Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
File: ySi2NBei54heM4gakkqsnUCqymA.cer (raw, json)
Hash identifier: Tasaf1T6KnN/jcCldjpi3BA/BDUzA4KkKBBS6o8c/34=
Subject key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FDE34C3A102F70F4FA3C71F69C32D8CB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Jun 2024 13:05:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25039
IP: 145.225.0.0/16
IP: 2a12:2f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:34:c3:a1:02:f7:0f:4f:a3:c7:1f:69:c3:2d:8c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 13:05:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6b:71:38:b8:69:11:cc:39:67:76:68:e5:f6:
f6:d8:84:dd:ba:92:fd:67:a7:46:be:ff:b5:cb:06:
32:ac:5a:bc:6c:c3:05:30:e2:32:77:1b:60:6d:c2:
46:d4:3d:fd:ad:bc:5b:e8:28:da:f2:b8:ef:66:89:
ce:16:cf:d7:24:64:26:37:f8:d5:73:25:52:2b:00:
18:79:c4:94:0f:43:81:11:55:ca:e0:3a:fc:2f:60:
80:2b:0f:9c:d0:8f:b8:0f:29:77:6f:16:77:83:a0:
e3:13:80:fa:51:72:93:5e:0c:29:9d:06:6e:20:0b:
ff:98:40:9f:53:14:b0:3c:c6:e6:85:4c:5e:42:39:
6a:ee:9b:df:73:f2:0d:d8:4f:70:5e:fa:14:8b:cb:
ec:8f:e1:09:cd:0e:29:4f:8b:47:fe:8a:60:cb:1e:
bd:f9:48:6e:1c:6e:51:a6:9f:ce:b8:6a:87:5a:fd:
36:a0:79:d8:8e:f4:c2:fb:e8:96:37:80:fc:34:3a:
26:a5:62:d6:35:8c:14:51:7d:21:c4:21:bc:f3:16:
fc:f4:80:01:8d:a3:8e:db:61:fc:67:7a:74:a2:bc:
b1:04:e8:19:63:2b:1a:91:99:8e:e7:2e:0e:9b:de:
83:26:ca:c4:3a:3b:57:9b:15:d1:86:df:17:67:6a:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.225.0.0/16
IPv6:
2a12:2f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25039
Signature Algorithm: sha256WithRSAEncryption
43:d4:8e:1e:46:4f:2f:ef:59:f4:cb:e6:ab:b3:fe:ef:20:07:
3a:ec:e5:6a:15:33:53:08:ed:ee:69:8b:22:03:a4:f2:49:42:
8e:44:1f:d0:a1:95:1c:3a:de:ca:ba:f7:42:4a:19:2d:48:b1:
18:6a:7c:04:8d:84:e2:a9:0c:84:3b:f0:92:59:bf:db:89:b5:
4f:40:64:c5:87:b6:b5:6b:c8:49:8b:c3:2f:4d:0e:63:b2:3f:
44:c4:22:a7:28:cb:a3:8d:54:2c:af:48:d4:30:12:62:cf:1e:
55:64:ea:f0:a2:13:c4:43:2a:eb:c4:d7:76:9c:ce:c7:39:a7:
72:19:d6:a5:dd:99:31:04:55:4a:aa:00:60:cf:33:7c:73:c2:
e3:4b:5d:b4:97:a6:43:61:72:00:ff:01:c4:42:a8:8e:9e:0c:
40:57:8d:ed:10:13:f3:94:e2:0b:b9:a2:ef:51:99:3d:bc:45:
28:51:5b:aa:cf:40:cb:aa:e8:30:2e:04:d7:de:87:66:9c:39:
9a:90:26:67:0c:c4:90:86:92:7f:97:a6:53:53:b8:2a:7d:46:
16:86:0e:b0:7f:63:70:e0:48:ba:48:33:09:4e:e4:53:63:bd:
be:d2:b5:40:77:99:40:51:cc:1d:c8:3f:2c:6c:c8:4e:f6:57:
72:f9:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:47 2024 by rpki-client on console-fra.rpki-client.org