Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.cer (raw, json)
Hash identifier: LqR/0NczrLMOM37jqMkUiPwcmqbrk+M4xB+2Y5djCdU=
Subject key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7260E0A23D6172434ADF74CAB28EF13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59439
IP: 91.240.178.0/24
IP: 185.168.52.0/22
IP: 2a0d:c0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:0e:0a:23:d6:17:24:34:ad:f7:4c:ab:28:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:e5:97:ce:ac:5b:6d:13:b9:74:95:97:5c:
9f:67:3f:23:15:10:22:3a:ee:12:5b:40:2c:5f:3e:
d3:c3:a6:71:3d:4c:28:5e:bf:29:a9:09:a6:85:7f:
d1:a4:82:65:6f:d1:50:70:51:4d:92:4c:98:17:b0:
6e:40:a0:5d:40:85:0b:55:74:03:7e:91:af:d6:76:
ea:f2:d3:41:45:9e:a8:69:be:ac:68:04:77:37:a8:
d3:32:80:3b:c5:cc:c0:86:12:48:5b:89:f0:bf:11:
fb:b6:48:39:69:c0:e0:36:4d:13:2b:43:93:c5:2c:
61:27:a7:71:d2:14:63:4a:a1:5d:b3:0f:f0:aa:da:
02:13:3e:4d:b1:3f:32:d8:e9:0b:d9:ab:7c:ed:b3:
4f:67:aa:03:01:3a:75:a7:00:80:63:bb:4a:44:6e:
fe:8e:e2:72:6a:63:a7:b8:00:12:51:9d:e6:6b:71:
e2:82:d5:02:56:13:d2:47:76:b4:ea:99:76:c8:f5:
92:b9:c4:e7:66:04:b0:14:3c:d3:a2:dc:5d:96:b5:
3b:b5:02:8d:a4:c9:d3:21:91:df:05:1f:70:b1:b4:
c7:0e:04:41:e4:22:94:e8:e4:87:14:87:42:ee:64:
83:cd:51:e1:c3:9d:c7:78:fb:37:27:68:be:98:06:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.178.0/24
185.168.52.0/22
IPv6:
2a0d:c0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59439
Signature Algorithm: sha256WithRSAEncryption
33:cb:47:da:df:81:3a:db:f7:98:66:95:13:da:d8:47:85:9c:
b2:5e:77:7b:11:e9:03:e3:22:43:8f:76:69:55:10:d9:e0:e9:
71:ae:74:dd:bb:5c:ea:eb:fb:83:84:44:ba:4b:a7:02:da:52:
da:df:d7:25:e5:35:ba:ac:e5:97:cd:f7:6c:2c:dd:c1:cf:ca:
09:ed:b1:3d:14:bb:a7:d3:b7:cd:82:85:58:34:d4:21:7c:4c:
a6:e0:6b:29:da:bc:06:9f:bd:32:23:97:5a:a2:fa:02:ec:b0:
3d:23:f5:43:ed:b5:3c:60:7f:7b:36:43:50:02:55:b2:2c:f0:
22:a8:4f:96:ff:76:0d:dd:2a:a6:0c:e4:d3:dc:ce:ff:59:bb:
9f:d7:ea:b8:8a:13:73:48:b1:6c:6d:5a:3d:3d:45:0f:de:d5:
f4:99:a9:12:f9:b5:bd:ea:e9:6c:3f:14:e2:7a:06:14:6b:58:
f5:02:86:df:36:f5:a2:46:9d:85:86:a5:37:b9:fe:9c:02:91:
af:63:66:af:be:70:f6:94:c3:9f:39:61:7f:07:01:19:64:dd:
1f:dc:a9:5e:2d:cc:a5:94:a7:bb:8c:fa:d4:8b:b5:fc:8f:6b:
81:bf:f2:03:e2:de:a8:b0:8b:90:6a:38:bd:92:40:28:1c:6e:
67:c8:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:01:17 2024 by rpki-client on console-fra.rpki-client.org