Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
File: ny8WbQXql29prtWORqQfflBSRHU.cer (raw, json)
Hash identifier: tARRsxA1DDFJfK8+AWWPFQ1ZRL9YLCD6Arw/iP52nn8=
Subject key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9189801E291A61D69E4BF1B053ADF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208163
IP: 45.152.204.0/22
IP: 2a0f:f300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:18:98:01:e2:91:a6:1d:69:e4:bf:1b:05:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cd:2a:9b:6b:53:c6:72:5c:71:14:b8:bb:92:
87:09:49:b0:a5:fb:60:16:47:07:6a:74:c5:cf:1c:
3b:d3:d1:cd:c4:bd:ec:36:35:30:62:d2:61:c1:44:
6d:e1:60:91:6f:10:97:ac:48:f9:e9:ee:4d:38:e6:
d0:f5:8f:f7:0a:e4:22:f4:79:4b:cc:39:15:9b:0e:
65:09:48:6b:a0:f9:38:a7:45:51:89:b2:8a:f3:14:
fd:ab:68:9a:c1:28:4e:fd:c1:00:f5:27:b9:94:91:
90:c3:8d:83:12:b5:c9:4c:ef:89:b6:a8:9e:73:d5:
83:7a:db:3a:5e:0b:a4:34:c5:ae:4a:06:20:e4:c7:
69:ba:a7:21:fb:b6:31:fc:31:41:d5:90:98:c0:9f:
3f:43:61:ac:8f:66:59:aa:74:df:e4:4a:68:b4:67:
5f:98:48:16:56:e6:35:99:f3:39:e6:9b:27:9d:7d:
1e:80:74:d1:2a:2b:bc:ad:c8:55:20:28:d6:51:44:
d6:9d:c1:89:9a:e4:9f:94:89:df:89:d4:28:c0:b1:
87:6d:1a:7e:c8:e4:bb:ba:e7:38:7f:5b:d6:78:c0:
ef:a0:e5:ab:b8:9b:f7:75:8a:90:58:64:40:8e:a9:
5b:cb:2f:74:5d:d9:48:9b:79:8c:1c:4c:87:e2:1a:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.204.0/22
IPv6:
2a0f:f300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208163
Signature Algorithm: sha256WithRSAEncryption
80:fc:55:f2:bd:97:9f:ef:70:b3:27:4a:f5:86:ed:b6:ed:6a:
c9:e1:38:15:67:75:bf:11:38:a5:9b:e2:8c:67:56:12:40:b3:
21:22:e9:cf:2c:1c:89:1c:e8:16:dd:48:bf:83:42:2c:d9:70:
ce:44:4b:f4:32:d3:02:f0:1e:c5:18:48:3e:8a:8c:b6:9b:35:
84:0b:99:83:97:a8:48:b9:19:12:dc:f4:58:54:c1:95:ca:c0:
fc:dd:b8:29:54:20:f2:85:05:49:2f:a1:ba:5b:9a:22:fc:62:
d1:3b:35:f0:85:c6:61:6f:00:c2:ad:4c:01:12:83:39:8a:39:
54:ff:75:50:45:4b:b4:e9:05:07:1c:31:e1:19:97:c8:d6:89:
b7:0c:07:f4:ba:a0:ec:81:c1:84:48:b8:d0:75:a7:59:b0:f4:
54:4b:21:4e:d4:4d:0f:68:43:97:ef:c1:51:24:a7:41:c5:58:
75:7a:09:20:f3:7b:57:eb:eb:02:91:6f:5e:da:e0:b9:77:8d:
b8:75:88:a2:26:0e:6a:70:35:6e:4b:74:b7:25:cc:37:3f:02:
23:68:6f:dd:d8:2b:e7:94:b2:ca:eb:69:b2:1b:0e:98:a4:73:
26:e2:67:cd:b0:9c:18:3b:7e:aa:60:85:55:f6:c4:d9:6c:66:
6c:31:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:26 2024 by rpki-client on console-ams.rpki-client.org