Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.cer (raw, json)
Hash identifier: tuVPTs7KgF/AYl9exZdZzhTBdA+RDA2aVH9xR975rpM=
Subject key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79467B178862E5AAFE00125FBE04CC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203221
IP: 185.141.248.0/22
IP: 2a07:2740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:67:b1:78:86:2e:5a:af:e0:01:25:fb:e0:4c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:e3:de:81:3a:0d:dd:a5:06:73:09:70:a4:
4e:d7:43:ab:f1:d9:5d:3e:36:6c:a2:86:aa:df:78:
f0:b1:58:46:0f:de:68:a2:af:f4:6e:68:45:a5:9c:
77:ab:a3:2b:df:8f:08:90:42:1b:94:5d:ff:c9:a7:
95:3d:37:f8:8f:b6:4b:c2:49:bf:03:18:a4:c7:25:
91:c7:19:6b:2e:d0:3a:49:ec:d8:c1:8d:4c:90:0e:
a2:30:c1:f4:1f:85:67:5d:a6:a5:0e:9c:e8:51:65:
de:e0:45:5e:2d:aa:e4:30:d9:8e:b5:3c:44:0d:e0:
aa:8c:bc:d7:f0:e3:f8:86:b6:b5:5a:05:81:fb:1c:
5b:62:3d:80:b6:83:36:80:b5:92:26:ac:24:e9:a9:
ee:b8:83:07:11:f1:41:8b:3f:d8:fa:df:85:b5:d6:
ca:93:76:19:1e:76:43:95:98:a1:5c:8f:98:73:11:
2e:72:a3:fe:ed:1a:c7:5f:7b:79:45:4c:89:1f:3a:
c7:85:a2:51:59:6e:4e:b1:13:f1:ac:bf:84:d6:d7:
5e:0e:dd:94:8d:96:93:98:ad:38:c3:bb:72:6a:80:
74:a4:36:c4:b6:06:15:6d:9a:d1:12:bd:5b:e7:f1:
c3:f5:11:fa:da:1d:02:75:7a:b2:66:8f:56:51:ab:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.248.0/22
IPv6:
2a07:2740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203221
Signature Algorithm: sha256WithRSAEncryption
a8:57:8a:69:d7:5a:09:f4:f6:91:1b:22:28:86:0d:52:21:6c:
a0:36:60:d4:44:d6:02:db:53:2f:51:2a:e2:a5:f8:21:c3:22:
86:8b:29:66:72:42:9d:cd:ed:13:b8:19:8c:dd:51:aa:c6:79:
3a:69:6a:cc:c8:02:da:d0:33:af:14:e5:07:0c:73:e6:cc:f2:
63:6b:ab:b0:d1:f2:92:52:8d:d0:33:67:2a:64:2d:0c:54:1c:
1b:96:94:08:09:6e:55:b3:bb:14:db:32:c3:bc:dc:9b:39:9b:
2c:b4:b1:da:b5:1c:b3:58:24:71:2c:cb:2a:66:91:73:8c:28:
70:22:1b:a3:6f:b1:8b:8d:64:e8:20:42:b3:8c:98:52:c3:b9:
03:48:b8:30:ea:d2:c8:b5:4a:dd:9c:30:82:21:20:2d:83:ef:
81:96:7b:d5:b0:25:1a:dd:d8:d8:79:a7:d7:5e:a7:d0:e2:d2:
03:97:8d:1b:8d:c2:77:8d:d4:2e:33:71:91:46:e2:28:ad:82:
6f:0b:f8:08:06:7e:47:5c:6b:6d:50:2c:fd:e8:97:5a:26:14:
3d:74:9a:fd:87:6a:77:83:c9:b0:30:b1:53:9d:70:2c:5e:44:
93:58:a5:51:f7:38:06:7f:07:95:3e:f7:db:04:ab:dc:b0:4a:
56:b2:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:27:02 2024 by rpki-client on console-fra.rpki-client.org