Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.cer (raw, json)
Hash identifier: mI48iUmtFGJiYIMqhWqeIDmUoG0npQwY+z5AjJulIJY=
Subject key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0BF644659D42213327D4C9DF3F43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205179
IP: 185.226.232.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0b:f6:44:65:9d:42:21:33:27:d4:c9:df:3f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:04:33:78:f2:27:d6:23:b0:51:06:a4:14:
5e:ff:a9:ad:58:4a:03:af:4f:08:27:6a:e9:b0:11:
3f:78:de:17:76:9a:25:92:01:ff:b5:db:6c:35:7a:
06:93:0e:87:84:02:03:9c:fe:42:a7:85:1e:c7:05:
32:88:77:95:3d:26:21:52:65:67:48:fa:64:58:bd:
47:af:bc:94:e1:a7:5b:53:86:5e:e2:1a:7a:f7:7b:
27:ef:e9:1f:bf:38:f8:af:92:93:7a:d4:db:37:4d:
b1:fd:2b:ca:a4:25:3c:52:54:0f:0c:58:e2:26:b6:
d9:7f:c5:2c:5a:63:52:d6:51:46:d9:6a:a4:21:f3:
99:91:bd:d9:69:d1:01:1a:76:fe:ad:37:51:b9:d0:
03:72:18:ca:e6:02:0b:10:fb:30:55:8b:5f:90:96:
af:c2:01:a1:6f:a7:ba:81:a4:9f:ac:52:93:1f:90:
13:65:43:ae:f9:36:11:22:dc:78:97:f3:e6:61:66:
13:2e:3f:5f:f9:6d:0b:9c:4e:ad:f2:04:80:35:75:
20:d9:f3:e7:5c:db:e9:88:2d:ce:16:c1:a4:56:8c:
15:43:24:32:c1:ef:16:a3:16:a5:c9:37:43:28:ec:
1f:7b:61:c5:72:69:5e:c7:29:a3:fb:44:2a:c2:ca:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.232.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205179
Signature Algorithm: sha256WithRSAEncryption
34:36:5f:d7:56:3a:42:71:a5:32:94:37:bd:df:1f:3e:2e:a8:
52:cc:14:42:fa:af:aa:16:ba:34:71:d8:8e:e0:6c:0f:e8:84:
4a:8e:24:c2:95:28:50:8d:6a:f4:df:24:c0:3f:2c:6e:38:d3:
52:2a:53:a2:b4:fb:c5:81:1c:e5:23:fd:1b:6a:d3:bc:66:fd:
2d:0c:0b:73:28:91:90:e1:3f:5a:56:13:a9:69:0f:04:95:77:
fd:dd:e9:63:df:bc:16:2f:80:02:3b:0d:e0:f7:15:10:d4:3d:
0a:92:0f:e6:72:f0:62:1b:1c:a5:7b:13:aa:c2:68:3e:4a:0a:
4b:56:4e:83:af:6c:e4:8d:97:79:71:82:56:69:7e:57:64:20:
7b:f6:ba:0d:86:e2:e2:68:11:fb:7d:ca:8a:d0:45:90:51:30:
4a:32:4d:ae:f6:90:9c:f0:c5:87:f9:5e:bc:ec:22:81:91:c4:
b1:e7:af:1b:15:d3:fa:02:86:05:df:fa:cb:4f:49:ff:02:b6:
dd:f5:4c:57:b1:3a:cc:e9:39:47:26:24:3a:f3:a7:14:05:13:
d3:95:06:5c:a1:69:91:a7:b2:e6:db:c9:15:73:6d:95:29:72:
eb:c6:84:81:cf:0d:0d:af:3d:70:f0:a6:2e:68:a5:0f:45:a3:
68:b1:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:14 2024 by rpki-client on console-ams.rpki-client.org