Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
File: y2bnZjRVc9cVnWeU7a7bc5okH48.cer (raw, json)
Hash identifier: Ma/x6F0apgXqqP6RCxB1Nhl7/Xe21SVhC25qQxPtjXM=
Subject key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3495BB23827017CB64C3AFEC02DFEC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.161.121.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5b:b2:38:27:01:7c:b6:4c:3a:fe:c0:2d:fe:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb66e766345573d7159d6794edaedb739a241f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:9e:8b:90:b9:e1:de:88:b8:d4:14:44:f9:
38:af:a3:10:53:d9:e4:78:2d:ff:6f:10:e5:09:c3:
51:d4:20:20:65:c0:2a:7d:b5:0c:13:fe:80:c0:8e:
2b:55:85:52:75:30:f1:9b:ac:20:ee:8e:ae:36:8c:
76:a2:3e:d3:3d:d8:e5:55:92:cd:69:af:29:9f:68:
d9:6c:c9:71:8a:a3:ff:77:7f:34:31:69:19:e7:9a:
46:b6:80:6a:20:29:86:0f:16:95:cc:ab:d8:ae:e5:
95:33:0a:8d:0f:5e:7a:42:f1:15:da:fc:cd:ae:00:
20:0b:bf:6c:11:cd:21:fe:07:09:6d:f7:cf:7a:bf:
dc:3f:f4:4b:80:4e:7a:0b:6f:b9:f0:21:a0:14:73:
59:c6:c9:a5:30:71:67:0b:85:5e:09:6c:79:36:66:
f5:88:1f:0b:6a:1e:79:0a:ea:81:92:1d:bb:75:14:
be:84:7d:e0:c9:94:d2:96:e0:84:b4:14:e3:0a:fe:
1c:f1:90:2c:5e:34:0a:0c:23:f1:86:ba:65:04:63:
4f:c0:36:d8:ba:72:11:84:11:93:ce:4f:4b:7e:92:
72:46:e0:b4:01:32:3a:44:72:e2:0e:6b:32:2a:82:
50:e7:88:a9:b2:56:bb:df:5b:5b:ad:07:f8:46:6b:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.121.0/24
Signature Algorithm: sha256WithRSAEncryption
37:70:63:93:7f:29:13:53:e0:a0:47:30:2f:92:7b:49:59:31:
ac:6f:31:3d:64:64:5c:04:80:ea:cd:b0:77:09:6a:23:71:3e:
63:22:23:0b:98:6d:1a:3e:79:c4:5f:ae:ff:f2:8c:20:48:60:
44:96:78:24:c8:f1:20:2c:31:24:77:4f:9e:fd:4c:8e:27:ad:
a4:1c:05:4e:90:02:e2:72:2b:68:53:7e:b7:2c:27:61:52:24:
b3:26:a7:03:a0:0c:31:2d:f0:26:f0:10:4b:3b:42:3f:0f:a2:
c9:64:53:57:ec:19:50:c0:4b:be:4a:2c:12:e8:77:34:dd:17:
8e:29:e2:13:9f:b1:d2:21:e8:51:ca:26:e1:fe:22:ef:7a:33:
c3:59:3b:51:d0:c8:e6:47:ce:96:17:fd:89:83:ec:2c:2c:12:
1c:86:f8:45:ef:db:39:af:d7:2d:3e:b4:99:b2:a7:05:52:0d:
26:34:9e:c2:03:44:f1:fe:75:b3:f5:97:31:2a:2c:22:7c:c8:
d1:70:e6:54:67:4f:43:88:37:5a:7a:7b:e5:0f:ec:78:d3:a7:
b5:16:c1:7f:98:69:76:fe:78:3e:37:3b:97:20:ca:b1:be:d7:
41:4e:d1:8b:b0:8f:87:fa:03:ab:9a:4c:f5:04:c8:03:31:af:
13:fe:e5:1d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSVuyOCcBfLZMOv7ALf7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjY2ZTc2NjM0NTU3M2Q3MTU5ZDY3OTRlZGFlZGI3MzlhMjQxZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuumei5C54d6IuNQURPk4r6MQU9nk
eC3/bxDlCcNR1CAgZcAqfbUME/6AwI4rVYVSdTDxm6wg7o6uNox2oj7TPdjlVZLN
aa8pn2jZbMlxiqP/d380MWkZ55pGtoBqICmGDxaVzKvYruWVMwqND156QvEV2vzN
rgAgC79sEc0h/gcJbffPer/cP/RLgE56C2+58CGgFHNZxsmlMHFnC4VeCWx5Nmb1
iB8Lah55CuqBkh27dRS+hH3gyZTSluCEtBTjCv4c8ZAsXjQKDCPxhrplBGNPwDbY
unIRhBGTzk9LfpJyRuC0ATI6RHLiDmsyKoJQ54ipsla731tbrQf4RmuqJQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMtm52Y0VXPXFZ1nlO2u23OaJB+PMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzQ1ODkw
ZS02ZjcxLTRkMzYtOTg4YS02NWJmNzliMGE5ODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNDU4OTBl
LTZmNzEtNGQzNi05ODhhLTY1YmY3OWIwYTk4OS8xL3kyYm5aalJWYzljVm5XZVU3
YTdiYzVva0g0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuaF5MA0GCSqGSIb3DQEBCwUAA4IBAQA3cGOT
fykTU+CgRzAvkntJWTGsbzE9ZGRcBIDqzbB3CWojcT5jIiMLmG0aPnnEX67/8owg
SGBElngkyPEgLDEkd0+e/UyOJ62kHAVOkALicitoU363LCdhUiSzJqcDoAwxLfAm
8BBLO0I/D6LJZFNX7BlQwEu+SiwS6Hc03ReOKeITn7HSIehRyibh/iLvejPDWTtR
0MjmR86WF/2Jg+wsLBIchvhF79s5r9ctPrSZsqcFUg0mNJ7CA0Tx/nWz9ZcxKiwi
fMjRcOZUZ09DiDdaenvlD+x406e1FsF/mGl2/ng+NzuXIMqxvtdBTtGLsI+H+gOr
mkz1BMgDMa8T/uUd
-----END CERTIFICATE-----
Generated at Fri May 3 08:26:40 2024 by rpki-client on console-fra.rpki-client.org