Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer (raw, json)
Hash identifier: 6eGuw2EeH217Dtqbjti2PMx9/7PWBVx6xYXa/JTvnVs=
Subject key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489583960AF4B4A6026CAFFF7CFA51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31004
AS: 48263
IP: 91.230.140.0/23
IP: 93.157.32.0/21
IP: 185.95.65.0/24
IP: 193.203.120.0/23
IP: 194.116.210.0/23
IP: 194.150.244.0/23
IP: 2a00:4bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:95:83:96:0a:f4:b4:a6:02:6c:af:ff:7c:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:f5:8c:a4:ed:b3:a3:1f:bf:df:58:67:b6:
53:b6:fe:0b:34:29:47:64:5b:ee:2e:20:04:85:7d:
7e:3a:8d:8f:4d:3e:fa:5f:19:e7:e2:06:be:8a:a9:
e7:e4:6b:1f:33:11:34:00:83:62:e2:c1:11:f0:0b:
85:c9:69:e9:4e:8c:e2:da:39:d4:58:5d:6e:54:bb:
ee:54:50:0f:64:ae:14:e3:36:a0:6a:3a:75:0b:6b:
28:ee:d4:a2:a9:05:a6:52:9a:5e:40:79:0a:e1:c1:
c3:09:49:de:77:f3:ad:49:99:b8:88:62:ba:ec:d6:
04:e5:1a:b4:28:18:b4:cc:e0:ae:b5:7d:cd:82:b4:
30:8d:d1:be:ed:3f:d1:51:30:ee:75:f3:69:f1:f4:
7c:38:ba:36:e7:92:5c:39:0a:d1:99:aa:f4:4e:d7:
b2:ec:05:b7:0e:9c:e6:27:1c:ea:ac:93:88:74:ff:
e3:69:ce:15:5a:c3:2f:58:6a:46:01:11:82:87:17:
85:64:a2:28:e2:c1:59:59:7d:db:99:f6:65:2a:75:
86:9c:e2:67:12:8e:f9:7d:11:db:24:d9:05:e4:86:
fd:7d:5e:97:22:ba:27:cf:56:0f:b4:c7:c1:7b:4e:
70:6d:8b:41:01:ae:67:07:c3:57:51:c9:87:60:3d:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.140.0/23
93.157.32.0/21
185.95.65.0/24
193.203.120.0/23
194.116.210.0/23
194.150.244.0/23
IPv6:
2a00:4bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31004
48263
Signature Algorithm: sha256WithRSAEncryption
74:ed:ab:4f:ad:d0:2a:5a:54:91:e2:b5:c1:34:3b:bf:fe:09:
12:62:4f:a3:7e:0b:69:25:58:5d:b9:49:56:06:74:33:a9:91:
46:c7:72:70:51:15:a2:33:d9:e8:44:02:d2:da:8e:3d:fe:fc:
fb:92:ab:d9:03:be:64:95:d1:e6:d4:b6:e8:39:3c:df:81:6b:
5e:cf:32:b4:1d:ac:14:78:6a:9f:3b:07:7d:15:e1:9e:e8:e9:
ab:16:48:3b:e0:dd:58:0c:d3:30:8b:c5:e6:32:5b:de:c2:b9:
c0:67:2d:55:c5:20:6c:22:74:cc:86:53:47:f2:2e:52:c0:bf:
a6:7d:2f:10:6c:6a:bd:21:28:01:1b:85:90:82:34:c8:b8:c8:
57:e5:0d:5a:69:ee:9a:f6:71:2d:4a:53:33:09:98:ce:ae:e8:
da:ee:e0:fd:58:8c:ab:76:73:b3:fa:0c:54:60:bf:e8:8d:90:
47:f9:fd:35:40:e8:3e:33:92:c8:bd:d1:f0:6c:67:64:c8:51:
3f:68:9b:35:5c:36:3b:0d:27:4a:ab:c4:bc:1c:57:33:e9:b4:
ef:81:18:84:3e:a5:09:25:1b:b7:f2:38:dd:d4:54:cd:fe:5d:
65:e7:c1:b4:ac:fa:6d:9a:0f:34:b0:09:ce:57:a5:c8:4f:88:
16:b2:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:12:35 2024 by rpki-client on console-ams.rpki-client.org