Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer (raw, json)
Hash identifier: LU+vp5cF93NbyKTBDXD/P/zVJrQpq9+ICIJin29uL1E=
Subject key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8014A4F304AE68F237DF5C9AB17C9CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211477
IP: 195.189.241.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4a:4f:30:4a:e6:8f:23:7d:f5:c9:ab:17:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:90:a5:d0:41:25:0c:06:fd:3a:6a:e1:d6:
84:0a:a9:2d:e9:e7:3a:55:90:3c:1c:e0:61:aa:7b:
fc:69:dc:a7:cc:3d:38:40:6c:09:b6:36:c5:dd:bf:
5a:85:1c:df:15:ce:b5:0c:be:9d:d6:b1:93:ea:d3:
9f:58:86:3d:a9:d0:83:1b:80:d7:e0:26:19:19:9b:
c3:8d:32:74:eb:1d:3c:93:08:80:15:44:e1:d5:5a:
c0:4b:3c:38:e7:f5:3c:08:7d:bb:51:3e:05:09:b4:
d8:83:87:5e:5b:9e:90:69:8a:3a:2f:04:28:f8:69:
d7:31:65:57:77:40:a2:88:55:40:c8:86:46:28:ba:
f4:63:2e:e8:89:82:1f:a8:f7:fd:a0:0e:5f:30:7c:
09:c0:80:cf:dc:2b:5d:58:22:a3:9b:4d:ae:c8:8f:
4f:86:17:5e:a1:9d:ab:4c:ea:6d:d5:7b:99:6b:f2:
a6:ac:c8:05:5e:1a:7e:48:a0:ca:62:e2:1d:db:c7:
ac:2f:49:82:eb:d1:cb:b2:e1:40:0c:c6:99:7d:dc:
ba:e8:28:ce:04:91:53:09:6a:06:97:09:eb:86:bd:
8d:b7:2f:8c:a5:48:f2:33:d4:a0:78:a3:cd:d9:cd:
ed:0d:72:a8:92:25:bc:d8:fe:be:bf:a5:3b:9f:63:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.241.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211477
Signature Algorithm: sha256WithRSAEncryption
37:67:36:b9:80:39:91:b5:c2:39:62:2e:9e:c4:13:59:5f:ab:
ae:65:78:5f:52:d7:83:44:57:a9:3c:6d:8c:e6:3b:0f:05:c1:
9e:e1:79:0d:f4:33:d2:1c:a4:6c:3e:e3:9b:c6:18:bc:4c:75:
58:09:58:7f:86:e8:e2:40:0c:3e:f8:52:70:64:2d:86:84:77:
81:4b:7c:5b:bf:1b:2f:74:82:54:bb:45:45:97:c6:a9:30:4b:
52:1c:bc:68:b7:94:59:be:6a:8c:d0:0b:41:6a:ef:0b:b8:00:
90:36:3f:73:2e:dc:a8:c0:23:a9:e3:41:33:85:20:70:09:b4:
4c:d8:d4:81:e5:92:4c:e9:ec:b2:c1:28:2d:6c:4f:1d:72:6b:
a5:05:80:63:81:98:ba:af:ec:7b:b4:e9:80:94:9a:42:4b:aa:
51:61:89:13:fd:39:2d:12:76:75:60:a9:a5:b7:e1:a8:03:03:
5e:a7:c3:e4:bc:bb:89:fb:2f:18:8c:b8:76:b4:8b:98:d8:e2:
19:04:4f:fa:26:3e:f4:19:00:02:72:f4:e0:97:2a:40:6c:93:
8c:32:b4:1a:02:d1:e4:ab:6e:f6:13:cc:f7:f2:9b:97:37:93:
a7:77:01:aa:ec:25:b5:80:bd:8b:55:f1:94:b6:7e:0f:bd:69:
66:bb:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:25 2024 by rpki-client on console-ams.rpki-client.org