Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
File: ylIg5T5PgcoljM_qGHKAKA9fYho.cer (raw, json)
Hash identifier: X2SbCtsQAq0J/WRE1aq1lqtBHotV/YTbAJNsXbmcSoU=
Subject key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87134DA60C344C7E2CD2E4A0594AE80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.24.0/22
IP: 2a02:78c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:34:da:60:c3:44:c7:e2:cd:2e:4a:05:94:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:61:5b:3a:ec:28:8a:e3:42:a8:a8:87:85:
8d:fe:27:3a:c3:af:68:43:84:13:51:e5:91:a9:80:
62:24:f7:ca:51:ca:d2:fa:cd:b3:5f:ef:55:68:67:
4a:2d:5a:4a:5f:9c:9c:22:d7:4f:21:ba:ea:d7:4e:
f8:66:3c:2c:7e:4f:de:26:74:54:ca:35:4b:05:89:
d7:1b:91:58:cc:ea:62:76:35:79:fc:d3:5d:3e:45:
3f:e1:e5:ca:1a:2b:2f:62:98:5b:86:60:be:63:b7:
d2:d1:1d:a3:f8:9a:97:02:4d:db:49:69:b4:2f:39:
d2:b1:06:76:6c:f2:e0:d0:39:8d:8c:d0:57:db:4d:
51:05:33:c9:84:a6:09:15:63:c6:70:66:69:3d:5b:
23:a4:ae:fe:d3:af:eb:79:d4:7e:71:85:83:a0:30:
ee:f3:b5:e4:ff:86:c7:54:93:d9:fc:5f:f5:63:af:
e1:ff:34:37:24:81:b2:6a:85:b9:6d:e2:61:bf:4c:
6f:42:e9:42:ad:b4:02:5b:c5:fb:bb:1a:0c:f9:4d:
16:85:82:68:b2:4a:79:76:f0:60:63:fb:2a:95:eb:
14:08:69:b9:76:5f:b0:38:fe:1d:39:7a:4f:40:f5:
90:58:6f:86:e7:c3:a3:18:67:c9:f5:bc:8d:98:a1:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.24.0/22
IPv6:
2a02:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:02:5b:af:20:31:41:c0:78:8e:d8:06:b0:42:30:45:56:cb:
75:54:88:f3:1b:2a:37:ce:dd:df:89:db:c4:f3:b8:4f:54:6a:
eb:28:70:b7:13:62:db:88:a0:74:49:47:22:ce:ee:76:a8:6b:
c8:5b:9d:dd:26:f1:20:60:24:b5:f7:6f:b6:0c:9f:40:09:4d:
06:7c:7a:88:be:e9:bc:06:80:4a:1e:e5:91:48:0b:c6:b5:d4:
fc:55:35:0c:13:44:dd:6b:be:ef:ca:91:bf:02:94:e0:d1:1a:
d5:34:7b:52:18:f5:83:33:c1:90:41:35:8b:5c:19:e0:1f:91:
04:3f:b2:07:10:c3:2d:80:cc:ee:22:af:dd:b7:8b:59:47:12:
7d:0f:62:94:d7:99:46:9b:9b:38:e8:fd:6a:2c:10:53:9f:2c:
85:21:72:d3:e0:0f:d4:ac:1d:4e:6f:41:eb:82:37:16:2c:54:
81:d0:ec:5b:03:7d:90:e3:1e:d2:0a:a8:85:d9:1a:02:61:51:
18:86:8b:7f:4e:bb:00:a5:5d:a1:df:d7:a4:81:59:29:e5:89:
5c:1a:46:9c:e3:e8:ff:ef:7e:c9:cd:bf:84:1d:02:b7:9d:60:
ea:d7:ab:84:fa:71:fb:02:4e:c4:77:7d:fc:9b:4a:d0:b7:f8:
ba:0c:55:e6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzIcTTaYMNEx+LNLkoFlK6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTUyMjBlNTNlNGY4MWNhMjU4Y2NmZWExODcyODAyODBmNWY2MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1BhWzrsKIrjQqioh4WN/ic6w69o
Q4QTUeWRqYBiJPfKUcrS+s2zX+9VaGdKLVpKX5ycItdPIbrq1074Zjwsfk/eJnRU
yjVLBYnXG5FYzOpidjV5/NNdPkU/4eXKGisvYphbhmC+Y7fS0R2j+JqXAk3bSWm0
LznSsQZ2bPLg0DmNjNBX201RBTPJhKYJFWPGcGZpPVsjpK7+06/redR+cYWDoDDu
87Xk/4bHVJPZ/F/1Y6/h/zQ3JIGyaoW5beJhv0xvQulCrbQCW8X7uxoM+U0WhYJo
skp5dvBgY/sqlesUCGm5dl+wOP4dOXpPQPWQWG+G58OjGGfJ9byNmKG+LQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMpSIOU+T4HKJYzP6hhygCgPX2IaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzQyNDk0
Ny0xYzZhLTQ4ZTktYjI4OS1mMjNjNWE1MzE4MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNDI0OTQ3
LTFjNmEtNDhlOS1iMjg5LWYyM2M1YTUzMTgyMy8xL3lsSWc1VDVQZ2NvbGpNX3FH
SEtBS0E5Zlloby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQUYMA0EAgACMAcDBQAqAnjAMA0GCSqGSIb3
DQEBCwUAA4IBAQCXAluvIDFBwHiO2AawQjBFVst1VIjzGyo3zt3fidvE87hPVGrr
KHC3E2LbiKB0SUcizu52qGvIW53dJvEgYCS192+2DJ9ACU0GfHqIvum8BoBKHuWR
SAvGtdT8VTUME0Tda77vypG/ApTg0RrVNHtSGPWDM8GQQTWLXBngH5EEP7IHEMMt
gMzuIq/dt4tZRxJ9D2KU15lGm5s46P1qLBBTnyyFIXLT4A/UrB1Ob0HrgjcWLFSB
0OxbA32Q4x7SCqiF2RoCYVEYhot/TrsApV2h39ekgVkp5YlcGkac4+j/737Jzb+E
HQK3nWDq16uE+nH7Ak7Ed338m0rQt/i6DFXm
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:28 2024 by rpki-client on console-ams.rpki-client.org