Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
File: yda1mpPjJAg_vKQjfkfp9evzcas.cer (raw, json)
Hash identifier: SFjJYq4VnJvUdYtlSaupZuFa1IvaIufGHuwg8fI8e3k=
Subject key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801695F2F3B2EBC20428498EE1E2FA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.193.164.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:69:5f:2f:3b:2e:bc:20:42:84:98:ee:1e:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4a:9f:e9:fe:c7:01:a3:06:ad:f0:6b:b5:2a:
1f:f5:59:f6:02:25:8d:35:9a:e4:9e:b2:3f:b8:28:
10:74:7a:df:ec:e8:ed:36:0b:fe:16:79:eb:bd:f4:
29:76:eb:a2:95:28:f7:94:25:5f:43:b3:49:e7:5a:
b6:ee:03:23:97:27:4a:91:9f:a1:1b:b4:f4:d0:eb:
2e:0d:6b:f2:c9:9f:4c:e8:f9:ee:f2:3d:6a:f4:24:
f9:c6:17:a2:16:1f:a7:8e:95:50:fd:81:7c:e8:f2:
1e:5f:d8:67:42:76:c0:8f:e0:f9:89:22:2a:3b:e1:
ae:5b:9a:ff:07:df:97:0c:ea:f9:ca:28:a4:ff:e5:
2e:24:2b:66:c2:11:f3:2a:75:20:73:9e:4e:3f:88:
29:cf:cf:11:e8:30:0a:bb:1f:91:15:37:3d:c0:3c:
e5:d1:4b:2b:e9:12:29:c9:07:96:a3:a5:a7:42:20:
9b:5a:5a:b7:95:67:3e:40:ff:00:c4:30:e1:48:5a:
8f:41:84:67:e5:9b:74:06:cb:38:54:ac:4b:9a:cd:
cd:09:f5:c0:22:03:c8:c4:a5:bb:61:ac:28:05:17:
d7:f5:93:3a:42:71:8f:c7:51:83:64:82:d5:3e:1f:
d0:2d:4d:0a:42:0d:ca:95:1a:de:f9:eb:0a:a5:c2:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
86:a0:fe:56:c6:fd:c6:ff:72:33:b8:3a:4e:4a:ec:95:c4:33:
a0:fe:b0:1e:10:ac:7d:4c:72:cb:3d:19:ec:f1:ad:6a:75:03:
ce:7e:f7:83:6e:7d:9b:89:8f:09:4a:df:d8:21:8b:89:0e:72:
62:9c:a9:62:9a:e9:3b:23:8c:c8:49:28:5e:9d:68:42:1b:9d:
e0:61:0f:90:c9:c9:4c:d5:2f:79:10:13:0f:9b:3c:1c:99:c8:
12:67:e2:66:87:6c:5a:0a:08:e4:16:41:c6:49:03:25:d2:fe:
81:b9:68:e4:fd:93:c0:17:13:52:d8:ec:79:1c:c2:18:d8:84:
a7:23:db:19:84:83:32:30:0f:22:ae:63:c3:4d:43:9f:c3:bb:
02:8c:49:70:ea:99:d7:75:08:38:0f:d3:a9:3b:a7:86:72:b7:
c2:90:f3:97:b3:ab:8c:81:ce:e4:06:9c:5a:64:4c:3c:e5:ad:
e0:48:36:51:c6:a7:b7:c0:1b:26:2b:f3:b8:66:5a:ec:2a:8b:
fb:57:f3:62:ae:02:52:6e:55:7c:ed:be:12:ca:30:19:9b:d8:
bc:50:fa:d8:4a:56:38:03:55:e4:9e:86:65:4a:4e:71:99:06:
2c:7d:86:38:14:01:88:92:7e:d9:ae:fb:03:66:c9:6f:48:31:
08:74:9a:0e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAWlfLzsuvCBChJjuHi+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWQ2YjU5YTkzZTMyNDA4M2ZiY2E0MjM3ZTQ3ZTlmNWViZjM3MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Eqf6f7HAaMGrfBrtSof9Vn2AiWN
NZrknrI/uCgQdHrf7OjtNgv+FnnrvfQpduuilSj3lCVfQ7NJ51q27gMjlydKkZ+h
G7T00OsuDWvyyZ9M6Pnu8j1q9CT5xheiFh+njpVQ/YF86PIeX9hnQnbAj+D5iSIq
O+GuW5r/B9+XDOr5yiik/+UuJCtmwhHzKnUgc55OP4gpz88R6DAKux+RFTc9wDzl
0Usr6RIpyQeWo6WnQiCbWlq3lWc+QP8AxDDhSFqPQYRn5Zt0Bss4VKxLms3NCfXA
IgPIxKW7YawoBRfX9ZM6QnGPx1GDZILVPh/QLU0KQg3KlRre+esKpcLcYwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMnWtZqT4yQIP7ykI35H6fXr83GrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzY4MmIw
Ny03NzNmLTQ2ZmQtODJlMi1iOTIxMWUxZmMxYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjgyYjA3
LTc3M2YtNDZmZC04MmUyLWI5MjExZTFmYzFhYy8xL3lkYTFtcFBqSkFnX3ZLUWpm
a2ZwOWV2emNhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCucGkMA0GCSqGSIb3DQEBCwUAA4IBAQCGoP5W
xv3G/3IzuDpOSuyVxDOg/rAeEKx9THLLPRns8a1qdQPOfveDbn2biY8JSt/YIYuJ
DnJinKlimuk7I4zISShenWhCG53gYQ+QyclM1S95EBMPmzwcmcgSZ+Jmh2xaCgjk
FkHGSQMl0v6BuWjk/ZPAFxNS2Ox5HMIY2ISnI9sZhIMyMA8irmPDTUOfw7sCjElw
6pnXdQg4D9OpO6eGcrfCkPOXs6uMgc7kBpxaZEw85a3gSDZRxqe3wBsmK/O4Zlrs
Kov7V/NirgJSblV87b4SyjAZm9i8UPrYSlY4A1XknoZlSk5xmQYsfYY4FAGIkn7Z
rvsDZslvSDEIdJoO
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:36 2024 by rpki-client on console-fra.rpki-client.org