Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.cer (raw, json)
Hash identifier: I4muHrvzT0GY9Iekal0nQgfSV8UAiK3xd7CPtfEoo1w=
Subject key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC1D6F6FD75F00F3E9D94E4891639F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197369
IP: 46.16.40.0/21
IP: 188.240.4.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1d:6f:6f:d7:5f:00:f3:e9:d9:4e:48:91:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:d3:b4:89:f0:3d:a4:42:05:67:fc:5d:0d:
2d:01:b0:96:cf:81:ca:63:f2:72:aa:9f:62:5c:32:
57:1e:30:b5:a2:48:ff:44:39:a7:0a:f6:28:17:cc:
ee:5c:ef:32:5d:6a:62:3c:c2:03:bc:33:56:c2:b1:
02:1f:f6:3b:02:d6:76:48:07:6d:f1:72:c2:0a:0e:
ee:d5:4d:54:4e:5d:44:e8:34:2f:8d:7c:39:0c:06:
ca:e4:96:22:e7:58:bf:41:43:2f:1d:0b:03:56:cf:
90:5a:01:36:63:15:24:f7:26:73:de:6b:76:e2:67:
4c:04:74:50:2f:1f:fb:12:08:00:fa:7f:b6:c5:5c:
e4:ab:f7:d9:0a:90:47:56:ce:0f:27:d3:50:fb:ad:
77:ce:d9:fc:8f:90:ab:bb:0e:54:fa:83:e9:22:ad:
b0:0a:be:2d:1d:e7:59:21:50:2e:b3:db:e7:49:d7:
c2:d1:c1:17:31:56:f4:4c:8e:18:61:c0:92:8f:da:
e9:b8:b4:00:92:80:1e:0b:3d:2c:f4:5b:04:23:7b:
e0:d8:1b:cd:6d:ec:e1:09:6e:2c:96:82:34:78:8f:
57:fb:fb:f6:8b:b4:13:22:e0:f1:c5:33:fc:af:bd:
80:67:fa:34:1b:4c:1a:22:a8:c3:2d:51:b8:dc:fa:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
188.240.4.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197369
Signature Algorithm: sha256WithRSAEncryption
26:25:56:f7:73:bc:a6:92:e7:f9:47:87:e7:fe:bf:74:4a:58:
9b:a3:1c:bb:4e:3f:cf:53:ba:5a:a2:c3:de:ad:45:2d:76:92:
22:f2:0a:4c:5e:87:f2:c3:61:80:68:82:ea:3d:94:f0:5e:0f:
c9:1b:7d:f6:83:62:c6:54:de:3a:34:ac:ed:f5:c8:da:0b:43:
98:91:cf:c2:d7:8b:27:c7:2e:ab:70:07:a6:e2:ab:9e:41:d0:
cf:b4:a8:3e:e8:b2:90:ff:23:1b:23:99:17:6d:e8:f6:7e:9f:
f9:e5:0e:f3:8d:b4:28:32:a1:44:fe:21:27:0a:fb:e4:e1:89:
42:f4:f5:37:4e:e6:b1:f3:5f:d4:1a:27:af:56:b4:28:77:92:
eb:c9:bc:5b:65:68:be:eb:de:83:0b:23:9b:e7:f9:d4:97:61:
9d:a1:79:6d:db:56:ec:44:c4:14:61:58:73:b9:50:ae:c9:45:
f4:80:b0:1d:4e:a4:eb:6a:e5:75:38:e6:c3:cd:e7:99:34:1f:
b9:78:52:eb:d8:5c:34:ab:41:4d:9f:c3:dd:40:92:28:cb:d4:
e4:25:14:bf:49:a1:45:e8:60:1c:61:61:74:dc:9e:77:b4:f4:
12:60:f6:6c:1b:47:5b:5e:74:25:38:84:44:f4:16:6e:ae:0d:
9f:77:6a:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 08:26:54 2024 by rpki-client on console-fra.rpki-client.org