Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.cer (raw, json)
Hash identifier: wjbi2wMK3F9lF/MNsCq+U/nbHWCuHSHLCb50XpML68o=
Subject key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4932A7C11C69E2883A891E6A785EE18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.171.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2a:7c:11:c6:9e:28:83:a8:91:e6:a7:85:ee:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:3a:48:c0:d9:a1:ff:89:09:55:62:08:ca:
aa:17:cc:62:57:26:c4:41:7a:49:5e:ff:05:51:69:
74:f8:f6:97:ce:00:0a:4c:de:72:d3:e6:3a:62:47:
45:d3:a5:4c:de:4f:11:62:a4:d8:b8:2a:39:d8:6d:
df:bf:bf:d7:65:4e:99:a8:7c:c9:8f:10:f4:4e:21:
9b:f8:f2:8a:6d:8b:c9:2f:ff:37:cb:0b:36:4b:e3:
db:b2:69:58:30:27:ed:4a:aa:a8:28:3a:7e:e6:11:
2a:5c:5d:18:2e:ca:f8:4e:3b:2a:ec:cf:a8:33:85:
3d:d1:8e:48:47:f7:d8:fe:21:ca:7f:a0:a6:a8:e1:
49:b7:c9:7a:8c:58:17:e4:77:88:2e:f3:8a:1c:a5:
35:e5:cc:de:e5:51:eb:84:03:5f:7d:5c:98:74:38:
f1:ce:57:3f:66:1d:a6:d3:bf:eb:b2:e6:4c:f5:e9:
4c:d1:a1:41:71:fd:a5:e0:80:66:1a:8d:59:03:66:
18:6a:30:c8:35:af:de:ef:84:9f:59:23:83:55:35:
65:13:e8:48:7a:13:de:b0:2c:10:ae:fc:df:fe:84:
e8:a5:b1:de:3d:58:ed:96:cf:36:28:e9:23:48:f1:
2e:b7:9d:a2:5b:89:bb:fd:c9:f1:2e:f9:6e:2b:17:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.248.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:76:f1:88:a8:9e:76:d7:14:e0:1d:44:4f:2e:64:34:99:d3:
f1:3a:56:08:6e:01:cf:70:f0:77:d6:42:4c:76:7b:58:db:92:
8d:de:7d:3e:a2:c7:4e:de:f6:28:d1:a3:f2:91:d5:15:87:94:
bc:8d:cb:fc:0c:38:dd:e0:90:ab:12:a9:16:12:ad:1c:81:ab:
94:10:ac:33:19:7a:8a:7d:52:a5:8f:a1:79:ce:f8:b6:9f:dc:
83:f4:7f:14:89:a9:09:c3:4c:9b:cd:c9:d8:90:ba:2f:63:c6:
b3:65:7b:79:19:3d:3a:9a:99:fd:a7:2d:91:28:f5:28:f4:8d:
e1:bf:05:76:5c:95:c8:78:c8:b2:18:ba:85:71:80:5c:bd:87:
0b:95:0e:a1:1b:de:2e:cf:52:52:fd:50:42:8c:fe:38:47:eb:
0e:fd:59:a7:d0:37:fa:d8:b8:b5:09:ec:de:e9:89:72:6c:65:
e1:56:b4:8f:49:43:32:f5:c3:59:3f:27:2c:e8:12:82:20:39:
55:d1:b3:58:5e:41:6b:c7:d5:62:7c:5c:a6:e7:53:91:9c:a4:
bc:0e:86:3f:d8:8f:5a:95:50:72:53:40:86:7c:46:37:e3:cc:
ac:47:b3:5e:29:6a:fb:18:20:39:92:98:5a:79:1e:e7:8b:dd:
29:5d:bb:7a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzEkyp8EcaeKIOokeanhe4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRmZWFlY2EyMmQyZDI2MThiNDMzY2YwMGFiMTQ0YmQ4YjgwZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQE6SMDZof+JCVViCMqqF8xiVybE
QXpJXv8FUWl0+PaXzgAKTN5y0+Y6YkdF06VM3k8RYqTYuCo52G3fv7/XZU6ZqHzJ
jxD0TiGb+PKKbYvJL/83yws2S+PbsmlYMCftSqqoKDp+5hEqXF0YLsr4Tjsq7M+o
M4U90Y5IR/fY/iHKf6CmqOFJt8l6jFgX5HeILvOKHKU15cze5VHrhANffVyYdDjx
zlc/Zh2m07/rsuZM9elM0aFBcf2l4IBmGo1ZA2YYajDINa/e74SfWSODVTVlE+hI
ehPesCwQrvzf/oTopbHePVjtls82KOkjSPEut52iW4m7/cnxLvluKxcUUwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMnf6uyiLS0mGLQzzwCrFEvYuA29MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzk1N2Ix
NS1kNWRjLTQzZTUtODA5Yy1iYzM2MmQzNzY4YmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOTU3YjE1
LWQ1ZGMtNDNlNS04MDljLWJjMzYyZDM3NjhiZC8xL3lkX3E3S0l0TFNZWXREUFBB
S3NVUzlpNERiMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuav4MA0GCSqGSIb3DQEBCwUAA4IBAQCrdvGI
qJ521xTgHURPLmQ0mdPxOlYIbgHPcPB31kJMdntY25KN3n0+osdO3vYo0aPykdUV
h5S8jcv8DDjd4JCrEqkWEq0cgauUEKwzGXqKfVKlj6F5zvi2n9yD9H8UiakJw0yb
zcnYkLovY8azZXt5GT06mpn9py2RKPUo9I3hvwV2XJXIeMiyGLqFcYBcvYcLlQ6h
G94uz1JS/VBCjP44R+sO/Vmn0Df62Li1Ceze6YlybGXhVrSPSUMy9cNZPycs6BKC
IDlV0bNYXkFrx9VifFym51ORnKS8DoY/2I9alVByU0CGfEY348ysR7NeKWr7GCA5
kphaeR7ni90pXbt6
-----END CERTIFICATE-----
Generated at Fri May 3 11:07:53 2024 by rpki-client on console-fra.rpki-client.org