Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
File: y5-GErfxR1ABa4SMQvYN82rYMtk.cer (raw, json)
Hash identifier: nHul3SufCoD7fPSZ8F8WjuBsqMXLEI4zWsGSVGHSAzk=
Subject key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29F4E9F2A46E22504D7FF20C4310C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205870
IP: 185.145.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f4:e9:f2:a4:6e:22:50:4d:7f:f2:0c:43:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:92:16:88:40:15:00:78:7b:80:52:11:fd:
d9:f6:57:4b:75:ae:aa:31:5e:2e:ed:fe:73:0c:c5:
9f:05:e9:13:74:cf:87:e3:44:73:fa:85:d6:ad:7e:
0c:a2:51:6d:58:49:8b:b3:3d:7f:90:5c:bc:0a:89:
d0:ba:c0:80:b0:a1:8b:24:c8:8c:20:4c:5b:e7:9c:
63:8b:92:0b:f9:bf:ed:13:cf:fc:18:3a:6e:dc:b3:
70:9a:e6:e8:f2:55:e3:c1:63:78:a2:6a:f5:6b:d0:
bf:90:65:a0:a9:4a:69:47:dc:6d:40:e5:8f:3d:f5:
19:88:3c:d3:bc:87:d1:13:2b:cb:a3:75:2b:cb:74:
64:94:a5:65:0c:49:cb:ba:6a:62:5c:88:99:b8:cf:
20:1a:1c:b1:3b:a2:59:3d:4b:39:6c:71:b3:9c:63:
2c:09:fc:fa:ef:8a:8e:93:f0:8b:4e:b7:92:6f:39:
57:62:f2:9e:4f:00:2d:c6:07:3a:57:5c:b3:ca:c6:
48:9a:f8:1b:80:eb:35:a6:4a:57:09:bb:a9:4c:32:
81:aa:78:df:f7:4c:10:3b:03:96:15:8c:8b:4f:fd:
16:32:ca:b3:84:9b:56:fa:16:50:72:2e:e3:bf:4d:
b6:2c:49:e8:00:ac:7f:e8:00:09:65:21:ed:22:1b:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205870
Signature Algorithm: sha256WithRSAEncryption
67:67:34:57:40:d9:d2:3b:fc:5d:cb:73:33:61:16:e3:eb:8f:
fa:6b:c2:35:4e:3b:15:3e:20:f8:d6:3d:cb:08:a4:03:2b:e3:
67:e6:32:5f:ea:83:84:36:73:de:6a:86:05:ff:da:f1:84:ca:
71:67:f4:8c:39:f2:62:74:05:ee:fd:13:d3:88:b9:48:80:ac:
78:f1:da:c9:72:0e:73:3c:41:d5:d2:a8:19:93:60:84:45:76:
0c:11:d8:cd:f4:ad:0a:cf:99:82:ef:04:bb:3f:62:3a:d3:33:
e0:03:76:a1:78:c8:bc:81:fe:e9:15:78:ef:ab:4e:29:f5:bb:
1e:49:14:4b:7d:4d:20:64:2e:4d:3e:1b:1c:8d:8b:3a:d2:cc:
db:a0:b6:33:0c:48:82:80:15:7e:b8:28:f6:eb:f9:34:96:22:
b7:04:e6:f4:ce:be:ff:11:5a:b4:ba:fb:c0:22:13:5b:55:46:
50:f9:a1:b6:87:b4:95:90:31:be:e8:1e:6b:f1:d1:51:65:fb:
57:a7:b7:c1:c7:c5:c1:01:38:dc:bf:9d:80:9b:f5:78:4a:5f:
2a:7f:d9:81:6b:2f:82:55:03:81:a1:fe:c7:4c:92:5c:63:7e:
1c:a6:4a:36:0a:84:65:dc:31:93:57:ca:51:c6:87:8a:24:7a:
76:20:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:24 2024 by rpki-client on console-fra.rpki-client.org