Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer (raw, json)
Hash identifier: X9QzFAFFgIpR2CfrByfJ2CTEwFcFI3rxzb1cK5emIMg=
Subject key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7A7D586F7EA8C486D9AB203814E4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211055
IP: 185.233.130.0/24
IP: 2a11:3400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a7:d5:86:f7:ea:8c:48:6d:9a:b2:03:81:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:23:ca:48:86:aa:72:3e:3a:a8:ca:8f:a6:
5a:bf:0a:66:fd:ce:0d:73:85:ce:8d:f2:a2:ac:8d:
c8:53:06:7e:b6:f0:db:75:2e:7c:ae:95:8c:b2:dc:
f2:85:93:ee:c2:2e:fe:58:6e:7a:01:aa:b7:ee:5a:
1c:9e:93:0e:0c:65:f6:5e:6a:98:e2:26:7c:24:57:
c7:47:b9:58:62:49:85:cf:7c:52:e8:ee:26:30:88:
92:88:14:69:2c:85:45:ed:54:c5:cc:80:c6:58:bb:
a0:12:20:ff:0e:1d:b9:a4:fc:9c:49:26:9c:9b:68:
bd:0c:9b:25:21:46:eb:ea:ea:25:15:af:13:3c:45:
f4:97:6e:4f:92:17:39:5f:af:dc:cf:77:da:1f:af:
5b:4c:d6:9b:a9:c3:51:8e:d0:73:3b:b6:7f:cf:c7:
76:b7:22:4c:87:2e:62:a1:ce:41:3d:11:52:2a:a2:
60:e8:31:ba:59:2c:60:21:08:25:59:51:bb:3b:4a:
0c:81:4e:77:c6:03:c1:5e:ac:bb:64:bb:9a:66:a9:
0f:b1:06:12:ea:d7:b7:bf:4e:53:13:35:db:4e:19:
d4:15:92:72:b2:15:78:6d:51:7c:63:db:bc:c7:12:
9b:4b:8c:73:37:0d:c2:97:cc:9a:4f:31:69:75:2d:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.130.0/24
IPv6:
2a11:3400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211055
Signature Algorithm: sha256WithRSAEncryption
17:b1:53:03:a9:fd:bf:3c:14:35:7d:3b:7e:e7:7e:40:db:ce:
c1:1f:61:4d:ec:d0:9f:de:22:fc:35:4f:82:16:f4:47:5a:c7:
d2:b4:a5:e7:eb:43:72:b8:8c:6e:97:86:e1:f9:b4:6e:42:de:
d4:1b:96:c4:31:9b:d6:ca:a7:df:92:74:9f:7b:0a:f5:f6:53:
76:c8:72:d3:6e:8e:c2:8a:c2:a6:62:26:16:b5:af:95:4e:79:
54:14:b1:f9:17:31:f7:d4:60:15:08:12:dd:2e:28:66:8c:0f:
54:95:b8:1e:d6:7e:44:54:9d:ba:db:6e:6f:f8:37:27:7d:3c:
94:0d:78:94:01:85:ed:f2:a3:5f:a6:63:ef:2a:cd:34:a9:94:
71:1a:90:17:c2:12:19:2e:4c:6a:cc:41:da:3f:06:31:af:a7:
e7:2d:89:bd:e4:62:37:db:97:d8:a6:a6:88:39:9d:9c:cb:7d:
9f:80:0c:99:ad:ee:9c:64:81:f0:6c:23:ab:b7:27:32:db:95:
cf:b3:84:53:26:f0:61:90:3a:c0:f2:cf:10:f1:96:bb:7b:0d:
28:fc:7c:89:77:ad:dc:69:9d:75:f2:2e:e6:4b:14:fb:57:43:
b4:0f:c5:41:99:72:39:82:9b:9a:5f:1b:84:d7:f9:d0:18:ec:
d7:b1:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:35 2024 by rpki-client on console-ams.rpki-client.org