Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
File: is2ygftl8Ci3zcq5xHBup8RZQCI.cer (raw, json)
Hash identifier: /bP0bsNKVNaNHdnMnuJzEVwTzxmc1+uh/CA5NF5XQc0=
Subject key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7161DF161F4EC4C3775FECB52C070
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47655
IP: 176.111.72.0/21
IP: 194.152.34.0/23
IP: 2001:67c:2760::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:1d:f1:61:f4:ec:4c:37:75:fe:cb:52:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:c2:c7:81:98:fe:1b:9b:9e:14:13:f2:8b:
ab:72:3e:49:b4:bd:f2:7e:d2:49:db:62:ac:5e:ec:
8b:52:d0:29:be:ea:c0:1e:84:34:ca:ab:42:ef:b4:
53:ff:c1:03:c1:60:c2:3a:23:87:68:2e:63:9a:23:
ce:b6:77:f6:62:67:20:79:6f:61:6a:22:90:6f:97:
7f:22:f6:39:2d:da:59:e5:3d:59:d0:9d:9d:a2:70:
12:ae:f3:e1:25:a6:02:df:03:0a:2d:2d:da:c3:94:
01:5f:93:6d:3f:c8:4e:cd:b5:5c:cc:58:01:1e:bb:
d7:83:16:22:fa:0b:d2:cb:96:1a:d7:03:95:1b:74:
82:2a:40:2e:b1:28:1a:25:d1:94:4d:6d:74:b6:93:
7d:f6:3b:4f:53:e2:fa:63:93:43:82:61:db:23:f3:
4d:05:91:91:02:38:e0:3f:7c:b2:31:25:fc:b6:57:
2e:31:74:ae:ac:44:95:77:21:46:1d:1c:8a:4f:b1:
58:94:a8:22:83:f0:c3:ca:4e:94:c5:bf:da:81:17:
16:ad:6c:7d:7f:47:78:1b:93:5a:2f:9c:22:da:e5:
b2:c8:7e:bf:c6:f8:1f:a1:96:73:5d:41:86:39:22:
fd:63:ce:6c:27:b6:86:69:a5:aa:57:8d:9f:ad:0a:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.72.0/21
194.152.34.0/23
IPv6:
2001:67c:2760::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47655
Signature Algorithm: sha256WithRSAEncryption
0a:3e:bc:e4:08:67:1b:d0:c9:47:11:dc:43:70:b0:1b:6b:f2:
a6:63:23:57:c7:50:11:4f:a9:f5:8f:4d:aa:7d:90:ea:f0:13:
16:9a:69:47:08:32:3b:f0:e9:b4:df:8d:36:6a:77:ba:f7:7b:
6f:71:ae:b3:e0:77:b1:e9:53:fa:0c:d8:a3:16:b4:e7:22:ca:
3a:68:1a:05:56:d5:40:9a:aa:6d:43:9d:ce:fa:e7:f3:b0:ed:
05:4b:c0:b2:73:f7:ba:65:7c:13:5d:e5:0b:e1:a7:76:97:16:
5b:e3:f9:7c:90:75:b7:4f:b7:33:7b:27:4b:c8:b3:15:f6:1d:
be:e5:7f:23:5a:ba:4e:88:17:84:27:c2:4e:c3:b6:7d:c9:8b:
85:ab:fe:70:c9:cc:e1:cd:8a:b1:3f:e0:e4:38:66:d6:9d:c8:
7e:20:00:b1:f9:30:32:a7:72:88:1e:52:a0:17:56:61:5a:45:
d2:2f:42:3a:80:75:74:25:28:79:99:38:41:88:45:88:85:94:
e3:a9:07:bf:38:7d:4c:b9:26:a8:45:a9:a0:54:0c:ea:44:8f:
9f:5e:29:a5:12:e2:ef:a2:c6:8f:a7:1b:8b:71:1a:b5:da:da:
e3:f5:e3:ea:6f:c3:37:63:ab:f3:54:9c:52:79:02:27:c6:be:
b5:4e:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:46 2024 by rpki-client on console-ams.rpki-client.org