Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer (raw, json)
Hash identifier: 6xBMmRLfsepWgtJIH5vjnqDsSMsolduCxzCBrWRJ05s=
Subject key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E66B06BEE9AF38D6FC57DBBD171B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34683
IP: 87.254.96.0/19
IP: 185.69.216.0/22
IP: 195.137.228.0/23
IP: 212.24.192.0/19
IP: 2001:1698::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:66:b0:6b:ee:9a:f3:8d:6f:c5:7d:bb:d1:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca37843f0752224459e6034569a217c8b611564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:eb:a7:f7:df:63:95:f8:48:8b:ca:88:a1:
69:46:5b:cb:0c:54:97:76:79:b9:9c:49:1d:87:2e:
dd:1d:27:a2:90:d3:ab:d4:bb:f6:c2:88:83:1a:63:
f8:9f:f4:00:80:bc:6c:c8:19:ee:c7:87:cb:4d:f2:
73:a2:44:bf:a3:ee:f2:f4:da:ec:f4:45:1f:e1:ce:
6b:1a:51:4d:42:a4:9e:8d:17:28:9f:bf:7b:75:92:
44:fc:49:61:83:a8:c8:0e:c4:d6:b1:10:16:82:80:
cd:ae:24:67:1d:25:ad:d3:d5:36:39:42:71:1c:09:
6a:47:62:e8:ea:21:48:02:0d:0f:c3:85:98:63:5e:
4c:32:cb:46:d3:d7:09:1c:41:08:b5:a2:c2:c8:35:
14:89:50:33:f2:f4:de:f7:50:df:2e:dd:0c:d5:86:
56:bd:e1:1f:7a:df:e6:6e:a3:11:2b:2b:f4:0d:ed:
34:5f:ce:00:bf:06:72:c1:31:d8:69:f1:40:8b:41:
7f:e5:f4:a5:c8:4c:84:ba:85:47:be:54:64:84:46:
66:bd:75:13:45:30:11:1a:43:5a:a6:1b:dc:c5:09:
0f:0c:8b:f3:ce:ca:f8:c5:16:8d:42:25:5b:57:7c:
79:22:93:b7:6d:8d:7d:af:44:63:5a:31:7d:61:03:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.96.0/19
185.69.216.0/22
195.137.228.0/23
212.24.192.0/19
IPv6:
2001:1698::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34683
Signature Algorithm: sha256WithRSAEncryption
0d:3a:4f:e1:34:77:16:2b:72:59:40:7a:76:4b:78:db:df:3f:
fe:de:14:50:66:84:4b:86:6f:60:27:b5:6c:51:d1:42:1c:aa:
24:e9:97:80:d0:de:9b:09:69:b8:7e:43:18:81:ae:f4:0b:44:
a1:28:c3:94:39:71:3f:6e:1e:70:ef:ad:d4:75:68:75:1c:ab:
15:16:31:e0:ed:c2:28:c2:c5:cc:3d:c1:1d:17:df:ff:0e:5e:
fc:ad:90:cb:c9:04:88:d0:b7:95:4c:1b:54:54:ae:2a:57:cd:
58:13:a3:eb:9a:11:48:03:ca:c6:13:b6:ed:cb:1b:cd:02:55:
25:87:29:3c:17:a3:78:fd:48:20:7e:91:cc:2f:d5:16:aa:58:
52:94:3b:35:f2:2c:23:7a:f8:5e:01:71:23:63:c3:95:4e:04:
1b:76:50:6c:66:04:eb:9e:d6:dc:09:1b:d3:99:52:ac:b5:46:
00:3e:2c:e3:40:d4:78:7a:f7:5c:ba:17:72:27:d9:f6:f4:24:
68:d3:5a:0c:27:06:1e:4a:c2:f7:f9:5e:f9:14:71:1c:4b:35:
c2:6d:7f:24:82:9e:56:d6:d4:49:2d:95:2f:1a:90:4b:2f:5a:
15:eb:44:be:5c:7b:1c:f4:b3:18:99:db:40:24:7c:43:5d:46:
b3:11:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:46 2024 by rpki-client on console-fra.rpki-client.org