Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
File: sy8BX2ojRTRcs9ryMMJcj64CMFo.cer (raw, json)
Hash identifier: 0ZoKHVcWWXBWUxaZPJD+at/qpBy9ESRhd+oHKMktHIU=
Subject key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC07563047C957E9B02871AC664C82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.22.103.0/24
IP: 195.177.248.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:07:56:30:47:c9:57:e9:b0:28:71:ac:66:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:3b:76:9a:19:68:3d:62:0b:fd:bd:69:09:
28:30:80:92:ad:45:00:fd:87:7e:1c:24:ed:0f:1c:
56:63:c4:48:e2:20:c6:78:dc:d9:bd:b8:66:bd:30:
68:08:4d:e7:67:50:99:f9:c9:3b:9b:18:9c:d0:c7:
c9:c5:7f:30:1f:18:3d:62:b3:2b:14:75:b1:c7:84:
9a:97:7e:26:bc:a4:85:ba:5c:27:1a:97:54:46:1b:
8b:80:2e:a4:22:08:62:43:df:77:ae:67:b6:1e:d9:
8d:e9:bf:82:ff:3a:36:ef:57:47:6d:98:f9:a9:a9:
92:58:cf:f3:21:01:c3:f3:be:a3:c8:36:67:dc:8b:
24:92:28:53:6f:ee:08:2d:a0:b3:d4:6c:0b:6c:a8:
32:ba:5c:12:2b:e7:4a:ab:b0:c2:06:b9:41:8f:98:
04:3a:08:39:77:ad:a7:52:40:32:71:a1:8c:e2:10:
7f:5c:15:86:94:e3:39:d1:4f:4b:ad:38:50:c9:68:
22:c8:7d:ad:a9:d9:8f:2e:f5:62:5a:ce:6b:2d:bc:
3f:04:48:ae:b6:f5:f8:c1:5b:1d:fa:a5:cc:cf:ae:
32:be:b3:68:93:94:cb:36:b7:d3:41:1c:58:9b:76:
83:dc:93:03:54:ae:db:53:52:b2:f7:12:78:e2:37:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.103.0/24
195.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
04:0b:b2:4b:99:bc:71:04:62:9e:c5:9f:15:aa:af:49:70:56:
85:1c:46:05:23:ac:45:6d:01:d0:7a:f4:d0:7a:31:9e:4f:e9:
78:0f:79:9a:2b:34:b0:7c:c5:1a:cf:fa:b3:23:80:15:b3:a0:
f8:f4:4d:2f:b7:91:af:3e:92:c8:25:5a:70:65:40:2e:d9:b0:
53:de:e6:c6:9a:e1:60:53:4a:e7:e2:cf:15:e3:78:dd:a9:d2:
83:81:1a:83:f1:2a:91:ab:fc:28:3d:57:3c:f8:b0:f0:49:21:
13:43:85:e7:7a:25:60:6c:06:d6:c4:b6:b2:bf:18:02:2e:48:
ec:a3:5f:b5:7f:2b:71:2a:04:d4:26:eb:8a:19:53:61:41:31:
c0:b9:6e:53:be:4f:33:ca:f5:ca:22:16:af:93:9a:20:44:ea:
4c:2b:bc:f3:94:24:ac:9f:7b:ff:44:bb:96:69:82:73:03:e2:
a1:f1:65:d5:a0:9e:de:68:20:95:ad:75:df:0c:11:bd:5f:db:
f2:79:59:e0:f5:b3:71:e0:4f:33:f6:64:c5:43:4d:46:62:56:
ff:64:d5:4e:3b:bd:36:5e:7a:26:72:e3:48:f9:94:f7:3d:f2:
d5:82:16:49:df:3b:74:c3:bb:e2:aa:f7:48:ab:7e:53:7d:f8:
db:7d:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:33 2024 by rpki-client on console-ams.rpki-client.org