Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
File: y_TOjMrJljtVr0-8MzMtWVhhx1I.cer (raw, json)
Hash identifier: UzfWj7WR3YIQHlFfRCitKfJYkOjxD6UThd3TN06xhf0=
Subject key identifier: CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E5233EC953866B592925E57D2980C18AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Mar 2024 15:35:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215294
IP: 2001:67c:e44::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:33:ec:95:38:66:b5:92:92:5e:57:d2:98:0c:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 15:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:06:f3:d3:59:3e:09:bf:18:9e:95:1d:05:
87:f3:b2:85:43:b0:b1:a6:06:57:f3:74:43:3d:d0:
0d:97:4a:e1:b2:b5:09:b4:7c:f7:a6:74:8e:fe:5e:
b9:2c:3f:5d:60:fa:0c:78:6b:fe:c4:f0:de:25:4a:
5c:13:0f:6b:0b:6e:75:05:ed:86:9f:0d:af:40:fe:
4e:ad:a9:48:15:0f:5a:03:a1:18:29:8f:d6:a0:b3:
c2:15:db:6b:29:60:b2:97:ce:c2:cc:6f:7a:0b:95:
15:04:bf:dc:04:d6:75:05:4f:8c:d9:a9:c3:00:3d:
25:cf:fa:cc:ec:17:cd:18:1d:8b:7a:ea:c7:74:ef:
d3:bc:c7:55:6f:66:53:6c:c8:9c:fd:6a:78:dc:39:
c9:07:b9:d2:f8:b3:70:91:69:66:48:be:6f:13:7b:
3e:42:62:d2:21:ba:9e:b2:3a:e6:86:ed:62:d5:e9:
af:0f:b8:4c:9b:66:f9:18:12:20:09:cc:d7:c5:d0:
30:34:c1:9a:94:c7:e0:c5:fa:2e:de:f4:8a:1d:ed:
9a:f5:05:53:6c:9c:37:28:81:49:c7:97:b1:85:37:
e9:09:dd:cb:77:f7:2a:e1:ad:af:7c:a6:71:08:25:
89:60:33:9f:94:8f:6e:91:42:2c:2c:24:77:5c:40:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e44::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215294
Signature Algorithm: sha256WithRSAEncryption
2a:f7:a3:31:e5:09:08:75:ef:11:e0:0a:a7:ef:8e:88:2a:5b:
3d:53:87:f2:08:8e:9a:82:5f:eb:ac:13:76:d5:8c:8a:35:12:
0a:31:2c:c2:09:b1:85:19:e5:c6:07:ff:55:ae:8f:d1:b7:43:
7c:67:ad:35:ed:5e:d5:7c:a6:ab:01:a4:43:47:56:04:bf:29:
3c:91:ad:8a:27:4c:9c:4e:8c:c9:e0:32:09:4c:a3:8f:a7:84:
23:00:69:7f:19:f3:60:ae:c1:07:fd:87:c7:9e:61:80:5c:a2:
dc:3e:06:0d:4b:d7:3b:b6:69:f7:28:bf:b7:81:b3:f3:a6:7b:
2c:68:38:d8:69:81:97:20:70:31:48:fb:08:39:19:57:31:4b:
b3:a6:55:3b:f1:ec:de:85:bb:2e:fd:79:c1:ef:1d:40:15:0f:
28:98:b7:6d:f7:e3:93:74:6f:b0:b9:de:14:8e:5b:02:50:ef:
16:81:8f:da:2e:11:46:32:a2:c3:3c:60:b4:7e:12:d0:67:62:
4b:2a:46:34:da:dc:c6:bd:14:24:53:c2:b0:3e:2a:ee:2d:85:
e2:a6:b3:48:3d:29:a7:43:05:ce:f5:99:e1:ef:5d:95:25:a1:
96:f7:90:3a:4a:e7:50:24:13:33:a2:f5:50:26:29:21:7b:e9:
18:09:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:29 2024 by rpki-client on console-ams.rpki-client.org