:d1:8b:53:f6:fc:68:ca:3e:
e5:2c:d7:31:1d:bb:46:cf:d3:ae:57:19:40:db:10:
0a:eb:85:51:ed:24:9c:de:22:a9:3b:df:1f:d1:58:
25:96:d0:dc:b8:8b:27:88:98:1d:5d:c5:e9:37:9b:
c6:82:4a:0c:77:99:0d:db:95:e6:98:f9:ee:5b:77:
9b:fb:a3:c4:b1:5c:48:1c:0a:1e:15:eb:f0:f6:ef:
13:8f:aa:f0:12:25:45:05:ad:dd:04:3d:4c:ec:04:
80:5c:8a:31:c7:b3:cd:3e:b0:e3:56:02:9f:3e:82:
70:fb:0b:da:e4:04:89:c9:15:bc:74:12:1c:50:34:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210385
211728
Signature Algorithm: sha256WithRSAEncryption
78:28:3d:9a:94:02:53:95:c9:4d:18:9e:9a:86:5f:c9:87:d0:
ca:21:5f:78:d3:8e:4d:15:67:27:9f:ff:b5:66:6b:ab:e4:97:
35:39:04:7e:22:6d:f6:e4:90:36:33:f4:57:01:7b:fc:6f:72:
53:66:16:7f:9b:2a:97:ae:a9:eb:27:29:0b:07:76:de:22:3c:
fe:23:fe:e9:04:76:02:90:89:82:c2:9c:a8:f5:ee:c9:d2:50:
93:2d:d2:df:ab:9d:13:f6:ac:5f:b8:94:b3:cc:1c:2c:7c:71:
c3:b0:7a:09:31:9f:f8:f4:9d:b2:f0:28:41:61:c5:b6:10:48:
ef:5c:e2:6c:a6:81:7a:b6:5b:90:a8:e0:5d:e1:7b:0e:61:96:
79:da:d8:e7:22:5c:6d:82:4b:4c:d8:e1:99:9b:36:79:0c:9b:
5b:05:c0:26:88:2b:f8:1e:16:af:f3:f3:10:d1:e0:23:4e:cc:
4a:35:1f:83:e1:56:79:d2:54:6a:1b:43:ed:ff:b4:80:bd:65:
53:a1:01:14:1d:64:b8:2b:25:11:8a:f1:a8:35:6d:6b:ee:db:
1c:7f:e2:49:d6:1b:cb:aa:80:0f:e9:a4:92:a3:62:3f:1f:e3:
52:74:76:4f:97:02:ab:fe:79:9d:d2:6c:9d:d9:66:a6:cc:c4:
af:92:16:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 01:49:11 2024 by rpki-client on console-ams.rpki-client.org