Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer (raw, json)
Hash identifier: pBxlTugDo53I+QpB/On32IME5HBs35ghnCSVfstxPog=
Subject key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF808A99D7B3264166CEFA23BBD41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201704
IP: 37.98.200.0/22
IP: 89.42.164.0/22
IP: 185.65.184.0/22
IP: 212.63.96.0/21
IP: 2a03:1d20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f8:08:a9:9d:7b:32:64:16:6c:ef:a2:3b:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:d6:cf:8b:c5:7d:42:01:ff:7c:23:1d:22:
5d:48:6f:85:7d:82:4e:29:57:ad:af:35:5b:f5:1f:
de:fa:cd:ab:27:e5:02:63:8b:58:5d:99:56:ba:e7:
29:24:33:18:4e:6a:cc:2f:e6:b7:ed:2f:bf:33:58:
8b:72:b3:c9:32:78:d5:e6:5f:db:72:a7:5d:76:14:
b8:f2:7f:fc:14:8a:9e:5e:89:42:c7:65:f1:2d:12:
00:67:82:29:25:1b:d9:75:38:6f:73:de:32:aa:df:
ed:70:31:ec:49:45:9b:fa:9e:e0:2b:22:85:2a:59:
4f:4a:24:e4:8f:ee:f3:aa:77:66:ad:8e:a4:e9:ce:
e2:e4:a5:37:bc:87:27:5c:e1:56:40:64:e7:55:4f:
6d:d6:44:be:09:78:81:c0:28:8a:4a:34:bb:d7:e2:
cc:71:69:69:ef:a6:61:88:70:e6:7c:d4:b6:4d:b2:
37:14:7d:da:20:8b:56:8f:29:3f:72:00:dc:c6:b4:
fe:84:73:54:46:d9:65:36:e1:b3:28:1c:b1:20:fe:
6b:d9:fa:48:0b:29:cc:fa:06:d8:35:2e:7d:b6:d6:
d7:10:fe:ec:a6:11:d3:1a:e9:eb:0e:82:7d:32:12:
a1:ba:db:0a:0b:ad:fa:df:cf:9b:28:04:8c:a0:95:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.200.0/22
89.42.164.0/22
185.65.184.0/22
212.63.96.0/21
IPv6:
2a03:1d20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201704
Signature Algorithm: sha256WithRSAEncryption
38:73:aa:10:b5:56:ce:76:f4:5a:5f:a6:f2:a0:bf:cc:fd:20:
e3:87:ba:f7:1d:a5:9c:bf:9e:90:3e:7d:d6:46:5f:33:ff:80:
a6:ee:86:79:32:4c:e3:32:86:da:eb:f3:cc:78:54:6d:75:24:
80:4b:0f:fc:2e:bf:c5:df:d8:cd:73:3b:06:58:3d:c2:65:26:
1d:dc:07:45:1f:45:bd:d9:81:05:7b:43:e0:0f:d1:23:e7:0f:
15:6c:6a:f9:64:59:1c:7d:a7:fa:e9:ad:fe:c7:45:c8:b3:3c:
1a:d5:f8:dd:e3:61:8f:9b:29:6d:83:6a:f7:ad:91:2a:15:43:
45:c1:94:ad:e2:f7:a5:30:ba:fd:46:b4:f5:8c:69:bf:65:9f:
d1:d3:c9:6f:3b:50:bb:a7:5d:6f:e9:ee:4c:28:b3:ed:fc:03:
76:e2:bf:80:fc:0c:cd:36:0f:f6:5a:78:6a:90:f4:25:f5:21:
65:5f:d5:50:04:32:43:3a:54:9b:96:0e:fb:21:4e:71:4a:33:
dc:16:a0:54:33:f4:0d:81:dc:fd:94:a0:ba:35:c8:c2:30:83:
0e:d7:ab:a6:e2:4b:92:2f:c1:19:82:b6:20:a1:68:89:e2:10:
b1:77:f6:4e:51:e2:35:1f:cd:42:19:f1:ab:5f:da:9d:56:0d:
31:29:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:38 2024 by rpki-client on console-ams.rpki-client.org