Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer (raw, json)
Hash identifier: icxtiETF4KTmxGrG9NmW3dNuHfxfPCnEfQU4gGdRJuo=
Subject key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4648A957F48E29EF3F9B1CFC8B31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.189.4.0/22
IP: 2a0b:d780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:46:48:a9:57:f4:8e:29:ef:3f:9b:1c:fc:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:27:6e:11:43:cc:58:4b:de:6c:f9:75:32:
a0:f6:bf:34:84:77:a1:13:70:4f:fc:4d:f3:af:00:
72:dc:32:d3:72:17:fb:f5:32:69:c7:f5:6a:cd:dd:
f3:8f:68:ec:9e:9c:70:04:00:a6:d3:ea:bf:6c:8f:
94:89:c1:c8:82:89:29:8e:ae:d0:5c:38:eb:a0:48:
aa:e7:19:a5:f4:cd:b0:59:97:28:f4:05:eb:4b:6f:
f4:56:70:eb:53:a2:60:44:6b:0e:15:2d:b3:10:86:
3e:e0:74:a5:58:b8:52:48:13:05:eb:00:79:aa:6e:
27:65:d6:d5:41:82:92:cf:f3:98:c0:6f:44:26:17:
5d:4f:e7:81:8b:a8:89:02:ef:7b:b7:00:e8:6b:58:
74:77:11:f1:a1:6d:3a:aa:24:0b:82:32:d9:97:10:
3f:44:42:29:b2:fe:65:35:9f:44:2f:17:10:c0:9e:
77:ab:6a:d0:d5:ef:d6:b1:dd:01:81:b7:63:17:ec:
9a:34:19:33:17:7e:e6:73:e2:66:6c:29:6d:67:89:
33:1f:1b:f4:41:4e:30:77:a2:a9:c5:23:59:81:35:
3a:77:c5:01:13:80:af:35:3b:2e:dc:43:5b:d6:bd:
b6:54:2b:2a:6b:47:52:cf:91:a7:3e:b4:7b:3d:1b:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.4.0/22
IPv6:
2a0b:d780::/29
Signature Algorithm: sha256WithRSAEncryption
97:27:e7:67:dc:04:8b:83:13:92:0b:0c:59:d8:d5:ca:a8:0d:
f1:8a:04:a3:14:0d:87:65:5b:f8:a9:26:ce:45:a9:a3:94:f5:
4c:cd:80:5b:a4:a1:34:fd:b0:d3:46:ff:98:23:e3:8a:99:25:
00:c2:14:fe:91:30:d6:38:3e:24:a7:82:3c:02:36:80:54:ec:
d6:df:e0:0f:b2:c6:52:5b:a4:c5:37:d6:9f:09:60:62:e0:69:
e1:0f:c3:3b:74:3a:62:a4:70:25:00:e2:37:17:4e:94:40:fa:
b0:0b:0d:c6:0d:b7:f3:35:78:36:40:b3:0d:f7:e9:e3:0f:8e:
8f:b9:37:d7:6f:bf:a8:65:dc:1e:c8:bc:78:29:06:bc:6a:2c:
e0:b6:b3:61:7f:6d:b2:b5:e9:f5:8c:0b:0c:34:a0:12:8f:ba:
5d:cd:70:c5:37:1f:9c:33:00:a6:ab:81:73:07:da:e0:61:8a:
49:43:4a:32:22:ca:fe:14:08:21:e6:e4:df:11:b3:3e:57:95:
4e:dd:32:8d:f2:74:69:0a:85:3c:57:0a:75:75:61:35:8f:0d:
a2:6b:7e:42:14:24:2e:9b:64:98:d5:f9:2c:37:27:97:ff:18:
a2:5e:0a:60:c6:f1:65:5a:cc:c0:33:c8:45:61:0e:cf:7b:4e:
50:82:fa:2c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzF3EZIqVf0jinvP5sc/IsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGY5YmFhYjFhMTNkZjMwZWZmMGZjZDc4MGM0YmJjNTRiYzNlNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qsnbhFDzFhL3mz5dTKg9r80hHeh
E3BP/E3zrwBy3DLTchf79TJpx/Vqzd3zj2jsnpxwBACm0+q/bI+UicHIgokpjq7Q
XDjroEiq5xml9M2wWZco9AXrS2/0VnDrU6JgRGsOFS2zEIY+4HSlWLhSSBMF6wB5
qm4nZdbVQYKSz/OYwG9EJhddT+eBi6iJAu97twDoa1h0dxHxoW06qiQLgjLZlxA/
REIpsv5lNZ9ELxcQwJ53q2rQ1e/Wsd0BgbdjF+yaNBkzF37mc+JmbCltZ4kzHxv0
QU4wd6KpxSNZgTU6d8UBE4CvNTsu3ENb1r22VCsqa0dSz5GnPrR7PRvBhQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMj5uqsaE98w7/D814DEu8VLw+bVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzNlNjc2
Mi0wOTg5LTQ4ZWYtYThkMi1kYjQ4NGNjZTcyOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvM2U2NzYy
LTA5ODktNDhlZi1hOGQyLWRiNDg0Y2NlNzI5My8xL3lQbTZxeG9UM3pEdjhQelhn
TVM3eFV2RDV0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCub0EMA0EAgACMAcDBQMqC9eAMA0GCSqGSIb3
DQEBCwUAA4IBAQCXJ+dn3ASLgxOSCwxZ2NXKqA3xigSjFA2HZVv4qSbORamjlPVM
zYBbpKE0/bDTRv+YI+OKmSUAwhT+kTDWOD4kp4I8AjaAVOzW3+APssZSW6TFN9af
CWBi4GnhD8M7dDpipHAlAOI3F06UQPqwCw3GDbfzNXg2QLMN9+njD46PuTfXb7+o
ZdweyLx4KQa8aizgtrNhf22yten1jAsMNKASj7pdzXDFNx+cMwCmq4FzB9rgYYpJ
Q0oyIsr+FAgh5uTfEbM+V5VO3TKN8nRpCoU8Vwp1dWE1jw2ia35CFCQum2SY1fks
NyeX/xiiXgpgxvFlWszAM8hFYQ7Pe05Qgvos
-----END CERTIFICATE-----
Generated at Fri May 3 03:51:35 2024 by rpki-client on console-fra.rpki-client.org