Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.cer (raw, json)
Hash identifier: TKkwTlsGrjPRrteEYWRs02Pw7LpdQtakjn3HgjBXA1Q=
Subject key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3494FF3A6118FB989F8901B2B5018DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203082
IP: 185.251.244.0/22
IP: 2a0c:6cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4f:f3:a6:11:8f:b9:89:f8:90:1b:2b:50:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:07:1f:47:fd:ec:ee:70:82:b1:df:71:a0:
5a:b4:49:5a:34:83:69:e8:59:32:89:49:87:83:f3:
a4:b2:51:db:83:e6:d6:e7:de:d1:c1:9b:ea:c3:cb:
a8:86:5d:c4:1c:c9:31:9c:e0:4e:28:ef:66:be:91:
03:f0:45:f4:94:14:31:f6:df:09:1e:15:7b:c4:4b:
9b:00:77:d5:8a:29:c0:2b:2e:d1:24:94:17:5f:ea:
41:2b:89:c7:1b:d7:04:af:31:c2:82:17:b7:86:67:
2d:4b:c1:06:75:79:c2:1d:b0:fd:81:46:4d:7f:4c:
bd:4f:62:01:d0:f1:82:ce:79:8b:84:67:a1:c9:3d:
16:f5:2a:54:2a:59:c8:33:be:a5:37:67:d9:75:a1:
73:fd:36:45:46:d7:20:9c:67:cb:e5:13:2f:d0:0b:
80:85:54:02:de:9e:19:43:46:3f:79:99:2c:42:d8:
54:13:cd:84:55:71:d5:29:f7:b4:f9:4a:2d:be:34:
7a:ef:a4:f4:c3:e0:62:c5:a1:bd:a2:ff:4f:72:36:
d7:e1:b3:ee:02:2d:52:58:03:b5:66:86:61:f0:e7:
bb:7e:62:de:4d:00:7e:7f:53:4c:e4:25:c7:1a:ed:
3e:84:10:16:53:52:3a:48:ca:6f:5c:6d:a3:3b:9b:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.244.0/22
IPv6:
2a0c:6cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203082
Signature Algorithm: sha256WithRSAEncryption
0b:2a:16:cb:18:b0:22:50:4a:d8:a6:45:01:08:53:ed:0f:e2:
bc:c4:e4:6c:c2:2a:28:14:61:f3:14:bc:d8:86:0d:b3:20:72:
cf:85:08:76:e6:3c:e9:1b:4d:2b:92:08:8c:6a:6c:d1:b7:53:
24:dc:8c:b4:07:b3:37:23:dc:41:b1:03:0b:f8:24:d7:ff:6a:
b9:fc:55:33:ed:bc:83:b7:50:95:77:d1:54:2f:51:27:fa:bb:
28:52:7a:4f:df:a2:3f:8e:f7:d4:e3:84:74:20:8b:81:18:d3:
d6:f6:b6:69:03:8a:c5:43:8f:9d:0e:1e:6f:55:2c:1c:89:0c:
87:27:01:6f:f8:04:a4:b6:fd:26:4b:75:52:95:a4:ad:bf:a3:
1b:a5:03:7c:d7:5a:67:2a:2b:e5:b3:b2:9d:d8:86:f1:c0:81:
29:53:0b:be:f7:e3:d2:42:e0:f8:f1:d0:82:93:08:5a:ac:55:
93:22:b8:8f:da:8e:70:81:2d:b6:b2:75:8a:4c:ea:82:83:cb:
36:b6:be:03:0e:48:0d:de:a8:e3:1f:b8:65:ff:e6:fb:69:d1:
8a:ed:f3:b0:8f:4a:04:51:e6:35:89:99:12:47:26:2e:ef:c6:
52:04:f0:50:b5:26:23:c2:76:e5:e9:4f:f1:7f:23:d6:56:af:
7b:72:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:37 2024 by rpki-client on console-ams.rpki-client.org