Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.cer (raw, json)
Hash identifier: kQse9g0B8vY+lQhgzuvaJvq/GtEywJLOgrhRKXpzdaE=
Subject key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F4DD583921B3652975C4FD1B4EF4F7A81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 May 2024 12:16:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60442
AS: 61148
IP: 2.57.212.0/23
IP: 31.169.73.0/24
IP: 46.28.233.0/24
IP: 185.11.248.0/22
IP: 185.33.60.0/24
IP: 185.33.62.0/24
IP: 2a02:ed40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:d5:83:92:1b:36:52:97:5c:4f:d1:b4:ef:4f:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 12:16:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:ce:91:17:89:79:58:c0:f3:6a:e4:af:07:
a1:78:07:f0:e7:2c:96:b7:f6:b3:a9:98:9e:d5:ff:
86:0a:44:62:27:ef:96:c9:6c:23:c9:cc:08:4f:62:
a3:9e:40:ab:54:d6:64:9b:a8:81:49:0d:be:99:32:
d2:63:bb:4e:de:77:d1:0c:46:fe:da:26:6c:ff:ac:
da:e2:36:c3:ef:03:41:03:c9:d8:a5:75:af:c6:47:
e2:c7:42:93:45:49:c6:5e:cb:7d:df:07:c5:12:03:
ca:14:0c:ca:87:a9:da:72:96:11:9f:54:7d:26:c4:
86:0a:05:07:59:20:ed:00:06:69:0a:d7:3f:d7:4d:
9c:88:36:29:12:77:d1:84:68:fd:cf:5b:fe:a0:23:
4c:ee:7c:0c:77:ef:8d:17:5a:f2:1e:d0:25:97:07:
57:ba:2c:e5:01:ed:db:53:e5:f9:f4:de:f6:e1:db:
1b:93:89:52:29:c3:50:d3:8a:7f:ad:0d:6f:f9:99:
ef:27:d1:96:7f:52:8d:9d:6b:b5:d9:07:16:23:89:
34:9e:5a:60:20:f1:92:6f:cc:71:ab:1f:70:c9:57:
d1:27:88:fc:3e:bc:34:58:26:9a:44:ed:62:05:42:
c8:df:6b:e9:80:1e:f4:dc:5c:46:4e:3c:39:5f:40:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.212.0/23
31.169.73.0/24
46.28.233.0/24
185.11.248.0/22
185.33.60.0/24
185.33.62.0/24
IPv6:
2a02:ed40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60442
61148
Signature Algorithm: sha256WithRSAEncryption
12:7e:20:22:38:8e:4d:c6:37:3d:b5:e1:1f:24:d3:3d:6d:e0:
84:3c:ff:95:2d:70:01:09:d3:6e:33:00:31:b5:06:7e:af:42:
eb:cd:db:e1:92:4a:b8:4f:50:29:bd:47:32:f7:32:e1:83:21:
dc:d7:e5:13:26:f0:3d:db:c7:79:e4:8e:c4:9b:e7:8e:e3:9f:
6b:d3:da:0a:4f:2a:d2:71:ad:c9:c2:9c:cc:bc:8d:4a:20:84:
4c:c1:45:f9:c4:3b:89:1f:0a:86:5c:5e:30:13:88:06:a4:fd:
26:e4:1c:d8:2d:6b:fa:57:05:47:02:8d:40:c6:f9:c2:1d:18:
a9:3f:89:e2:2b:b6:16:ee:6e:3b:79:cf:38:b5:28:55:de:38:
a6:1d:e0:3f:fe:73:1a:44:fe:d6:4f:18:8c:2b:af:5a:46:bd:
68:37:61:9a:bb:6f:94:22:b1:47:34:de:29:dc:18:7d:14:76:
7b:32:3c:16:1f:4b:72:eb:f7:5e:bd:48:fa:91:d6:91:0c:fd:
07:77:cc:89:ab:4a:6a:16:67:60:77:f8:37:b5:e7:9e:12:22:
91:c7:f2:54:e9:10:6b:86:3e:2d:02:61:b5:d3:9b:f6:f0:8c:
44:b9:80:8c:77:aa:a5:44:86:9e:8d:df:f4:4c:74:cb:44:76:
09:65:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:34:30 2024 by rpki-client on console-ams.rpki-client.org