Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
File: ycbGTWd6yWSqxmbrrLnRf6jIq80.cer (raw, json)
Hash identifier: +TWWs6SHNryPY9kAbX/R7GzM/yVq228KUxpKu+cQFRw=
Subject key identifier: C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF2B05F1E23C6E678E5EE53EDB311E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206439
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2b:05:f1:e2:3c:6e:67:8e:5e:e5:3e:db:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:d3:b9:8e:54:26:56:0f:ce:05:39:14:80:
41:0f:2f:3c:71:fd:6d:09:4f:5b:c8:8c:15:dc:79:
eb:88:28:81:80:61:11:5f:f9:60:ac:91:b3:bd:8f:
2d:f8:31:c5:27:a9:aa:99:1c:19:06:ed:5b:ec:76:
f8:6c:6b:51:e9:a9:dd:bc:94:e7:19:7a:d0:9d:af:
f1:24:9a:84:a8:03:d5:0c:0c:53:ee:ac:27:73:f5:
69:6d:dc:7a:1d:d5:34:f3:77:8c:bb:18:d9:e4:0a:
69:03:ab:f0:e3:6d:99:27:89:3c:d5:89:b1:66:31:
6b:1a:0b:8f:1a:fa:1d:fb:82:67:ef:fa:52:81:08:
fc:e5:ff:33:8a:ea:98:95:c3:4f:bb:74:c0:60:c0:
92:f5:fd:49:4a:37:51:32:f2:5f:41:24:2f:c1:9b:
10:8e:d8:44:62:10:e3:88:a0:cf:e0:7b:1e:2e:eb:
9f:a0:b0:e5:37:c6:1d:54:ee:47:b6:fe:7d:b4:ef:
75:7d:7f:23:f3:7c:4b:b1:88:ec:80:2a:55:c4:e1:
7e:47:d5:3c:89:b7:05:59:0c:b9:67:59:12:b9:33:
8d:7a:a6:d9:d7:7c:a8:fd:fd:93:82:c2:a8:8b:48:
4c:55:24:ba:5c:8b:fa:b1:85:fd:0a:e9:27:31:34:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206439
Signature Algorithm: sha256WithRSAEncryption
5f:e3:05:75:e4:e0:69:99:b7:d8:10:bc:50:5e:fd:40:92:76:
00:bb:e9:27:2f:bf:9f:0d:fd:e3:fa:13:4e:c0:80:12:3b:71:
c3:7e:c4:55:c6:28:7b:12:c8:12:86:fc:6d:49:dd:76:03:f3:
76:4d:8d:3d:06:cd:4e:6b:83:9e:65:5d:0c:b5:05:ef:fa:d0:
ca:bb:69:8e:3e:4c:21:e5:07:df:41:6b:2c:91:2c:e6:32:3c:
95:81:18:c6:33:56:5d:4c:a0:77:70:c5:54:7b:a3:fb:56:89:
b8:aa:f6:22:ff:e8:ef:91:4e:0b:f2:91:8e:4f:40:d8:3c:db:
df:29:ca:6c:29:96:6f:65:6c:d0:16:f1:9c:f8:e5:df:97:00:
fe:b4:ff:75:89:3e:d8:d1:4a:91:4c:52:8d:76:eb:ec:19:d3:
88:6c:b7:09:c9:8c:9a:44:0e:c5:76:12:86:e8:40:d1:1c:cd:
c0:6f:f7:23:63:51:a1:bc:2e:94:25:3a:ab:27:6a:96:44:b6:
3f:43:bf:9e:ea:49:26:6e:6d:4a:9f:cf:03:2b:93:d4:9c:fb:
20:df:50:4c:b8:59:f6:00:01:6c:36:e9:32:eb:b1:8f:08:ee:
71:af:52:ea:10:b3:97:7b:01:ae:ed:68:e4:6d:4f:39:4c:d8:
5e:df:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:42 2024 by rpki-client on console-fra.rpki-client.org