Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
File: ry8uht18yRAWWP-NWlJBRF_NHWo.cer (raw, json)
Hash identifier: TlfggXhaRCYVXca+7a/+e1bxVDglEPXcP6+yUoLFasI=
Subject key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A3F1F87507286A5C51F9034CC855A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48592
IP: 77.81.76.0 -- 77.81.83.255
IP: 128.65.160.0/20
IP: 185.39.180.0/22
IP: 188.214.232.0/22
IP: 194.26.2.0/23
IP: 194.26.20.0/23
IP: 2a04:7d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3f:1f:87:50:72:86:a5:c5:1f:90:34:cc:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:f1:d0:f8:49:55:7b:7e:07:e1:02:f0:43:
d4:e2:18:8b:52:9e:d9:fd:c7:e7:6c:4c:e0:a2:85:
91:03:6b:cd:9e:58:e2:b0:4e:1b:78:b9:57:22:75:
91:43:14:f1:a9:9a:4e:d7:b5:d5:99:9b:d1:d9:4c:
7f:48:81:c8:d4:39:ca:6e:de:9b:3c:d2:54:a6:42:
d9:0d:5b:34:12:02:b3:14:c7:72:6b:6b:bc:eb:c2:
79:21:fe:d4:90:8f:d7:29:49:c9:3c:2e:34:d2:e6:
7e:5a:cf:2c:91:2e:f5:c0:75:da:85:0d:2b:bd:12:
79:45:3a:8d:5f:cc:d5:57:5d:62:f6:38:83:ed:f5:
8f:11:a3:eb:ee:eb:cf:c4:01:eb:8a:3b:5d:a3:ac:
f5:e6:09:cf:ac:d8:45:bc:fb:16:f9:3b:7e:03:87:
ee:8c:a4:5e:af:84:e9:6c:5f:28:a0:39:fa:49:1c:
12:49:30:a7:b6:3b:ac:6d:38:e2:9b:ba:08:c7:14:
ea:4b:40:2f:6e:3e:bc:a1:8b:61:4f:90:bf:09:a9:
e7:bb:a0:ba:40:da:f3:68:f2:0a:90:c1:d4:b4:5e:
95:81:68:64:9d:8f:75:fb:64:9a:1f:10:bd:d2:34:
ff:37:5a:b0:d6:47:4f:b8:7e:d9:35:0b:30:1a:3c:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0-77.81.83.255
128.65.160.0/20
185.39.180.0/22
188.214.232.0/22
194.26.2.0/23
194.26.20.0/23
IPv6:
2a04:7d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48592
Signature Algorithm: sha256WithRSAEncryption
30:e0:5b:16:52:a5:9f:22:76:e1:95:95:3d:18:98:5d:a1:5c:
96:97:c4:58:5d:6d:a9:aa:de:5e:1c:85:3f:9d:ce:08:ca:df:
08:fe:15:ff:e2:75:20:2b:b1:c9:16:34:c4:7e:53:64:ab:95:
21:65:33:b1:ee:36:82:07:f8:90:14:d7:92:b3:23:04:47:e8:
ed:7f:d9:a4:29:18:7d:bc:3b:68:de:b4:e7:08:af:9c:4d:22:
de:fc:b9:ce:9a:db:c5:73:4d:07:33:41:5e:5e:da:04:b5:fa:
c6:00:99:d2:0d:44:5f:37:e0:de:5b:85:98:d0:4c:04:10:65:
b0:2f:e8:f4:e1:5e:fe:6c:48:1c:de:11:6d:aa:27:5d:4a:8d:
79:65:fe:d9:56:1f:4c:5e:23:53:2a:15:1b:c2:31:ef:4f:40:
3d:fb:2c:54:b8:b7:9f:da:fd:66:e2:8f:14:93:52:d4:99:a3:
86:c1:c2:82:5b:0c:3d:e0:e9:47:c1:ee:6b:97:09:e6:86:34:
39:da:60:37:7c:6f:59:dc:ab:86:f2:91:e2:e2:cd:b5:35:6d:
b4:82:e2:3a:4e:d5:d5:7d:53:d0:a8:a3:13:82:f7:84:70:0f:
26:90:98:02:bc:ef:a0:30:e4:93:f0:2b:07:c8:54:b9:b9:de:
56:8e:33:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:08 2024 by rpki-client on console-fra.rpki-client.org