Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
File: aYfUeTXhE31URCbbUojhKpwCWsI.cer (raw, json)
Hash identifier: zeAJ+3mx+H+ySAcH8xpgf4X1mZD+G1FNPqntkoKdA8U=
Subject key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7951A388A61B0B5B9BA990E1095FE14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.44.178.0/23
IP: 193.84.4.0/23
IP: 2a01:7660::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1a:38:8a:61:b0:b5:b9:ba:99:0e:10:95:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6987d47935e1137d544426db5288e12a9c025ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:07:4e:cd:f2:a7:8e:60:ad:11:89:5b:0f:
13:c2:78:83:2b:92:17:52:5f:56:60:b0:c8:b3:67:
db:6d:61:bd:43:c8:67:0e:1f:b5:6e:36:a2:6e:0a:
c8:42:a3:42:e7:da:7e:5a:5f:b1:37:8b:18:67:ee:
4c:81:8d:90:3d:e5:a5:f9:5d:c9:4e:c8:10:ff:5e:
59:5d:f9:24:26:f7:92:aa:10:2c:c9:55:dd:f5:d1:
96:7f:69:fe:4b:e7:de:57:06:1c:b2:db:e8:38:a2:
bf:50:dd:d8:a4:03:bd:ae:ca:12:ff:d2:06:70:dc:
06:f7:ed:6d:e4:49:f5:94:cf:e7:1d:f0:5c:c6:fc:
96:b1:e2:49:b0:79:e9:35:eb:fc:32:28:21:1f:95:
b4:13:87:6a:3b:07:e2:8d:c3:02:d3:e3:d2:95:49:
fd:6e:a5:c7:d9:21:b3:b0:65:ea:5b:a2:70:de:84:
60:16:bf:a4:53:e3:d7:b7:1a:6a:49:99:a9:7d:c2:
76:d4:74:91:9b:a8:be:5d:dc:23:57:01:c2:6c:e1:
b3:7c:89:3c:e9:8b:5a:f3:bd:c8:b1:d5:8c:1a:a7:
80:3a:b3:96:a5:d6:af:60:87:24:d2:e9:3f:86:5d:
91:7c:fc:6b:3c:01:ce:6f:9e:12:60:94:bf:e8:70:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.178.0/23
193.84.4.0/23
IPv6:
2a01:7660::/32
Signature Algorithm: sha256WithRSAEncryption
79:6a:93:f8:e8:b7:f1:37:f9:f8:ad:7b:c0:cd:9b:46:1c:2a:
70:80:c0:e2:61:e7:e0:07:6e:2b:d5:b3:23:62:e2:d6:7e:d1:
f2:88:a6:90:51:09:12:27:61:cd:07:51:56:27:a0:65:96:5d:
14:9f:36:b1:d7:73:43:75:18:1a:be:7e:62:4c:2f:f7:6e:a2:
6c:17:82:6f:ec:97:5c:9a:8e:26:f4:c4:93:cc:7d:90:df:1f:
61:1b:24:99:93:6b:f8:8c:97:83:9c:0c:a4:f1:87:7f:03:c6:
b2:b0:b1:db:f5:e4:13:5e:7d:5e:ea:2e:4e:df:63:3f:28:f2:
77:d7:88:0f:ec:28:7d:0d:75:55:94:78:be:f8:67:b9:97:d5:
6c:36:0d:0d:9a:e2:e9:38:21:59:25:df:81:ec:58:93:8c:83:
dd:0e:0e:c1:65:c8:cf:a0:f4:05:54:1d:09:40:c6:a1:2e:7f:
ab:5f:12:12:ca:4c:ee:9d:ca:cc:17:17:b0:19:59:49:1f:ba:
39:ea:ab:aa:b1:c1:ec:eb:06:2c:69:85:e7:07:3e:c8:d6:64:
4f:f5:02:d3:a2:31:3a:87:c0:45:b9:b8:d4:77:1b:26:00:55:
8c:5f:65:20:b2:d6:e0:88:96:c6:72:d4:d2:98:4e:ed:62:03:
e2:b8:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:52:18 2024 by rpki-client on console-ams.rpki-client.org