Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.cer (raw, json)
Hash identifier: ELl8qm3Wd1DywfWO68XtDV14rg7nQrhpFydCAEINEis=
Subject key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE2D986EDCCAC53676B14DEC61B965
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198392
IP: 31.217.224.0/21
IP: 2a01:7f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2d:98:6e:dc:ca:c5:36:76:b1:4d:ec:61:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:78:23:90:cd:93:64:2e:60:d1:47:c7:03:
84:1b:dc:4a:46:54:e6:c6:5c:b4:3c:e3:c9:86:72:
e7:41:7d:e5:fa:62:ab:28:8e:b4:ee:88:99:78:7e:
55:91:61:e6:16:58:54:02:95:87:56:28:2e:70:ec:
ce:51:59:87:a1:3c:97:56:54:56:54:1f:9f:33:5e:
59:42:ce:dd:42:12:de:e3:33:85:a6:e9:78:20:7d:
d6:1a:a7:81:2e:62:50:89:05:03:6c:e8:56:f8:ed:
26:f1:0b:73:b0:2f:7c:df:cb:53:04:59:f1:47:56:
fe:8b:2d:e5:2c:9c:73:c2:e1:95:0d:7a:9d:76:1b:
4e:57:dc:21:3c:97:60:98:74:ea:8e:d8:08:b6:3c:
99:bc:1b:bc:35:9e:bd:f8:b8:a6:bf:93:63:31:19:
87:2c:af:45:8d:c9:e2:6a:1a:b8:82:f3:5a:f9:6a:
b8:73:7f:85:f8:62:0e:c8:ab:23:ef:5a:45:87:2c:
b5:3b:2c:2a:8c:62:e8:7c:ab:f0:cc:64:80:6b:74:
c8:fa:c8:65:f7:ab:f7:8e:90:8b:91:11:9d:4e:68:
09:5f:a2:a2:b5:1b:c8:4f:02:48:b2:6a:b6:5d:00:
e3:43:36:02:13:e2:c0:77:53:6d:59:d7:e1:da:98:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.224.0/21
IPv6:
2a01:7f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198392
Signature Algorithm: sha256WithRSAEncryption
6c:22:3c:41:19:bd:65:5c:51:a2:1c:42:9b:61:51:e0:a5:e0:
e7:06:1c:32:6a:31:6c:66:a6:29:21:cf:58:d6:17:b5:18:f9:
ed:4d:a1:88:65:39:db:32:0b:81:99:27:21:8e:32:77:00:7f:
de:38:5d:6b:93:af:11:f1:18:59:76:75:64:b5:e5:c2:89:3f:
48:86:d3:f8:17:a6:d0:23:a0:e3:31:7f:d4:b3:11:18:af:2f:
bb:fe:30:95:e3:4e:0e:9c:a3:57:43:44:74:79:c4:82:cb:38:
cc:fe:68:e2:72:63:0f:7a:a8:ca:e3:41:b0:97:94:02:42:d7:
e0:28:c8:84:ea:25:72:6a:7e:a0:4d:6f:7a:d0:61:22:4e:de:
89:37:20:55:c2:3b:24:a0:cd:af:17:93:cc:a6:b2:dd:c5:9f:
36:05:5a:0e:79:9b:37:e5:f2:c0:4b:11:8c:a7:70:61:17:77:
4b:ae:a5:ba:1f:6d:18:6f:d1:b1:77:b3:4e:2d:47:a6:52:cd:
ce:8e:d1:32:6f:e7:d1:30:6a:35:44:9c:eb:25:6d:92:dc:2c:
97:aa:e6:62:5a:ac:cd:ba:61:27:d1:44:67:bd:02:aa:bd:5b:
fc:7b:81:44:93:e3:14:05:1b:6d:91:3b:52:f2:8b:9c:44:e8:
af:64:04:8a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzI3i2YbtzKxTZ2sU3sYbllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NThiMzc0MzZhODlmYWNhMmM0ZjdlNjBmOWFjNGQ0N2ExOTlhZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps14I5DNk2QuYNFHxwOEG9xKRlTm
xly0POPJhnLnQX3l+mKrKI607oiZeH5VkWHmFlhUApWHVigucOzOUVmHoTyXVlRW
VB+fM15ZQs7dQhLe4zOFpul4IH3WGqeBLmJQiQUDbOhW+O0m8QtzsC9838tTBFnx
R1b+iy3lLJxzwuGVDXqddhtOV9whPJdgmHTqjtgItjyZvBu8NZ69+Limv5NjMRmH
LK9Fjcniahq4gvNa+Wq4c3+F+GIOyKsj71pFhyy1OywqjGLofKvwzGSAa3TI+shl
96v3jpCLkRGdTmgJX6KitRvITwJIsmq2XQDjQzYCE+LAd1NtWdfh2pjVDQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJWLN0NqifrKLE9+YPmsTUehma1mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2UzMWYz
OS1jOWY0LTQyYzItYTAzZS0xMjEyNTMxMmIyYTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZTMxZjM5
LWM5ZjQtNDJjMi1hMDNlLTEyMTI1MzEyYjJhMy8xL2xZczNRMnFKLXNvc1QzNWct
YXhOUjZHWnJXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDH9ngMA0EAgACMAcDBQAqAX9AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMG+DANBgkqhkiG9w0BAQsFAAOCAQEAbCI8QRm9ZVxR
ohxCm2FR4KXg5wYcMmoxbGamKSHPWNYXtRj57U2hiGU52zILgZknIY4ydwB/3jhd
a5OvEfEYWXZ1ZLXlwok/SIbT+Bem0COg4zF/1LMRGK8vu/4wleNODpyjV0NEdHnE
gss4zP5o4nJjD3qoyuNBsJeUAkLX4CjIhOolcmp+oE1vetBhIk7eiTcgVcI7JKDN
rxeTzKay3cWfNgVaDnmbN+XywEsRjKdwYRd3S66luh9tGG/RsXezTi1HplLNzo7R
Mm/n0TBqNUSc6yVtktwsl6rmYlqszbphJ9FEZ70Cqr1b/HuBRJPjFAUbbZE7UvKL
nETor2QEig==
-----END CERTIFICATE-----
Generated at Fri May 3 02:12:22 2024 by rpki-client on console-ams.rpki-client.org