Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
File: ybBR6OaBSbZgROfeSuWdc25Teqo.cer (raw, json)
Hash identifier: uXohDKtTKyxJvv+ZTyTe2HgOl2O+Gy0eL0saCl9Tuec=
Subject key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CE2E796D529961E499D4828A83956891A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 07 Jan 2024 07:51:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201145
IP: 185.75.96.0/22
IP: 2a05:50c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:e7:96:d5:29:96:1e:49:9d:48:28:a8:39:56:89:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 7 07:51:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:23:1b:02:89:3e:35:89:5d:07:5e:27:90:
cd:61:8b:04:76:ba:6d:bf:ac:23:d1:f9:0a:d0:41:
44:5b:04:11:d0:b1:e2:78:82:2c:8d:be:72:1b:5a:
88:bd:42:ac:09:26:11:93:30:a3:63:ed:9e:b5:50:
f4:99:84:0c:10:6b:14:d6:c8:70:28:96:7c:52:9f:
ed:2a:2d:96:74:49:f6:ae:f1:28:47:12:42:8f:de:
25:9f:26:3a:ce:2c:34:c0:d4:0b:75:c1:66:ba:d9:
20:3a:c4:67:6f:52:cd:8f:1b:8a:b1:65:ca:f6:d9:
d8:13:15:53:a6:bc:df:f7:b6:9a:ef:fe:15:6e:b4:
a1:b3:2e:36:94:18:70:c2:e0:d6:71:31:5f:f8:67:
7d:7f:b3:00:76:1f:1c:62:e2:aa:d7:49:2d:6e:d6:
44:68:a4:78:7a:79:a9:41:5f:67:6c:41:0f:4a:7e:
15:21:6e:f6:36:cd:fd:86:a0:9b:2d:a2:9c:fc:32:
03:7e:bd:bc:e4:ba:ac:45:cd:f8:ed:bf:fd:5d:28:
9e:54:27:f8:db:87:98:63:6c:e9:16:0a:48:fc:c0:
a7:99:43:ad:82:52:b5:df:ab:c8:10:dc:fb:b6:d1:
88:18:c6:e2:02:15:82:21:10:99:58:de:a9:10:4b:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.96.0/22
IPv6:
2a05:50c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201145
Signature Algorithm: sha256WithRSAEncryption
56:b3:10:99:fe:dd:03:9c:02:fd:b6:2c:84:53:fb:28:f5:86:
d3:72:61:9f:03:9e:b8:de:e3:e3:aa:41:02:14:e2:0f:ad:f4:
f2:ec:c8:ef:05:33:bb:48:b7:de:84:26:3b:40:c4:b3:7b:15:
fa:38:5d:3a:c7:3f:c2:70:66:37:72:3d:4a:56:33:5a:b1:d4:
9b:a4:52:9f:82:7b:38:bf:43:72:fc:ea:d4:e2:bb:53:5f:15:
bd:f4:6f:c7:2c:e7:b4:f3:66:8a:8c:e2:10:a9:e2:ff:ca:57:
6e:db:54:01:6d:6f:a7:f8:fa:26:e5:71:b6:4f:46:c3:f1:2f:
4b:1b:8b:5f:13:8f:7a:58:e9:6d:bb:12:be:f8:04:f7:87:68:
fd:1d:45:e5:fb:6a:6d:09:7a:4b:c7:a9:e7:ea:b5:bc:ca:5d:
f9:ae:f7:a8:30:5a:21:dd:36:b9:a3:49:8a:4d:27:92:0d:d4:
2b:5e:7c:17:6e:ba:e7:b4:1d:f3:e1:2d:37:f1:3a:c8:5e:4c:
a3:2c:7b:8c:a9:0f:a3:81:f9:e7:b6:78:0f:17:96:4d:42:88:
e7:bf:7d:ed:77:69:4f:74:82:3c:e2:98:aa:15:2f:a4:97:59:
29:6e:98:98:4e:6f:ba:f7:3d:59:1f:a8:16:1d:1c:ee:fc:cb:
5b:72:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:05:15 2024 by rpki-client on console-ams.rpki-client.org