Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer (raw, json)
Hash identifier: y6tyxt5KXMltKNEcAK20KAag7T+oO3gJVuoaJgFz1zI=
Subject key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254E3A709C7CDAE6225AC33EC9B8AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12849
IP: 5.28.128.0/18
IP: 5.29.0.0/16
IP: 37.142.0.0/16
IP: 141.226.236.0/22
IP: 185.13.192.0/22
IP: 185.23.175.0/24
IP: 212.55.184.0/21
IP: 213.57.0.0/16
IP: 2a00:a040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4e:3a:70:9c:7c:da:e6:22:5a:c3:3e:c9:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:4c:2c:b1:74:6d:ce:5e:ac:f9:97:ef:5f:
a8:f3:a7:f6:4c:84:30:3f:da:df:b9:b6:78:85:90:
df:1a:ce:50:29:49:53:c5:f4:4e:55:d5:0a:db:d1:
bb:98:51:32:65:39:f4:39:51:b3:22:b1:56:86:0a:
62:13:51:fe:a6:92:5c:aa:e3:ad:41:42:5c:95:25:
f2:7c:53:1e:70:dd:97:98:f9:f2:1f:ee:55:47:d5:
1e:26:39:42:48:cb:d9:d9:ab:9f:9d:99:84:37:08:
04:c3:14:1c:d1:3d:c7:9d:38:94:d9:b4:fc:f6:59:
ff:fc:28:d6:ac:8b:47:6d:7f:2d:36:51:12:91:e5:
4e:56:50:5e:42:da:0c:46:d2:6b:d9:24:17:7f:93:
0b:52:e4:d6:a0:97:ff:dd:0e:17:4f:a7:20:63:e9:
d3:c9:af:7d:ec:dc:bc:98:27:0f:df:ac:98:2a:81:
43:c2:3c:95:75:be:d6:93:89:5f:e2:6f:ed:05:b4:
07:25:c9:18:b1:fa:0c:79:e9:f1:96:e2:aa:b4:0c:
c6:d7:c6:cd:b8:aa:94:ab:8e:d9:41:e0:05:ee:6a:
b1:96:b6:ca:b6:32:3c:34:e7:40:65:51:0e:44:56:
f9:9c:83:77:52:4a:ad:d7:2f:94:11:24:e1:71:ef:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.128.0/18
5.29.0.0/16
37.142.0.0/16
141.226.236.0/22
185.13.192.0/22
185.23.175.0/24
212.55.184.0/21
213.57.0.0/16
IPv6:
2a00:a040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12849
Signature Algorithm: sha256WithRSAEncryption
54:68:db:79:ba:e7:99:4c:94:80:94:1d:f6:fe:b0:b7:c7:b5:
1d:83:ac:1c:b8:5c:48:a2:b8:8d:0a:1b:e2:1c:9c:2c:07:cb:
3c:fa:cb:63:aa:0d:c6:1f:b7:0b:ba:f8:2e:1d:5b:83:12:9f:
51:08:34:7f:cf:25:8a:75:2c:ad:09:bf:1f:fd:03:7a:19:f0:
3c:25:76:6b:83:75:4b:62:cb:a1:f2:57:1f:45:4e:ed:44:a3:
33:77:24:0f:91:3b:eb:d9:b3:98:3c:23:cb:1e:87:8c:1c:f4:
33:a1:54:f4:85:8c:9b:06:0a:48:09:8f:b4:97:11:76:17:f9:
1a:59:1f:61:cd:59:72:ac:92:3f:91:de:07:6d:a4:b7:f8:15:
3c:8f:c3:47:4e:09:ef:46:16:c3:64:b2:cc:5e:9b:02:42:2e:
6f:76:6a:d8:1b:44:54:72:c3:f4:94:ba:99:ee:da:28:37:23:
56:a4:17:17:71:c4:62:60:fc:b9:ca:8d:3a:da:04:f2:12:16:
a4:ca:d6:86:d7:71:7c:31:a3:ca:a3:55:e2:51:fc:c5:c5:f8:
fe:14:45:02:05:6a:47:18:ea:94:b4:d0:16:b9:62:6f:7a:dc:
38:8f:2a:e3:9f:d2:d7:ad:cb:20:cd:69:45:9c:89:63:bb:31:
21:14:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:27 2024 by rpki-client on console-fra.rpki-client.org