Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
File: yErFLitXLMKpmnQSV-VpqjceNWg.cer (raw, json)
Hash identifier: fGMo0cZ5rt8HoZkf35zPpy9NXdlur57mv/e0kjZCjHI=
Subject key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E1B8300F14E12BDAADE6B4D8FF0A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196651
IP: 195.246.244.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1b:83:00:f1:4e:12:bd:aa:de:6b:4d:8f:f0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:b5:74:73:ea:5b:aa:62:02:47:6a:ee:80:
c5:76:2c:8d:81:7f:27:56:64:5c:5b:8d:34:27:e5:
25:18:c1:ec:71:3d:e4:66:31:ad:b6:69:cd:87:dd:
e0:ad:ec:76:a6:f3:1e:74:27:ef:34:ad:5c:8f:78:
37:7c:35:2c:0c:11:ae:c5:a9:40:9d:88:22:e7:a8:
68:1f:71:44:b0:a4:1b:13:10:2f:fd:b2:f7:18:96:
72:32:a1:3a:17:b9:eb:25:19:43:fc:5a:3b:03:3a:
fd:03:6c:52:34:78:ae:51:ce:cb:b8:f2:d2:20:b6:
d9:cb:de:6a:27:64:c1:cf:d2:a8:35:e7:7a:ef:90:
56:64:93:c5:ab:c8:93:95:35:df:23:db:2c:f4:ca:
c3:c0:35:12:f8:2c:64:c0:41:da:7f:75:fa:48:6e:
06:52:7b:ea:02:50:59:4d:ae:7b:ac:df:8c:fd:85:
d0:c0:ec:64:b2:ec:7f:28:b6:7f:f6:6c:3d:23:11:
64:e6:44:88:0d:09:4e:03:b9:fb:fb:73:8e:51:80:
19:60:6c:01:d8:6d:d1:21:0f:35:75:05:86:dd:1a:
2d:c3:26:2b:4b:84:26:37:80:41:4f:7a:fc:e8:87:
20:0f:61:ad:9a:c9:eb:41:5b:0b:28:c7:95:d2:9d:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.244.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196651
Signature Algorithm: sha256WithRSAEncryption
95:98:41:e1:8f:f0:ce:6d:03:0b:c7:62:be:af:b1:a8:1f:e6:
df:8c:1e:c4:11:4b:35:ae:ff:74:73:a5:b6:94:c2:22:cb:b4:
1e:63:ce:86:b4:6d:52:31:0a:30:c9:f8:d1:70:c5:39:05:be:
55:5f:70:fc:d1:8d:2e:f6:3d:fa:82:9a:e0:fa:8b:6f:8c:4a:
12:06:7e:6f:ab:b1:5f:ea:a3:c1:8a:97:c1:05:04:c3:7d:d2:
17:90:73:92:ff:df:17:87:d2:91:1f:94:aa:f0:cf:ed:53:7b:
a9:cf:2f:66:0c:9a:54:24:76:2d:f5:e1:cd:b1:6a:3b:e2:97:
52:79:46:24:c4:bf:e4:97:6c:33:3a:5b:fe:df:5a:57:ad:c4:
52:07:fc:9d:ac:03:71:b2:d9:9b:e5:4e:79:d7:da:e5:e5:74:
c1:a1:3e:83:dc:8c:58:5c:a6:b1:7e:6e:d9:b7:15:7b:1f:da:
7c:68:84:3e:cf:37:4a:80:67:84:fe:50:ad:50:a8:cc:2b:bf:
8f:f9:d1:eb:68:21:77:13:3b:30:e9:21:b5:bd:27:b9:4a:87:
5c:55:08:f4:dd:4e:a2:36:2b:4e:af:02:54:c9:dd:6d:f8:f0:
c4:7c:14:20:cd:46:0a:8a:94:02:7c:3f:46:5c:0a:24:0b:fa:
38:69:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:10 2024 by rpki-client on console-ams.rpki-client.org