Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer (raw, json)
Hash identifier: 5bcWq5xrRXcLcezS2IGAT+UC/rTepZ9TL9E7F/ukmNQ=
Subject key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801734FCE9E95611AA09694E5896D87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201463
IP: 128.127.8.0/22
IP: 193.8.68.0/22
IP: 194.55.42.0/24
IP: 194.56.168.0 -- 194.56.173.255
IP: 2a07:ce40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:73:4f:ce:9e:95:61:1a:a0:96:94:e5:89:6d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:4d:bb:e6:9b:56:4c:44:68:a5:d2:6d:7b:
c9:db:ab:a2:ff:90:c2:65:6f:29:6c:e1:9e:1f:f2:
4f:6d:f6:c1:d3:0a:8c:c5:2f:58:84:12:d7:8b:27:
1d:e3:18:05:9f:b2:aa:56:f2:a8:6e:22:10:3e:c7:
8b:6a:46:3c:91:e6:19:dd:00:ad:06:22:95:8c:de:
00:ab:a1:1f:8d:4e:4d:15:5a:8a:aa:86:ae:b0:f9:
e9:74:1e:41:9c:f8:5f:a4:d6:5d:0b:6f:89:bc:a9:
29:cd:21:db:76:73:24:c2:54:21:77:b2:ae:75:7d:
df:31:62:47:94:b3:df:bf:a4:1c:eb:d7:2a:73:7d:
e7:c3:ae:19:33:78:e8:75:ea:38:f3:69:7c:37:48:
55:73:93:66:56:43:ec:32:ae:05:2e:3c:46:e9:41:
d3:10:7f:08:4f:7a:4f:a4:22:9e:51:82:66:cc:6c:
6a:54:15:bf:e5:26:af:78:1f:67:7a:b7:6f:4c:2e:
53:91:5b:b4:af:4b:bd:a5:cf:fc:a4:41:e1:a6:b0:
4b:b7:fb:4e:25:d8:07:3d:04:8d:e7:75:e5:79:63:
2c:94:94:55:78:a4:70:50:0b:fa:1b:15:f1:b1:fb:
4d:cb:30:d4:77:b5:f3:6a:b7:4b:ed:c7:12:1e:51:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.8.0/22
193.8.68.0/22
194.55.42.0/24
194.56.168.0-194.56.173.255
IPv6:
2a07:ce40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201463
Signature Algorithm: sha256WithRSAEncryption
a5:18:64:64:b4:a2:e4:22:bd:21:66:66:93:ec:6d:fc:d0:c3:
43:ac:54:9d:b5:a1:53:a4:bc:34:af:55:fc:1e:af:54:38:2f:
9b:65:6e:13:0d:d4:bf:d9:f1:f0:d5:26:68:33:46:86:a7:4c:
73:3d:dc:09:6e:15:8a:88:a4:9d:be:a1:f8:b7:6e:a6:ba:81:
4e:8f:29:36:d5:a4:28:f2:a2:e1:44:47:77:06:68:d2:0f:91:
43:09:cf:47:61:42:a8:bc:4f:b8:2a:5b:cc:28:08:89:f4:63:
fe:41:4d:43:62:bf:80:05:8c:c4:ec:92:0a:ff:0f:4d:16:9b:
75:27:b5:0e:7f:00:5b:50:70:8b:50:50:92:af:3d:61:4c:39:
c0:01:05:24:14:c6:29:36:2a:49:ea:84:34:72:ff:74:b7:8d:
b9:2c:1f:01:3d:32:79:3f:3b:b2:3b:cf:28:02:08:29:a1:e0:
62:2d:cc:ac:30:a2:cf:41:1d:d1:74:e7:5c:7a:2f:90:b8:ca:
62:4c:9c:bf:40:7c:50:38:92:64:85:98:5c:61:36:9d:d3:eb:
fb:27:ff:77:4e:fe:bf:f3:8d:82:6d:91:9d:94:c4:94:81:36:
51:7b:2b:06:6b:70:bd:d8:9d:77:9b:7c:57:3d:a7:33:53:cd:
7c:a3:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:30 2024 by rpki-client on console-fra.rpki-client.org