Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.cer (raw, json)
Hash identifier: +sj/JbuAeDPN5lh3MfWirZf/7dZMEHw4qqNyMlodrB4=
Subject key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7271037534CDB7E72BF38610E932B94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60442
AS: 61148
IP: 31.169.73.0/24
IP: 46.28.233.0/24
IP: 185.11.248.0/22
IP: 185.33.60.0/24
IP: 185.33.62.0/24
IP: 2a02:ed40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:10:37:53:4c:db:7e:72:bf:38:61:0e:93:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:ce:91:17:89:79:58:c0:f3:6a:e4:af:07:
a1:78:07:f0:e7:2c:96:b7:f6:b3:a9:98:9e:d5:ff:
86:0a:44:62:27:ef:96:c9:6c:23:c9:cc:08:4f:62:
a3:9e:40:ab:54:d6:64:9b:a8:81:49:0d:be:99:32:
d2:63:bb:4e:de:77:d1:0c:46:fe:da:26:6c:ff:ac:
da:e2:36:c3:ef:03:41:03:c9:d8:a5:75:af:c6:47:
e2:c7:42:93:45:49:c6:5e:cb:7d:df:07:c5:12:03:
ca:14:0c:ca:87:a9:da:72:96:11:9f:54:7d:26:c4:
86:0a:05:07:59:20:ed:00:06:69:0a:d7:3f:d7:4d:
9c:88:36:29:12:77:d1:84:68:fd:cf:5b:fe:a0:23:
4c:ee:7c:0c:77:ef:8d:17:5a:f2:1e:d0:25:97:07:
57:ba:2c:e5:01:ed:db:53:e5:f9:f4:de:f6:e1:db:
1b:93:89:52:29:c3:50:d3:8a:7f:ad:0d:6f:f9:99:
ef:27:d1:96:7f:52:8d:9d:6b:b5:d9:07:16:23:89:
34:9e:5a:60:20:f1:92:6f:cc:71:ab:1f:70:c9:57:
d1:27:88:fc:3e:bc:34:58:26:9a:44:ed:62:05:42:
c8:df:6b:e9:80:1e:f4:dc:5c:46:4e:3c:39:5f:40:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.73.0/24
46.28.233.0/24
185.11.248.0/22
185.33.60.0/24
185.33.62.0/24
IPv6:
2a02:ed40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60442
61148
Signature Algorithm: sha256WithRSAEncryption
67:6e:05:4e:53:32:44:0d:9e:8c:1c:39:4e:d2:dc:ac:65:e3:
7c:67:4e:2f:38:fd:c9:06:61:67:1e:50:1b:08:af:fe:d3:75:
ec:80:40:e3:43:6f:ac:1a:67:9b:94:e4:ff:8f:7c:ae:9f:96:
20:ca:ba:e9:1d:86:3d:4e:ac:98:06:b4:58:30:4f:98:a9:f0:
a9:d5:c8:66:9e:38:6d:d0:01:e8:d3:d3:2d:3e:09:48:55:1c:
41:f9:77:56:b8:8d:87:d3:f0:96:d1:9a:04:c3:49:7d:c3:bc:
43:8f:de:ba:b6:9a:55:71:1c:cf:c1:55:4a:26:a0:bd:56:7c:
26:20:57:dd:71:d4:c7:d3:f9:ad:82:cd:f2:1c:48:75:c9:2a:
83:e5:52:4f:b0:bc:ac:16:6b:e4:85:e9:75:d9:25:12:bf:cd:
56:0e:52:ec:fd:3d:3d:d1:02:e3:64:fc:9e:46:ca:c6:24:0b:
26:16:c9:11:f6:c2:dd:11:a9:fa:25:36:42:72:71:01:b8:b3:
1b:0c:12:ce:09:f8:7e:7e:3f:9b:83:34:e3:b8:ab:ef:7b:63:
80:d8:31:82:c8:01:f0:d4:de:f3:9e:b1:4f:9f:8c:5f:49:6c:
05:fd:8d:bb:c9:2d:57:a9:8c:22:3d:57:77:83:c3:ae:b7:a0:
9f:2f:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:20:15 2024 by rpki-client on console-ams.rpki-client.org