Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ky-4K40CkLHKWMx_G-1j5OQ3oMs.cer
File: ky-4K40CkLHKWMx_G-1j5OQ3oMs.cer (raw, json)
Hash identifier: 5xqQgnsxSg63rrUWu4Iniu0YFIp94Xo+QMyszzLKE8c=
Subject key identifier: 93:2F:B8:2B:8D:02:90:B1:CA:58:CC:7F:1B:ED:63:E4:E4:37:A0:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4D01B03C0A0BDFD78B33F7DEB04E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12668
IP: 5.189.0.0/17
IP: 37.98.240.0/20
IP: 46.48.0.0/17
IP: 91.191.224.0/19
IP: 92.242.0.0/19
IP: 95.82.192.0/18
IP: 185.4.204.0/22
IP: 185.60.48.0/22
IP: 188.226.0.0/17
IP: 212.49.96.0/19
IP: 213.159.192.0/22
IP: 2a02:17d0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4d:01:b0:3c:0a:0b:df:d7:8b:33:f7:de:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=932fb82b8d0290b1ca58cc7f1bed63e4e437a0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:75:91:b6:21:cf:1c:ef:1c:2c:10:a1:73:
f6:41:7d:09:7c:26:ec:ef:88:59:e4:63:f6:09:2d:
7a:2b:3d:70:4a:79:46:17:de:2d:b6:0b:2e:f7:10:
a8:a6:8c:36:b0:eb:4b:fa:93:0d:09:7d:58:91:2d:
7c:7c:ef:c3:84:7c:52:3c:ac:fa:37:dc:14:83:2d:
17:ae:a4:3e:9b:c5:42:f3:5d:0a:02:d6:50:2d:8b:
ee:c6:50:84:3f:48:56:d1:9f:75:6e:7d:36:6d:45:
57:9f:64:f6:75:9b:8c:29:3f:be:d4:90:59:9b:27:
37:f4:d9:ee:7f:30:90:20:c7:65:2a:7b:10:80:d7:
57:95:55:06:5e:17:58:7b:d6:f6:83:fa:f6:7b:86:
2f:02:1b:b3:fd:b2:2e:ac:b0:e5:3b:8f:65:ec:7a:
1d:e8:47:80:c4:e2:66:25:ca:2c:6c:31:12:27:46:
14:bc:9d:48:55:f4:d9:da:28:a4:c0:9f:5a:da:a0:
bc:c5:5f:33:ca:54:15:30:08:b6:67:c9:1b:a0:f1:
58:71:fc:aa:c4:42:cc:d6:ef:ad:66:7d:76:e7:84:
70:0d:de:1c:e3:02:fc:92:72:e3:91:19:ea:5f:7c:
e8:e6:f8:23:4d:78:51:99:36:6a:80:9d:de:4b:ac:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:B8:2B:8D:02:90:B1:CA:58:CC:7F:1B:ED:63:E4:E4:37:A0:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.189.0.0/17
37.98.240.0/20
46.48.0.0/17
91.191.224.0/19
92.242.0.0/19
95.82.192.0/18
185.4.204.0/22
185.60.48.0/22
188.226.0.0/17
212.49.96.0/19
213.159.192.0/22
IPv6:
2a02:17d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12668
Signature Algorithm: sha256WithRSAEncryption
64:59:ec:6a:da:64:e4:69:27:bc:6a:ec:b4:75:13:2e:9c:02:
2f:2e:b1:cb:19:ed:28:cc:b0:a5:ca:e9:0c:fd:bd:a8:02:05:
ea:5d:5c:6f:85:a2:a9:eb:09:dd:78:7f:72:ce:39:5a:69:34:
ad:35:f8:23:e1:0b:20:7e:8b:0a:16:a7:3e:b6:9a:09:fe:41:
49:5c:e0:24:af:99:6e:15:e5:19:87:54:9a:42:bd:d4:f6:6a:
50:1d:b0:3f:64:9d:25:1f:08:e0:2e:02:3b:5e:10:8f:35:74:
6c:ad:fd:42:74:74:c1:73:4e:d2:3e:b5:97:e2:fe:63:20:dc:
8d:df:af:8c:fe:bc:30:ff:7e:e8:3d:b7:2c:d7:11:df:83:d3:
0d:b6:50:3a:6c:11:bd:cf:a1:25:0e:88:a1:5c:d2:5b:56:76:
66:f5:ed:76:06:9c:3f:56:d6:6b:5e:61:10:1c:f7:b4:98:94:
bb:cd:ae:90:88:72:15:69:c4:6b:d3:fd:57:c2:40:d4:81:5f:
f0:f4:b2:18:0d:c1:70:04:c7:2a:a1:63:47:7d:69:f7:5e:99:
80:8e:8a:d2:1c:38:a1:88:cc:13:a6:52:05:50:5f:4d:4a:c9:
eb:d9:57:f3:d8:cb:6e:01:dc:d1:a5:2c:da:d1:55:b0:ba:78:
e3:9d:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:43 2024 by rpki-client on console-fra.rpki-client.org