Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer (raw, json)
Hash identifier: sBEOEWmVoBGG+Nf9ii4IzCx5osweJib09t3zXXQvEq4=
Subject key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4246CCF3483665D556D8E6E0B40882F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200382
IP: 194.50.20.0/22
IP: 2a0c:f6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6c:cf:34:83:66:5d:55:6d:8e:6e:0b:40:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:a4:03:d6:54:2b:38:89:b8:44:d4:82:3a:
73:4a:04:14:93:53:20:91:e5:40:0c:1c:9c:5a:ca:
90:c9:81:7a:3a:3c:45:ed:30:d8:65:07:a3:a1:85:
4e:39:5c:fd:3d:65:82:44:9b:a9:14:d8:19:19:06:
fc:31:50:c9:e2:d3:84:ab:60:81:a0:70:33:83:30:
e4:53:b2:55:a1:34:12:4a:0f:4e:5a:ef:20:13:10:
52:5e:3a:b9:0a:44:43:ec:3d:7b:d0:d2:6f:e2:fb:
23:ec:9c:c1:00:1a:cb:38:f0:f6:b2:e4:5f:d6:f2:
63:ec:13:74:ad:81:cd:a2:32:ad:c1:1e:55:42:68:
6b:dc:65:bd:e3:1a:e3:e5:f4:b1:cf:96:87:13:c4:
ad:2b:2b:be:5a:38:4e:42:18:4e:7f:b4:e8:5a:df:
82:c6:ce:99:6c:30:13:f9:e2:b4:3b:a6:28:9c:df:
66:53:05:de:a2:e5:6c:23:e7:e7:b0:7d:98:05:95:
d7:47:55:5c:bc:20:59:89:dc:45:1e:d6:69:52:fc:
db:30:4d:00:85:ea:6f:a6:45:a7:a9:eb:2b:3c:f5:
ae:e4:1d:20:2f:e9:a8:c7:71:90:79:45:18:cd:c0:
f4:6e:0b:44:25:c8:bf:43:8b:33:44:67:41:62:4a:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.20.0/22
IPv6:
2a0c:f6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200382
Signature Algorithm: sha256WithRSAEncryption
0f:19:cd:33:d5:ba:8f:9d:93:b2:17:52:9b:b1:96:da:10:2e:
83:4f:12:90:94:8a:7d:97:10:72:55:7e:ed:56:49:83:3b:f1:
60:32:39:fd:f2:cd:c2:40:49:8a:fe:7f:cc:63:32:c1:ec:b8:
24:20:dd:74:04:53:a8:8a:09:dd:09:9a:99:91:50:88:1c:02:
5d:b4:ad:e6:23:1d:13:08:5b:c5:11:53:c0:20:75:91:08:5e:
ac:81:0d:9d:ba:ca:dd:e9:3b:7e:4f:c0:96:ab:4b:b1:f1:fb:
1a:85:c2:61:ab:fc:1e:42:7b:c3:5f:85:55:b4:c2:10:89:0a:
57:42:78:88:78:9e:bf:2c:a0:5a:b5:a3:ff:5c:7c:4d:98:ef:
39:db:1b:aa:28:2d:33:11:92:77:74:41:52:1f:3a:4e:3a:5c:
60:70:ab:a6:a8:a3:cd:5b:ff:51:9d:4d:3b:15:b5:7b:b5:a8:
98:fe:a7:b6:45:6b:18:c6:42:32:2a:30:2e:01:ad:99:c8:52:
42:08:d4:0e:19:49:d9:5b:e6:93:1a:a4:8c:9d:cb:fc:f5:25:
2c:72:22:66:f3:9f:34:84:83:13:b5:89:1e:84:cb:b3:6f:46:
d3:1b:da:5d:95:88:43:2e:20:27:7a:10:b2:fa:41:6f:e5:04:
c4:a8:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:09:33 2024 by rpki-client on console-fra.rpki-client.org