Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
File: yIYjh23RrY5iSiPdUossZMgKhSE.cer (raw, json)
Hash identifier: m+YgIUNKU8Ly9sjDE58BwyjzwGMobRqS6lZWm/frMdU=
Subject key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E6495B1ECD331EC044656EE7649AAF27F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Mar 2024 05:15:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34806
AS: 62107
IP: 45.159.56.0/22
IP: 193.107.23.0/24
IP: 2a0f:7a80::/29
IP: 2a11:4580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:64:95:b1:ec:d3:31:ec:04:46:56:ee:76:49:aa:f2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 22 05:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:7a:ae:16:d1:36:ac:5b:15:25:61:56:c7:
96:71:a6:da:f4:0f:59:e1:09:b1:b1:11:1e:31:5d:
09:fc:8f:19:cc:c9:46:34:ea:ca:2e:63:d9:f0:80:
59:49:36:89:57:6f:16:ff:15:bd:8a:f7:5c:13:59:
92:e7:cc:08:4b:24:95:9a:3f:09:ea:db:43:cc:6c:
0e:a9:d9:5a:ee:f2:b7:d1:b7:1c:6a:03:10:a3:b2:
4b:99:49:2d:8c:c9:97:f1:b8:4d:0e:1d:e9:02:e6:
7a:eb:df:b7:0c:fb:7a:7e:7d:2b:f2:40:0a:fa:3d:
d3:d0:58:b6:76:6f:9c:04:b4:ab:e2:3d:b4:8b:86:
f0:29:fc:40:1c:9a:d1:7a:f7:84:06:fc:39:aa:ed:
5a:70:ef:dc:29:2b:07:93:bb:87:69:db:1f:1f:6b:
99:d6:0e:56:77:d4:56:57:94:5b:c4:cf:84:42:83:
eb:d9:cd:51:21:cb:5e:9b:b7:25:d7:fa:56:32:31:
0a:dc:99:c5:cd:ca:9a:59:8d:2a:1d:4b:5e:a3:c4:
c5:e2:2c:03:36:c1:dc:4a:e9:46:86:17:91:56:6b:
9b:62:2a:7d:2f:ff:db:65:48:c1:62:81:8a:ca:f2:
24:e8:0f:bc:20:a3:61:63:bd:50:43:63:37:3d:15:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.56.0/22
193.107.23.0/24
IPv6:
2a0f:7a80::/29
2a11:4580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34806
62107
Signature Algorithm: sha256WithRSAEncryption
52:8a:69:bc:bb:e3:1b:d3:7e:eb:f3:a7:72:8a:4f:78:e0:b2:
9d:bf:89:53:61:33:65:e1:0c:65:e0:dd:85:70:05:d5:29:b1:
e4:5a:0a:30:4c:32:98:63:60:87:db:fb:53:2b:3e:09:db:80:
bd:78:a3:fe:ab:2e:d3:1c:4e:20:e8:d0:35:51:32:f4:38:6e:
9e:54:69:cd:f9:ce:08:64:d1:c9:47:81:e1:5a:0f:2b:79:90:
a9:4c:17:1e:79:b2:2c:07:9f:bb:9d:e6:d9:a0:8f:00:e2:13:
39:6e:06:82:e0:43:c3:2d:2a:90:f7:1d:f2:0b:33:6c:3e:3d:
bb:32:99:4f:9b:08:19:2c:11:48:c1:62:34:3f:5e:74:b5:41:
b2:e8:6b:eb:ed:5a:6b:36:c0:0f:7d:16:82:49:fe:0b:ed:6f:
a1:92:53:60:bd:32:c4:89:a9:3c:b2:30:83:50:e2:7e:cd:d1:
41:3b:3d:14:93:05:ba:b8:8f:20:eb:be:c1:13:8c:f4:2a:e9:
4a:8a:4c:4a:eb:67:cc:78:68:21:ba:96:46:8a:3d:71:2e:3d:
7d:d2:55:b2:03:0e:28:16:61:7b:bd:2c:ad:fa:7a:40:27:d5:
b3:94:d4:03:2e:17:48:75:7c:09:8b:ae:78:24:cf:ce:04:59:
7e:df:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:48 2024 by rpki-client on console-ams.rpki-client.org