Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
File: yh3vhAA2XhysFuj3iHCS2smDtz4.cer (raw, json)
Hash identifier: nQxDEaG5+THDmOlJhf5wo/nyIzBSVqhCtstJmlng2As=
Subject key identifier: CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A9584519D0DE249DDE78C33BA64D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41165
AS: 43109
AS: 44519
IP: 80.64.80.0/20
IP: 91.196.96.0/22
IP: 94.100.208.0/20
IP: 185.35.8.0/22
IP: 193.243.156.0/23
IP: 195.216.204.0/23
IP: 195.238.176.0/22
IP: 2a00:7d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:95:84:51:9d:0d:e2:49:dd:e7:8c:33:ba:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca1def8400365e1cac16e8f7887092dac983b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:89:80:e1:c3:5e:4c:a8:05:84:81:85:84:
40:10:4a:bc:14:0f:21:e9:54:d7:66:5a:fa:3a:b4:
59:f1:cb:b8:92:88:5b:58:ff:10:b6:94:18:ee:00:
45:04:cf:29:b4:0f:22:6f:44:51:5b:83:ff:3d:77:
c3:36:c4:c1:69:87:62:81:57:23:84:e6:35:f8:24:
27:25:9b:fa:35:cf:06:ec:fa:28:31:03:7f:4a:49:
f8:2d:bd:1e:43:6b:07:40:cc:8f:c9:90:27:6e:e5:
7d:5b:98:cb:42:6e:01:6d:41:fe:27:44:6b:2f:34:
c6:bc:cb:b3:98:ae:ee:ba:d3:ae:09:66:54:e1:17:
04:8b:5c:3d:90:d9:b9:6e:35:a2:6e:2b:1a:be:64:
62:5c:76:db:3f:a0:ba:86:d0:bc:f5:75:a2:65:ea:
e8:7b:6b:86:4f:cd:4a:5c:bb:27:86:6b:f7:cf:5a:
3b:e1:27:73:7f:44:6b:8c:71:fb:a1:bb:f7:e0:6d:
52:c5:fe:77:f4:ae:51:78:6d:00:8c:ce:0b:d7:1c:
09:8f:d5:8e:c1:14:1e:97:fe:49:5b:08:02:97:45:
ac:f4:f6:c5:77:64:c7:d3:0f:0e:99:3e:06:77:bc:
88:12:55:61:29:94:10:7c:61:71:92:c9:8e:da:4a:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.80.0/20
91.196.96.0/22
94.100.208.0/20
185.35.8.0/22
193.243.156.0/23
195.216.204.0/23
195.238.176.0/22
IPv6:
2a00:7d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41165
43109
44519
Signature Algorithm: sha256WithRSAEncryption
ae:ed:0c:6a:fe:ec:2d:03:a4:7e:c2:8c:c8:f9:7d:64:f7:b1:
91:d6:6f:c6:f3:bd:92:3f:5e:d1:ac:7f:39:fe:d3:66:16:21:
b7:d5:08:62:17:3c:40:44:bd:ef:49:78:b7:fe:6a:6d:e7:9e:
67:ac:72:21:89:f4:0c:7e:ce:8e:33:f3:30:dd:c8:4a:da:21:
e4:73:05:1d:03:90:75:c6:04:22:28:d6:72:1a:1b:22:14:27:
da:8f:d0:1b:d1:36:ce:53:32:1a:06:9e:e4:d3:c8:ee:d0:57:
01:5b:32:e1:a0:8e:96:69:f6:91:36:ba:37:1d:d1:bf:e1:e6:
4e:3a:1c:52:ed:41:40:b8:74:55:7c:75:a9:fb:73:11:6d:85:
0b:92:6f:08:3e:81:4c:ae:34:4b:6f:7e:a6:84:0e:17:ad:78:
1c:b7:11:c5:4a:38:16:b5:63:20:9a:3e:0b:96:42:e6:25:2d:
64:29:cf:0d:e7:3f:85:6f:1c:f7:0e:83:3c:81:71:0e:94:b4:
dd:d5:7c:65:c1:33:9f:23:a9:43:5f:e2:e4:fd:e2:f6:eb:e2:
b5:41:9f:b9:d4:e6:b9:3b:6d:c7:1a:48:7e:40:4b:cb:74:63:
82:74:a6:10:71:f1:9f:de:df:60:72:14:d5:80:c1:cf:46:43:
ca:8c:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:27:14 2024 by rpki-client on console-fra.rpki-client.org