Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
File: yAH8mVpSGvH1Atnq8S1mIaZMr00.cer (raw, json)
Hash identifier: Jg9drec/bn7lqwg0fiQeyO0KMiWkFgGrYYrO44Pkwxs=
Subject key identifier: C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B77857D10FEC8AD8B350781818D79B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50469
IP: 37.148.136.0/21
IP: 109.235.40.0/21
IP: 185.106.148.0/23
IP: 185.160.78.0/23
IP: 2a03:3e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:78:57:d1:0f:ec:8a:d8:b3:50:78:18:18:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:05:d4:1e:7c:fd:50:63:85:fa:01:82:71:
15:1e:0a:64:c6:89:a7:4f:5a:b2:97:15:f5:2a:eb:
54:0e:14:a6:22:98:b5:fe:d1:1d:8e:96:4d:63:15:
52:38:b7:1e:61:74:52:c4:1d:a5:51:12:a1:39:45:
97:52:e2:3c:cb:d9:74:58:48:db:05:29:f3:6a:5c:
f8:48:a4:4d:87:8b:0f:77:13:31:fc:ea:e7:75:20:
ed:94:e4:fa:b1:5c:d5:fc:c1:9b:58:02:be:6d:b5:
2e:1a:81:93:8a:fa:ef:ed:cf:eb:14:1a:02:92:ce:
9a:fe:da:ec:d4:1e:48:58:f9:8e:38:62:31:ae:e6:
03:0d:30:4b:f9:e8:52:1d:dc:4a:50:bd:0e:ab:13:
9f:48:9e:a6:37:5a:9d:b3:af:1d:10:f9:c7:1a:b8:
cf:29:9a:74:8f:dd:d7:36:36:f8:12:98:6d:5e:f2:
d0:00:0e:b5:c0:9b:e0:d3:09:46:c8:be:27:4c:dc:
84:a6:75:99:fe:be:a1:04:cd:14:42:fb:1d:e1:8b:
51:40:31:c8:13:f9:f0:7b:d6:80:69:df:da:95:a8:
3a:5c:e2:ed:74:a1:5d:ee:e7:26:63:e5:ca:c7:d1:
8f:79:e8:bc:71:b9:b7:dc:f0:5f:f6:5b:30:d5:fd:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.136.0/21
109.235.40.0/21
185.106.148.0/23
185.160.78.0/23
IPv6:
2a03:3e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50469
Signature Algorithm: sha256WithRSAEncryption
47:4f:e6:f7:ef:59:07:50:97:95:6a:02:92:ed:05:1d:27:1b:
03:3d:64:b4:90:46:b3:a7:4d:e1:ff:e2:51:55:70:e6:51:82:
80:de:69:5a:74:c5:24:07:8d:9c:c0:e9:9d:29:b6:07:45:e3:
90:47:d3:10:7c:c8:5d:aa:96:dc:84:00:7d:ae:88:32:a4:c2:
dd:78:4f:98:ac:73:2f:f8:d3:96:55:68:53:b9:62:c5:9c:a7:
c4:02:26:f3:cb:56:e9:81:65:a7:31:27:f8:94:38:b0:41:46:
6a:af:4e:7a:69:61:22:aa:f4:fe:9d:f3:9e:fa:c3:d2:01:88:
30:42:26:85:61:cd:dd:49:5d:f3:f9:20:14:36:75:da:a0:9b:
a2:9f:f0:c4:38:32:2a:e7:ec:81:2d:4b:c5:43:25:f7:47:87:
c6:c6:1c:00:2b:7b:0a:28:d0:8c:80:0b:40:af:ec:ee:0e:f7:
08:86:7f:0c:08:59:25:51:91:80:93:24:f6:4a:b8:3f:e5:6d:
53:b1:e5:6f:e3:dc:4a:f1:19:ae:51:fd:10:91:b9:42:67:94:
e8:60:13:9a:10:2c:92:2e:94:41:07:44:9b:58:5b:74:18:b8:
19:66:39:95:ff:95:df:62:62:01:35:1d:fd:6a:7e:70:24:96:
c8:64:d4:4d
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAYzGt3hX0Q/sitizUHgYGNebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODAxZmM5OTVhNTIxYWYxZjUwMmQ5ZWFmMTJkNjYyMWE2NGNhZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2QF1B58/VBjhfoBgnEVHgpkxomn
T1qylxX1KutUDhSmIpi1/tEdjpZNYxVSOLceYXRSxB2lURKhOUWXUuI8y9l0WEjb
BSnzalz4SKRNh4sPdxMx/OrndSDtlOT6sVzV/MGbWAK+bbUuGoGTivrv7c/rFBoC
ks6a/trs1B5IWPmOOGIxruYDDTBL+ehSHdxKUL0OqxOfSJ6mN1qds68dEPnHGrjP
KZp0j93XNjb4EphtXvLQAA61wJvg0wlGyL4nTNyEpnWZ/r6hBM0UQvsd4YtRQDHI
E/nwe9aAad/alag6XOLtdKFd7ucmY+XKx9GPeei8cbm33PBf9lsw1f0KTQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFMgB/JlaUhrx9QLZ6vEtZiGmTK9NMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2IwNDFi
OC02YjI0LTQ0ZjMtYTc0OC03MmMwZDUwOTMzNGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYjA0MWI4
LTZiMjQtNDRmMy1hNzQ4LTcyYzBkNTA5MzM0ZC8xL3lBSDhtVnBTR3ZIMUF0bnE4
UzFtSWFaTXIwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQDJZSIAwQDbesoAwQBuWqUAwQBuaBOMA0EAgAC
MAcDBQMqAz4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFJTANBgkqhkiG9w0B
AQsFAAOCAQEAR0/m9+9ZB1CXlWoCku0FHScbAz1ktJBGs6dN4f/iUVVw5lGCgN5p
WnTFJAeNnMDpnSm2B0XjkEfTEHzIXaqW3IQAfa6IMqTC3XhPmKxzL/jTllVoU7li
xZynxAIm88tW6YFlpzEn+JQ4sEFGaq9OemlhIqr0/p3znvrD0gGIMEImhWHN3Uld
8/kgFDZ12qCbop/wxDgyKufsgS1LxUMl90eHxsYcACt7CijQjIALQK/s7g73CIZ/
DAhZJVGRgJMk9kq4P+VtU7Hlb+PcSvEZrlH9EJG5QmeU6GATmhAski6UQQdEm1hb
dBi4GWY5lf+V32JiATUd/Wp+cCSWyGTUTQ==
-----END CERTIFICATE-----
Generated at Fri May 3 14:19:55 2024 by rpki-client on console-ams.rpki-client.org