Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
File: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer (raw, json)
Hash identifier: ytmdW3pEWiGggCVoWm5enj/f8mn54yV5jeyA4WVavwM=
Subject key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019348AE403DD7CE715AA97BA5E026E53360
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Nov 2024 08:26:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29187
AS: 50633
AS: 200886
IP: 185.36.146.0/24
IP: 193.84.50.0/24
IP: 193.107.72.0/22
IP: 193.194.124.0/22
IP: 195.68.216.0/23
IP: 2a13:4140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:ae:40:3d:d7:ce:71:5a:a9:7b:a5:e0:26:e5:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 20 08:26:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:28:c7:ac:17:cf:8d:d7:71:83:af:c5:33:
95:78:9d:46:37:d7:b2:86:65:2e:c5:5f:7d:77:4c:
df:58:d6:1e:48:25:bb:6c:e8:e4:9a:00:f2:b7:5e:
31:d4:a0:50:3d:54:29:3d:f8:ef:eb:a7:3f:2e:d3:
e3:e7:0f:1a:e4:90:b3:c4:5a:ea:86:dc:f5:07:cf:
66:54:05:25:73:40:bb:3a:b7:13:99:be:5b:63:69:
0e:26:43:3a:07:a4:e7:bb:22:ad:07:81:1b:3d:25:
d4:db:89:d9:9e:42:53:f0:b5:2e:1a:33:68:7a:39:
8c:cc:2c:d9:31:b4:93:8f:d5:72:77:ab:5d:0c:3f:
c8:1c:07:69:ca:1f:2b:7e:3f:3e:e9:aa:f3:8c:55:
33:5f:91:ce:62:81:59:40:6a:9e:c2:a9:f7:2b:8c:
00:17:7c:a4:39:a5:88:d4:2d:24:cb:68:97:f7:a9:
4b:7e:aa:33:41:48:49:95:2c:a7:26:a3:76:97:4a:
85:09:d4:81:61:b7:77:17:f0:67:9a:e7:e6:1e:58:
5e:6e:e9:d8:74:03:b3:04:db:90:1c:d0:ac:0e:4b:
dc:ae:4b:f1:91:76:9b:5d:a3:f9:53:71:ee:49:71:
cb:b7:ef:f5:9a:0a:07:7f:9e:bc:0a:96:08:50:74:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.146.0/24
193.84.50.0/24
193.107.72.0/22
193.194.124.0/22
195.68.216.0/23
IPv6:
2a13:4140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29187
50633
200886
Signature Algorithm: sha256WithRSAEncryption
79:2b:d2:9b:bb:cc:b7:89:2d:a1:a0:0a:0d:a8:c2:a1:ac:18:
56:48:be:f4:73:a5:1f:6c:22:eb:9d:3f:39:69:bb:da:57:e9:
38:9b:d1:b0:a7:31:d1:7f:0f:da:04:34:81:f0:ca:43:78:aa:
f4:53:39:fd:fe:17:f3:b7:f5:43:ab:7b:58:62:7b:ce:41:dd:
12:20:14:29:f9:66:7d:03:96:fe:bf:ec:a4:56:66:b1:f7:aa:
56:f8:d8:ce:d2:46:b6:66:c3:49:5c:3d:4d:f8:e6:ab:93:f7:
f7:38:25:2c:51:9d:44:80:e9:b4:09:b3:fd:6b:0e:28:3e:ae:
c6:9e:8e:79:dc:e0:29:9b:64:64:9e:0b:58:05:fb:56:3f:4b:
3f:37:82:0f:32:24:05:35:2c:2a:84:3c:16:0a:8c:1b:24:95:
df:db:9e:02:58:0f:28:36:95:2d:55:07:02:80:c1:8e:67:3d:
87:ea:5c:aa:6f:b2:2f:1f:62:95:ae:00:e4:0a:0f:08:41:3a:
79:ea:5e:4c:18:70:64:4e:14:17:35:dc:92:35:5a:f6:99:ae:
14:ac:5c:a4:06:64:64:67:57:0e:e8:cb:53:da:02:88:2e:ad:
22:c2:4c:57:ad:ae:94:59:4f:76:be:88:c8:cb:f2:77:e3:06:
84:a1:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:07 2024 by rpki-client on console-ams.rpki-client.org