Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
File: ypO97sfEJpjfaskM3cbAGzp_LEk.cer (raw, json)
Hash identifier: 10jBwNo601F1QaflGpeddTKSC0WWJIVq8I04LL8pZQs=
Subject key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D7472564AE2F9F87965FC5A749A46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202944
IP: 185.1.71.0/24
IP: 2001:7f8:a2::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:74:72:56:4a:e2:f9:f8:79:65:fc:5a:74:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:22:1c:8c:54:2a:79:b7:69:68:83:c2:d8:
af:fd:c8:fa:4b:b1:a8:67:09:cc:25:48:af:13:f5:
ef:8b:be:59:e0:67:3b:d8:5a:a3:d1:b9:57:3f:5d:
0a:c6:df:a0:01:d9:c4:8f:8b:ba:60:c2:e9:3c:15:
e1:14:03:0c:89:09:6b:a9:df:1f:60:09:28:c5:3e:
13:c0:62:a5:f4:f2:bc:fb:e5:06:6c:3e:a2:38:d3:
7c:da:c7:d7:09:0e:43:4f:ba:1c:fe:9a:93:e1:1f:
14:12:3d:e7:bd:bb:88:ff:da:e3:ed:93:32:2d:d5:
fb:bd:4a:36:2f:81:8c:bf:06:ff:39:b7:1e:a8:b1:
6b:8f:d6:8a:bc:b7:c2:f3:53:76:d7:86:0b:f2:41:
0b:17:89:b3:cc:81:32:6e:ba:ae:5b:88:07:6c:6c:
8d:f1:c4:08:da:d5:5d:de:1c:d7:cd:ef:90:23:5e:
f4:58:b0:60:29:ad:fb:f8:d8:8d:03:58:6c:9e:c5:
af:72:97:e8:0a:63:e0:95:45:4c:07:98:3e:1b:e8:
01:0e:e1:57:84:b4:12:b5:91:e8:1b:ec:ae:25:f4:
56:bd:ea:38:16:3e:5b:d5:a2:ca:65:85:6a:92:e1:
f0:eb:26:f4:19:01:8d:65:ba:c8:22:28:26:1f:34:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.71.0/24
IPv6:
2001:7f8:a2::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202944
Signature Algorithm: sha256WithRSAEncryption
14:69:98:a8:19:6f:8a:68:ca:18:43:5f:50:a9:fb:5c:61:39:
d3:b1:b8:67:3c:78:ba:7a:2d:75:4d:55:5a:25:68:34:b2:e9:
56:0f:9b:6e:1d:db:20:f6:62:74:0d:e8:32:35:45:6b:3e:a9:
16:66:a2:9c:e2:ce:31:ec:39:84:1b:e5:70:1f:ca:b2:81:41:
43:fe:de:4c:01:5f:e8:b2:51:a3:6c:bc:fb:09:db:80:2a:fc:
cd:9e:76:53:aa:b4:02:5e:3d:ab:0d:19:24:8a:c9:b6:9c:1f:
7b:a7:bd:6b:a9:26:b1:bc:d0:d6:22:19:76:62:cc:1b:56:af:
b8:2d:9a:35:40:43:2b:0a:f2:9a:58:0e:73:02:81:9b:ee:d6:
b7:5b:7a:e2:a7:26:d1:76:0f:bc:a1:79:20:f2:47:ec:55:d3:
ff:3c:58:e5:c4:1a:41:29:d2:f5:06:82:af:f0:f5:dd:03:e7:
65:ab:87:d0:20:58:5b:c4:c2:a5:a4:de:58:ae:de:d6:e9:1f:
22:85:c9:64:0f:ee:54:6e:ac:7b:a2:01:c8:78:80:c4:ab:9f:
8c:dd:ac:ed:b1:8e:1b:ba:a3:36:d5:39:a8:b0:f2:a5:bc:e4:
1e:bb:64:1c:99:a2:d2:ed:c2:55:0b:a6:91:14:a3:c1:a3:aa:
a1:61:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:43:05 2024 by rpki-client on console-ams.rpki-client.org