Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.cer (raw, json)
Hash identifier: nWuOlCCz/b3L4mqr1ViLV+av5mAH5Xw/rB+TmZQpnV4=
Subject key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8ED2D61D90F4937200B62AF612444
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13238
AS: 44534
IP: 5.45.192.0/18
IP: 5.255.192.0/18
IP: 37.9.64.0/18
IP: 37.140.128.0/18
IP: 51.250.128.0/17
IP: 77.88.0.0/18
IP: 84.252.160.0/19
IP: 87.250.224.0/19
IP: 89.169.192.0/18
IP: 90.156.176.0/20
IP: 92.255.112.0/20
IP: 93.158.128.0/18
IP: 95.108.128.0/17
IP: 141.8.128.0/18
IP: 178.154.128.0/18
IP: 185.32.186.0/23
IP: 213.180.192.0/19
IP: 2a02:6b8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ed:2d:61:d9:0f:49:37:20:0b:62:af:61:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:80:4b:79:e8:e3:ec:1e:a3:68:bf:9e:da:
9b:54:ba:aa:96:49:07:0e:37:74:86:63:8c:0c:0b:
26:0f:4b:00:c1:ee:b6:5c:1c:01:33:7d:80:54:10:
6f:aa:0e:a7:e6:6c:9b:2f:e7:f4:b7:a3:1b:2b:a2:
8f:47:56:97:2b:3e:be:b2:f5:94:ae:ef:bd:46:a5:
4d:1f:57:47:8a:8d:67:9c:17:d8:6e:5c:0c:18:5e:
c3:2b:c3:05:52:4b:6f:a5:5d:52:4b:33:21:4e:e0:
2a:5b:e2:27:c5:82:ec:a6:08:e4:b8:7c:52:f4:bc:
a3:b5:49:fd:a3:69:ab:db:11:dd:94:37:8a:1d:9e:
86:fc:5c:1c:0f:e1:f8:6b:c0:78:9e:1c:85:d4:51:
b1:8f:9e:3d:0a:05:bd:f8:73:6a:3a:e6:c9:df:95:
3a:fa:bc:0d:b9:33:31:58:a1:b6:49:7e:78:b1:48:
e2:a4:ed:53:24:40:fb:98:c8:30:dd:b4:39:a0:dc:
7a:97:76:58:f1:07:81:ce:23:52:1a:fe:e0:7c:fa:
a2:97:e1:fa:e5:68:ec:7d:4c:a5:a9:68:55:c6:10:
c0:e8:72:60:a6:b8:23:e6:fa:e8:24:a4:99:16:1e:
17:85:17:0f:36:7d:81:8e:1e:a5:db:0a:b6:20:85:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
51.250.128.0/17
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
89.169.192.0/18
90.156.176.0/20
92.255.112.0/20
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.186.0/23
213.180.192.0/19
IPv6:
2a02:6b8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13238
44534
Signature Algorithm: sha256WithRSAEncryption
96:a6:f1:dd:94:49:4e:e2:1e:bd:8b:29:98:3b:63:60:d1:38:
c7:26:a6:7c:f7:59:25:e1:a4:1b:6c:3d:f3:1e:b6:d4:c3:77:
23:ee:80:9f:da:34:3b:00:a6:24:18:06:73:b0:08:bd:45:3e:
64:0c:91:8e:0c:50:d4:ee:00:bb:ab:9c:a3:a7:20:9a:25:d7:
43:05:01:e3:67:1b:eb:97:d7:a1:01:e2:19:d4:a1:56:bf:eb:
0c:8d:6e:8b:bc:31:d5:56:40:d6:7b:92:63:29:e6:ab:10:43:
5e:22:fc:71:fb:07:48:7f:06:84:0d:32:76:15:67:d1:1d:5f:
2a:d4:b2:d7:cc:37:97:f3:0b:65:b7:99:a2:8c:5e:fa:d2:44:
9b:35:1f:c5:84:32:f4:68:a2:76:30:39:d1:9f:cc:2d:f0:5d:
21:28:07:27:2f:c0:4d:91:ab:fe:05:0e:4c:e6:15:fe:82:ae:
f5:62:be:64:f2:34:93:27:22:93:ed:a1:58:06:98:da:8c:0a:
02:db:75:8a:91:f2:97:b7:f9:39:e8:75:42:67:af:4c:e7:18:
60:f5:75:45:b5:99:af:46:ec:09:5b:b4:df:01:c1:02:b2:d3:
b5:6d:ce:b7:fa:9b:7a:cc:9f:5b:04:a2:18:63:7a:93:ae:35:
cb:56:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:07 2024 by rpki-client on console-fra.rpki-client.org