Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
File: ygBGolNBzREDtgzOC5nqN1S6XEE.cer (raw, json)
Hash identifier: A9KGSaL4yUReqBldhf1OPtJ48INl/jgGz7AIU5S5WR0=
Subject key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01928F09CEB25147D8BB94244AD1DAC3A37F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Oct 2024 07:17:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.160.252.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:09:ce:b2:51:47:d8:bb:94:24:4a:d1:da:c3:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 07:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:c5:89:d0:80:dc:1a:38:13:24:f5:84:43:
0f:b6:c3:3f:98:f7:20:98:39:73:d4:97:f0:6d:23:
94:b5:62:c0:26:b7:e1:cf:21:0a:59:f8:a5:26:d0:
07:f0:ed:69:1e:de:6b:c0:d7:fc:e3:31:36:85:02:
11:63:55:60:9f:70:4d:b3:ea:e0:71:e2:6e:1d:d7:
36:4e:99:d1:83:46:9e:3b:68:20:d2:95:19:48:dd:
ca:4c:5c:9a:8c:0d:9c:eb:61:bb:95:36:50:fb:d4:
6b:54:8a:98:1d:86:1c:5a:37:e8:e0:75:c9:56:fd:
2e:a8:ac:37:76:26:5d:3b:ea:5d:fe:0b:fd:e6:39:
b7:fe:e9:b3:62:df:e0:26:eb:cf:6b:3e:95:3e:0d:
cb:71:5b:95:ab:91:49:63:e1:67:01:78:6c:77:01:
72:a5:fa:8c:e0:5b:d0:ae:28:10:a8:c6:10:ba:40:
c5:31:4a:b0:58:1c:b8:cb:68:09:aa:20:9f:8e:54:
4b:33:04:48:30:6b:6f:10:c6:40:09:dc:97:f2:d7:
98:68:f9:9d:61:89:fe:d3:0d:8b:39:cd:7b:95:f9:
c2:88:4d:f6:8d:e0:3a:02:31:5c:bf:51:e7:cd:5e:
2c:bc:88:db:74:3e:34:92:ec:b3:56:c7:a8:b9:5f:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.252.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:56:cd:e1:82:cb:dd:c2:87:22:a6:99:94:55:b8:cb:58:
1a:ad:4b:aa:7d:bd:31:ca:ff:5e:87:73:17:b0:40:70:b7:39:
d6:37:d8:c6:e7:a6:b2:88:e1:7b:30:e6:c8:3f:fa:70:0e:c5:
2a:af:04:d4:c7:ed:d6:60:60:45:78:58:1f:bd:8d:95:de:cd:
ee:f1:5e:51:e6:c8:be:57:3e:fd:3f:94:40:11:6b:2c:3f:64:
0a:c3:67:a9:28:fb:9d:27:58:30:e6:36:d5:5b:28:2f:c8:a9:
ff:02:e4:75:d6:a1:25:72:0d:77:58:17:e1:a1:f8:fd:92:af:
34:f7:cb:c0:4d:64:bb:c4:e4:0b:7c:5f:f9:5a:4c:b7:f1:70:
a1:ad:23:cc:49:71:21:98:6f:3b:ea:f0:f9:78:85:36:db:58:
dc:48:8f:5c:53:07:8d:6e:19:ac:ff:62:b7:a1:0a:93:80:01:
91:15:f6:f9:6f:10:6b:de:c1:0d:74:84:40:cc:ca:3b:59:eb:
c4:06:c8:43:f9:00:e0:df:68:83:8e:84:2e:7d:1c:96:e9:4e:
71:4f:3e:7f:7d:d6:ce:17:28:f1:f4:70:86:18:dc:29:20:d3:
96:a2:67:1d:c9:b6:2f:68:d6:ea:9a:01:55:ad:fd:8e:26:64:
5c:f9:2e:08
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZKPCc6yUUfYu5QkStHaw6N/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDE1MDcxNzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTAwNDZhMjUzNDFjZDExMDNiNjBjY2UwYjk5ZWEzNzU0YmE1YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMTFidCA3Bo4EyT1hEMPtsM/mPcg
mDlz1JfwbSOUtWLAJrfhzyEKWfilJtAH8O1pHt5rwNf84zE2hQIRY1Vgn3BNs+rg
ceJuHdc2TpnRg0aeO2gg0pUZSN3KTFyajA2c62G7lTZQ+9RrVIqYHYYcWjfo4HXJ
Vv0uqKw3diZdO+pd/gv95jm3/umzYt/gJuvPaz6VPg3LcVuVq5FJY+FnAXhsdwFy
pfqM4FvQrigQqMYQukDFMUqwWBy4y2gJqiCfjlRLMwRIMGtvEMZACdyX8teYaPmd
YYn+0w2LOc17lfnCiE32jeA6AjFcv1HnzV4svIjbdD40kuyzVseouV92YwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMoARqJTQc0RA7YMzguZ6jdUulxBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzM2YmQ0
MC00YTQ4LTRjMDQtOTcxMC01ZTc2M2QzYTRkMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvMzZiZDQw
LTRhNDgtNGMwNC05NzEwLTVlNzYzZDNhNGQxZC8xL3lnQkdvbE5CelJFRHRnek9D
NW5xTjFTNlhFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwaD8MA0GCSqGSIb3DQEBCwUAA4IBAQAV7FbN
4YLL3cKHIqaZlFW4y1garUuqfb0xyv9eh3MXsEBwtznWN9jG56ayiOF7MObIP/pw
DsUqrwTUx+3WYGBFeFgfvY2V3s3u8V5R5si+Vz79P5RAEWssP2QKw2epKPudJ1gw
5jbVWygvyKn/AuR11qElcg13WBfhofj9kq8098vATWS7xOQLfF/5Wky38XChrSPM
SXEhmG876vD5eIU221jcSI9cUweNbhms/2K3oQqTgAGRFfb5bxBr3sENdIRAzMo7
WevEBshD+QDg32iDjoQufRyW6U5xTz5/fdbOFyjx9HCGGNwpINOWomcdybYvaNbq
mgFVrf2OJmRc+S4I
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:08:50 2024 by rpki-client on console-fra.rpki-client.org