Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
File: yYuCXzbpzDMDFclA3oAMurzjOXs.cer (raw, json)
Hash identifier: mKbDemz9TEevKQFnbcajs0IctK/SkEmvIXAX3zsVzp4=
Subject key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794B3546B2BC20285FE8662488A6158
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49097
AS: 200776
AS: 210120
IP: 185.170.24.0/22
IP: 194.11.128.0/22
IP: 2a0a:7f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b3:54:6b:2b:c2:02:85:fe:86:62:48:8a:61:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c98b825f36e9cc330315c940de800cbabce3397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:c3:f0:a3:a8:37:9e:38:02:5d:50:b3:2b:
98:39:09:d9:32:cf:ab:44:c6:d3:07:26:2f:83:86:
89:c1:dc:06:96:d0:58:33:2b:a1:27:cc:55:5d:e4:
cd:5d:3a:40:fa:42:e6:7f:ca:b7:27:72:3c:7d:b5:
ca:b6:68:6e:3e:ba:7b:f0:7b:71:e0:9a:80:d1:5d:
23:d4:4d:92:54:62:6f:91:83:0d:71:7e:5a:8a:58:
24:20:77:e7:88:ed:48:18:6c:48:9c:b2:74:82:ee:
48:22:33:c2:ae:80:13:cc:10:33:3f:55:9e:1c:71:
f5:2e:5b:f8:0c:fa:ec:42:ed:cd:a4:64:cc:f5:07:
52:7a:4f:6d:86:d2:61:7e:ea:99:40:e1:ae:8e:9d:
a0:1f:25:18:b2:54:89:87:c7:f5:9e:f2:71:58:00:
da:b4:49:8b:3c:53:20:c4:ea:51:19:35:2e:54:5a:
7d:62:81:e8:5b:b9:21:90:ce:fe:fc:0d:60:2b:96:
11:76:e3:cf:dd:85:3c:8e:c0:6f:d5:b5:6c:7d:f8:
e0:81:11:f5:26:24:34:0e:4b:20:43:53:97:98:26:
51:f0:40:a5:0b:05:08:ec:72:1a:4f:ef:37:60:b7:
75:52:af:6f:58:cb:31:68:27:67:1f:44:ea:4b:00:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.24.0/22
194.11.128.0/22
IPv6:
2a0a:7f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49097
200776
210120
Signature Algorithm: sha256WithRSAEncryption
3d:ac:24:0d:cc:07:33:eb:a0:c7:5a:7b:1d:97:72:f4:4f:d1:
80:fd:8a:12:0c:7a:4a:49:78:a9:a2:7f:b7:f1:4d:06:34:13:
27:fb:85:7d:11:e4:97:66:19:b8:95:4e:cc:52:6f:ce:24:73:
6f:2e:8b:2a:21:50:31:ac:02:b9:e4:40:ce:79:b7:be:b2:72:
b7:c9:89:3a:44:ec:d0:ad:f5:04:75:a5:15:6d:ce:e5:47:64:
4a:e5:5e:a4:26:ab:44:4e:5c:b5:90:76:ad:78:4d:61:d6:39:
25:2a:8b:7f:b3:3b:05:63:7c:50:1a:5a:36:10:ae:0e:ad:68:
0f:52:df:4e:41:01:0d:45:55:b4:47:28:fb:15:20:7e:5d:b4:
8e:2d:46:48:5a:24:0d:24:52:80:12:30:2e:70:4c:1f:82:51:
9e:39:8a:e5:3e:55:18:aa:7f:14:5c:b8:f0:13:cd:83:8f:2e:
ee:fc:f2:da:7e:8c:90:e1:54:05:45:9a:df:d8:85:50:ba:5a:
85:7a:43:31:68:2e:b1:14:14:d5:af:61:07:02:a2:68:c8:81:
2e:a8:d8:36:71:4d:25:80:f7:c8:cf:d1:d8:b6:4a:88:83:11:
11:df:27:24:37:25:02:98:1d:9e:5b:bc:4f:85:2a:ac:02:49:
0c:13:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:19 2024 by rpki-client on console-ams.rpki-client.org