Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.cer (raw, json)
Hash identifier: MOzoyLNijbfuFi14PKSpxDzkZq1BCg0nzYmVtQSGqyA=
Subject key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EC9203A725DA5FE5737CF88B395E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206906
IP: 185.170.120.0/22
IP: 2a0a:a100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c9:20:3a:72:5d:a5:fe:57:37:cf:88:b3:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c89b5b29699e2dd418040c0edf750085d8720442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:e4:ac:80:86:8e:32:25:60:03:d9:75:b4:
ac:11:fc:f1:0a:68:d2:f2:3b:47:3f:e6:2a:92:a2:
7e:a6:52:f1:87:68:12:83:12:f0:c0:00:80:35:b2:
67:55:75:96:00:97:77:52:ce:f8:9e:3a:13:03:7c:
2e:d3:c8:64:65:df:9b:c8:1d:cb:2f:4f:75:93:0b:
f7:cc:c6:d4:2b:00:38:66:86:67:00:c3:04:44:b8:
91:3e:74:d3:91:a6:56:0b:41:81:e3:e8:b6:17:9d:
da:ab:be:ef:3c:0b:f5:ac:94:37:65:51:98:06:e8:
7a:ca:69:27:84:c6:9a:ec:b3:8c:85:c7:e1:60:c7:
1b:62:96:0d:b0:cc:9b:cf:0d:98:21:15:26:03:72:
7c:a9:a9:52:3f:da:9d:28:e3:b0:29:bf:1e:80:9c:
6b:ff:ab:90:9e:93:0a:4e:13:bc:68:03:44:9d:c6:
d8:31:58:91:6b:f1:2c:ec:e7:0d:d4:e3:e0:d8:67:
58:b9:1d:e7:ce:d6:55:df:b8:e0:08:dc:c9:d3:df:
93:27:a7:3c:6e:16:88:a4:37:3f:06:1e:cb:1d:0b:
fe:eb:fd:54:bb:5d:ff:6f:c5:66:b3:97:74:1e:8c:
99:7a:f5:8b:0c:7d:cd:48:ee:02:9d:98:45:96:34:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.120.0/22
IPv6:
2a0a:a100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206906
Signature Algorithm: sha256WithRSAEncryption
88:98:a4:0c:42:65:fa:6f:3e:01:fe:ed:27:ee:02:e8:72:e9:
89:66:78:1e:14:42:0e:db:a4:f3:f7:9b:09:99:30:11:2d:6a:
19:bd:5d:eb:ae:c8:2d:6f:94:bc:30:27:6a:a1:9c:75:81:f3:
6b:2d:5a:76:2f:75:74:84:77:6c:51:9a:79:50:5e:de:1b:8e:
32:3c:fa:27:66:eb:4b:0e:b3:43:7c:a0:f8:06:36:bd:0c:43:
5a:3f:6e:e6:24:2d:10:09:88:f4:cb:7b:41:24:1d:3a:34:74:
4e:53:15:20:39:81:e2:e7:b7:cb:63:dc:7d:04:f4:97:18:03:
ec:96:70:9b:cd:ea:1e:c8:be:03:42:67:d1:61:fc:9a:7e:27:
06:f4:ba:a7:45:0c:a8:48:70:93:84:15:c6:00:12:5d:71:6d:
d0:a9:9d:0b:a3:e8:c6:54:83:35:55:97:7a:ea:1e:54:28:97:
e0:f5:7f:d1:55:fe:65:05:4a:b2:91:8c:30:ae:47:b5:d0:f9:
ef:b3:84:24:b5:4d:47:5f:62:e1:72:ef:f4:5f:bc:7a:50:2e:
1d:b0:ec:96:ff:2d:1a:88:81:8f:a0:86:62:b6:a3:2f:81:eb:
5e:32:ad:39:29:50:c0:fe:65:ad:0c:f6:13:8a:2d:fc:2c:32:
45:98:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:35 2024 by rpki-client on console-fra.rpki-client.org