Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer (raw, json)
Hash identifier: KfXEI+IngmfpxnW88nupJNmzBmjmE1LNd2ICNCgGhGw=
Subject key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF187DD9208B622A453C8A963890E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199900
IP: 185.41.16.0/22
IP: 2a01:5020::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:18:7d:d9:20:8b:62:2a:45:3c:8a:96:38:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6987d0047fb1d8912c63f911305a714f438b1e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:67:b9:97:02:9e:e7:c5:15:6b:00:7d:dc:5b:
49:71:96:ea:45:84:71:31:75:99:7d:9f:a7:04:89:
5d:0b:0a:6f:3f:45:97:61:95:39:4f:39:04:88:eb:
8f:92:46:05:bb:1e:39:d6:b7:31:c9:1e:f8:df:7e:
f1:45:37:97:47:a1:98:1c:33:72:53:99:e1:d0:a5:
46:d9:83:d1:3a:9b:ef:18:92:8e:66:ea:6f:32:59:
b7:bc:00:66:c6:1d:0a:df:4b:e7:c4:12:44:e0:bf:
03:86:87:85:91:9b:ea:e4:f1:f0:3d:c1:8b:d3:79:
e0:84:26:3d:f2:47:ef:3d:69:5e:ff:c7:cb:cc:23:
fb:7c:ff:04:4a:aa:a9:ab:b6:d1:05:6e:ab:c2:3a:
b5:e6:76:6a:54:f3:e3:9f:74:00:ee:21:d4:ac:bb:
e0:09:68:28:60:51:f9:27:e1:b4:a3:25:cf:57:e1:
f7:59:4f:93:e4:88:34:8c:76:dc:e1:6b:65:3a:cc:
3f:e4:bc:84:e3:83:5f:26:6c:e4:79:2b:1c:5f:00:
c7:70:b7:84:09:9d:45:ba:ed:bc:22:17:0e:31:40:
e3:54:64:e2:b0:22:4f:a9:dc:0d:75:5e:83:e3:e2:
04:06:b0:f3:e7:a4:6f:8c:9e:19:33:6c:ce:41:01:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.16.0/22
IPv6:
2a01:5020::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199900
Signature Algorithm: sha256WithRSAEncryption
80:1e:13:be:f6:10:f7:2c:f0:da:58:c8:3f:95:cd:d9:84:6a:
16:13:bb:c6:39:07:31:41:0a:41:ef:e9:e8:22:19:e0:87:4e:
cf:ba:71:34:94:9b:6e:53:82:17:bd:48:97:ee:eb:7b:ad:5e:
17:28:da:8f:16:f7:ea:6f:d4:fd:8d:8d:bc:ee:59:8c:86:e8:
8c:d8:14:55:79:dd:05:89:9f:82:86:e6:5d:7a:a6:e2:1a:9e:
15:45:41:b6:13:72:95:d3:10:e1:60:c4:a7:ef:04:5e:04:ea:
28:32:54:e6:74:25:07:4f:b1:31:01:2a:84:96:eb:34:1c:ef:
cb:a0:77:ef:fd:63:55:b1:a7:4f:c1:9f:2e:15:38:9c:8a:83:
58:60:bf:2b:fd:18:31:67:d4:46:1a:91:64:b8:6d:b4:80:fe:
e8:e4:27:df:9c:0e:6f:5b:80:c2:21:d9:50:da:fa:8f:1b:ad:
98:e5:c7:2e:13:c3:a3:07:22:51:7d:32:f9:ba:60:49:c0:d4:
3a:da:de:02:c6:1d:c2:ba:27:f5:87:a1:50:83:ca:77:c8:c2:
e7:b4:17:2c:c8:3a:37:8d:fb:aa:43:73:86:ea:39:0b:74:26:
f5:f2:ba:51:e8:58:f6:33:ee:2e:c5:24:74:45:e3:65:48:8a:
97:dd:90:dd
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzI3xh92SCLYipFPIqWOJDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTg3ZDAwNDdmYjFkODkxMmM2M2Y5MTEzMDVhNzE0ZjQzOGIxZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7me5lwKe58UVawB93FtJcZbqRYRx
MXWZfZ+nBIldCwpvP0WXYZU5TzkEiOuPkkYFux451rcxyR74337xRTeXR6GYHDNy
U5nh0KVG2YPROpvvGJKOZupvMlm3vABmxh0K30vnxBJE4L8DhoeFkZvq5PHwPcGL
03nghCY98kfvPWle/8fLzCP7fP8ESqqpq7bRBW6rwjq15nZqVPPjn3QA7iHUrLvg
CWgoYFH5J+G0oyXPV+H3WU+T5Ig0jHbc4WtlOsw/5LyE44NfJmzkeSscXwDHcLeE
CZ1Fuu28IhcOMUDjVGTisCJPqdwNdV6D4+IEBrDz56RvjJ4ZM2zOQQHqywIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGmH0AR/sdiRLGP5ETBacU9Dix5xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2Q4MzQ1
NC1kMzU5LTRlOWUtODQxYy00MjkxNGJlMGFhMDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZDgzNDU0
LWQzNTktNGU5ZS04NDFjLTQyOTE0YmUwYWEwNC8xL2FZZlFCSC14MkpFc1lfa1JN
RnB4VDBPTEhuRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSkQMA0EAgACMAcDBQMqAVAgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMM3DANBgkqhkiG9w0BAQsFAAOCAQEAgB4TvvYQ9yzw
2ljIP5XN2YRqFhO7xjkHMUEKQe/p6CIZ4IdOz7pxNJSbblOCF71Il+7re61eFyja
jxb36m/U/Y2NvO5ZjIbojNgUVXndBYmfgobmXXqm4hqeFUVBthNyldMQ4WDEp+8E
XgTqKDJU5nQlB0+xMQEqhJbrNBzvy6B37/1jVbGnT8GfLhU4nIqDWGC/K/0YMWfU
RhqRZLhttID+6OQn35wOb1uAwiHZUNr6jxutmOXHLhPDowciUX0y+bpgScDUOtre
AsYdwron9YehUIPKd8jC57QXLMg6N437qkNzhuo5C3Qm9fK6UehY9jPuLsUkdEXj
ZUiKl92Q3Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:03 2024 by rpki-client on console-fra.rpki-client.org