Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
File: yjNIUNrzcSIFIBmSKevekO8osBg.cer (raw, json)
Hash identifier: ugClS7E0QHXGWh9vrZSxfXe5s7+xOozxHwy8xAtQZkw=
Subject key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7269D1D127D0F4D0D7610A72DCFE7B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.160.162.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:9d:1d:12:7d:0f:4d:0d:76:10:a7:2d:cf:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca334850daf371220520199229ebde90ef28b018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:20:34:58:ce:2d:cc:43:ba:68:62:cc:ad:
54:54:65:b4:4c:09:fe:c6:56:4f:a9:05:45:2b:af:
5d:60:7b:15:79:e5:23:bc:96:ae:9e:4a:ec:78:f5:
25:55:c4:f8:7e:93:33:e7:62:1d:d4:2f:56:0d:73:
0b:68:e6:2b:2d:83:82:9b:be:2f:33:72:47:66:ec:
ab:c4:25:1c:c4:48:be:ce:03:59:59:4c:32:61:ba:
b9:5c:cb:3d:c9:9f:6b:72:76:3c:d7:61:c7:54:47:
2f:39:f9:10:7d:4d:aa:27:77:84:da:59:fe:1e:50:
2b:73:fc:1f:65:f6:ed:5b:74:ab:23:12:e2:c3:b9:
26:43:ac:1c:a0:90:b4:14:ff:90:ba:ef:92:c1:40:
5a:b7:ad:15:2b:56:5a:3d:5d:98:1a:9b:0a:86:23:
6f:b2:46:dc:21:05:1c:38:5e:66:59:17:13:ad:2a:
20:28:0c:f8:11:3a:0e:9f:bf:3c:3a:82:0e:e9:67:
79:b6:18:40:06:95:39:be:59:19:42:65:90:44:f2:
dd:6e:5f:8c:7f:1f:42:63:8c:ee:c1:02:cd:a5:40:
ae:f5:fc:01:3a:4a:7c:f2:7d:0c:ed:22:50:fb:ce:
ee:b0:a8:37:d5:f4:ae:c7:e7:5c:79:76:da:36:4e:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.162.0/23
Signature Algorithm: sha256WithRSAEncryption
66:e8:7e:21:0b:50:76:a1:6e:58:20:7c:fb:b8:ac:d2:53:db:
8e:ef:f0:8b:e4:21:0a:f4:09:98:30:f5:6e:f7:15:7f:3d:3a:
04:88:0e:97:e0:4d:84:30:de:dd:20:b9:a5:8d:82:30:0e:50:
c5:c2:d2:9e:39:9e:e5:20:6c:9c:04:cc:c0:38:b4:b4:40:4c:
29:e3:b7:8f:9d:e8:65:04:7f:5e:bd:d1:03:7f:89:5f:04:be:
e8:5e:d7:02:3f:93:12:c9:b9:78:46:2b:9b:9c:9c:1d:59:78:
31:96:cc:d7:5a:3a:3b:37:4f:7e:02:7d:29:a3:9b:7d:93:e5:
43:46:36:4e:70:78:05:64:b3:da:9d:4d:f4:22:de:e0:c2:8a:
4e:35:75:40:07:2e:bd:29:c2:d9:1c:51:7f:73:b6:f3:ec:3c:
df:d8:05:ce:1d:c1:78:9d:b9:78:30:48:33:67:0b:07:0d:6d:
e0:cc:d8:70:6c:51:28:b9:f3:e6:af:50:a2:75:06:d8:6d:f8:
e7:3e:1c:45:01:a2:de:df:1c:ad:ea:46:8b:ab:71:62:92:f1:
49:7d:fe:a4:b7:a9:46:9a:b0:20:51:14:7a:26:8e:54:8f:8e:
c3:16:30:1b:86:14:7f:34:ec:db:1c:1b:f5:5b:8c:b4:50:18:
c4:5e:b1:b2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHJp0dEn0PTQ12EKctz+e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTMzNDg1MGRhZjM3MTIyMDUyMDE5OTIyOWViZGU5MGVmMjhiMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XMgNFjOLcxDumhizK1UVGW0TAn+
xlZPqQVFK69dYHsVeeUjvJaunkrsePUlVcT4fpMz52Id1C9WDXMLaOYrLYOCm74v
M3JHZuyrxCUcxEi+zgNZWUwyYbq5XMs9yZ9rcnY812HHVEcvOfkQfU2qJ3eE2ln+
HlArc/wfZfbtW3SrIxLiw7kmQ6wcoJC0FP+Quu+SwUBat60VK1ZaPV2YGpsKhiNv
skbcIQUcOF5mWRcTrSogKAz4EToOn788OoIO6Wd5thhABpU5vlkZQmWQRPLdbl+M
fx9CY4zuwQLNpUCu9fwBOkp88n0M7SJQ+87usKg31fSux+dceXbaNk4UbQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMozSFDa83EiBSAZkinr3pDvKLAYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2VlNWU0
Ny00ZTI5LTQ2MDMtYjk2Mi0wZTAwNDZjOGE4N2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZWU1ZTQ3
LTRlMjktNDYwMy1iOTYyLTBlMDA0NmM4YTg3Yi8xL3lqTklVTnJ6Y1NJRklCbVNL
ZXZla084b3NCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw6CiMA0GCSqGSIb3DQEBCwUAA4IBAQBm6H4h
C1B2oW5YIHz7uKzSU9uO7/CL5CEK9AmYMPVu9xV/PToEiA6X4E2EMN7dILmljYIw
DlDFwtKeOZ7lIGycBMzAOLS0QEwp47ePnehlBH9evdEDf4lfBL7oXtcCP5MSybl4
RiubnJwdWXgxlszXWjo7N09+An0po5t9k+VDRjZOcHgFZLPanU30It7gwopONXVA
By69KcLZHFF/c7bz7Dzf2AXOHcF4nbl4MEgzZwsHDW3gzNhwbFEoufPmr1CidQbY
bfjnPhxFAaLe3xyt6kaLq3FikvFJff6kt6lGmrAgURR6Jo5Uj47DFjAbhhR/NOzb
HBv1W4y0UBjEXrGy
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:26 2024 by rpki-client on console-ams.rpki-client.org