Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer (raw, json)
Hash identifier: IPzN6SpLXphJ+Icde7eJBnuZIb95lzDp6vZ3uFozi4Q=
Subject key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC81238E2503C2DC227E0EB77178C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41545
AS: 43809
AS: 196704
IP: 83.171.228.0/22
IP: 95.128.112.0/21
IP: 185.8.80.0/22
IP: 185.184.92.0/22
IP: 185.215.8.0/22
IP: 195.88.130.0/23
IP: 2a02:d900::/29
IP: 2a0a:9c40::/29
IP: 2a0f:10c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:81:23:8e:25:03:c2:dc:22:7e:0e:b7:71:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:32:69:3b:a5:6f:5d:99:6d:c2:f0:c2:3f:
f4:7a:5f:03:df:df:3f:de:4b:4f:71:77:22:b3:9f:
2c:cf:39:1f:1e:f0:ce:73:9f:26:45:38:f9:3e:62:
05:ec:fd:ef:e5:ba:8e:d3:a5:9b:3c:4f:32:b3:36:
51:21:d3:19:34:31:15:33:e4:2c:ce:13:cd:fa:7c:
ab:56:0e:c7:10:47:84:8c:21:ad:4e:7f:cc:42:da:
f3:96:1d:60:e6:40:e8:a7:9d:c8:94:39:c0:06:c1:
ad:37:e9:d6:d4:36:4c:e4:97:31:82:ee:1e:9a:33:
dc:aa:0a:b4:56:d4:c4:b3:4c:15:17:83:57:17:09:
6a:db:5b:85:e9:62:ab:7c:88:22:9f:83:20:c7:b4:
cb:a9:7e:3d:ba:d2:05:d2:ff:9d:c0:aa:8b:ac:c8:
a1:a1:0a:9b:31:46:e1:25:4f:f3:e3:b3:c0:00:c2:
3d:13:f2:74:e5:c7:2e:c4:7c:70:a4:a8:fc:80:17:
ac:f3:b3:08:f0:27:c7:21:5e:41:d3:46:a7:04:4f:
9e:65:e8:57:f5:bd:68:e1:8a:d4:c7:3d:18:86:6e:
a5:5b:89:c9:66:30:a7:b9:54:39:4a:55:d0:c0:32:
06:9d:5a:0e:18:02:74:f9:46:3e:aa:c3:3c:43:ef:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.228.0/22
95.128.112.0/21
185.8.80.0/22
185.184.92.0/22
185.215.8.0/22
195.88.130.0/23
IPv6:
2a02:d900::/29
2a0a:9c40::/29
2a0f:10c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41545
43809
196704
Signature Algorithm: sha256WithRSAEncryption
09:54:e3:2f:9b:05:76:c4:0c:b3:05:ba:8c:d2:d8:2a:b5:3f:
50:14:01:fb:15:4f:23:1e:1f:da:50:49:fb:65:5c:8e:b0:45:
86:d3:2f:94:af:b4:64:02:b4:e7:d6:af:5b:e3:1a:27:1d:a0:
e2:36:b9:64:22:c5:31:30:25:31:af:45:e1:2e:13:8d:bc:63:
33:3d:77:7e:52:16:bd:28:e9:4e:26:4e:56:63:3d:49:74:93:
94:b6:8b:87:06:28:af:70:05:49:c0:07:ce:33:23:62:49:63:
2d:90:f3:32:21:8e:f5:83:34:c6:88:e1:22:73:cd:dc:88:75:
72:53:c4:4a:b6:a8:85:15:12:8f:c2:0c:62:2b:67:d6:26:5d:
10:2f:2d:fd:35:4f:20:a9:ba:81:d6:e5:2e:50:d4:31:2a:56:
0f:e2:69:70:37:52:14:69:fd:3a:58:de:6d:39:3d:37:73:7e:
31:bf:d2:13:0f:24:24:86:0a:98:59:d0:99:bf:ba:62:af:3b:
5d:b1:6f:22:e2:99:bd:53:e8:ad:c4:49:d5:11:79:d5:d4:23:
66:8f:ba:02:cc:5b:61:a0:80:21:5c:38:bf:3a:76:fb:7c:4e:
3f:00:8c:18:78:95:43:ea:b2:9d:33:11:5e:61:55:42:f2:78:
56:ac:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:26:52 2024 by rpki-client on console-fra.rpki-client.org