Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.cer (raw, json)
Hash identifier: 0vai5GfLtiGxMobhUV12yYWBqH5vIgJA0lkG1cwRIQ8=
Subject key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7955985CB14A766762B670083A62A04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204529
IP: 185.114.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:59:85:cb:14:a7:66:76:2b:67:00:83:a6:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:e6:8a:83:cd:3a:f3:ae:0b:25:24:4c:a1:
08:4f:18:ab:1d:71:22:ef:1e:10:44:00:53:21:de:
a0:60:ee:d5:13:6d:6a:d9:d3:44:b9:98:ca:48:38:
e6:98:15:84:27:1a:f2:b4:05:ce:cf:f2:73:84:f1:
5f:a0:12:d0:84:8b:05:32:77:89:04:58:2c:bc:dd:
99:65:20:bd:7b:58:10:62:98:ad:21:52:03:af:02:
6a:f2:66:9d:a2:e3:22:cf:9d:e5:f5:dc:92:90:a8:
0e:a2:84:94:5c:58:bc:18:d9:a6:81:31:92:ae:b5:
9c:eb:61:f8:b3:57:3e:77:9b:b8:4f:5e:78:e2:85:
24:36:e7:50:6b:3f:e3:14:42:1e:f7:de:c4:76:23:
dd:09:5e:b2:cf:c9:57:8b:66:56:c8:20:3b:37:ce:
a8:c5:46:d2:f7:26:cc:9a:46:c5:bc:31:55:32:59:
9d:b9:f9:93:a7:28:7f:15:fe:75:2f:92:06:20:e0:
20:28:ea:45:e1:1c:59:73:20:1e:57:e2:ea:7f:18:
dd:12:0a:e1:ec:bd:23:4b:d9:d6:5b:dc:f2:fc:c8:
d8:86:c3:db:9d:16:0a:23:cb:e1:74:35:98:e3:33:
e4:72:8e:ee:5c:00:8a:d4:df:5e:60:5b:de:bd:b3:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.216.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204529
Signature Algorithm: sha256WithRSAEncryption
70:99:cc:19:41:31:49:b9:0a:8e:97:3a:f0:0c:2a:0a:06:a6:
a6:3c:62:f6:ca:0d:b6:d0:eb:2b:d9:c5:f6:27:8e:75:62:6a:
73:f1:09:da:c0:9f:3b:91:b7:7b:42:ed:b4:1c:b5:6a:25:73:
8d:b5:5c:a9:a4:eb:1e:3c:de:4e:6a:f4:a1:56:f8:ae:3f:f4:
7f:16:e5:d1:4a:fa:74:84:a3:fe:25:d3:b1:35:1d:20:75:2d:
2f:5a:64:a2:b7:a1:bb:6f:ec:21:6f:49:93:b1:e7:06:84:d8:
10:03:7c:61:51:73:f3:46:04:ae:ea:a5:05:e8:3f:44:ca:28:
04:90:6a:cc:d8:1e:92:98:0a:a2:cf:e5:b1:2e:a3:3d:da:1b:
b1:4f:6b:d5:8e:2e:18:f2:65:d0:c2:56:96:f2:bf:72:0e:d4:
d3:cf:11:49:c9:ae:42:34:50:3b:db:6c:2b:d2:93:56:7e:38:
55:e9:21:c7:04:cb:ab:54:d0:ff:b7:60:ce:12:0a:94:92:79:
6d:8d:95:4c:a7:4b:4d:ba:75:51:19:e2:d5:da:f6:f8:4e:51:
14:1a:81:44:f0:cb:13:f9:9e:a8:43:27:ea:d6:32:63:d7:62:
fb:12:ca:17:af:ee:03:2c:59:85:5d:ea:34:81:e3:c9:c7:2a:
d5:17:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:27 2024 by rpki-client on console-ams.rpki-client.org