Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
File: yvF4APGUOvHFFChMw754Dpwh3Xg.cer (raw, json)
Hash identifier: YBFQuWWX+N5hVa/pUP6LJyVCGwB7fUSw/en93a4L1Hw=
Subject key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34909B4DD280FD89140839D849134E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39658
IP: 185.178.124.0/22
IP: 194.50.107.0/24
IP: 2a01:9080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:09:b4:dd:28:0f:d8:91:40:83:9d:84:91:34:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:d0:27:72:b9:04:f5:15:77:c5:00:48:60:
d5:d0:43:d5:1a:de:89:7e:17:05:6f:df:af:8b:01:
48:11:83:5c:ce:84:e0:82:12:f4:f6:e3:29:c0:b0:
66:d0:f4:6e:72:57:51:9f:9a:a3:92:c5:6a:f5:ea:
8e:74:8e:c0:da:45:33:c4:24:19:8d:4e:78:0a:c6:
27:f8:82:31:63:23:4b:1f:3e:05:f7:d6:d4:de:f8:
79:b5:bf:ae:e5:29:52:14:6d:d9:a4:b6:2b:b6:cc:
96:e0:2e:3f:08:58:9d:25:11:4d:81:25:fe:c5:16:
3f:16:7f:07:60:5f:cd:5c:8f:95:0d:ca:42:c6:ba:
8f:4c:54:17:b9:20:d4:47:98:02:48:f2:84:59:ed:
8b:57:9d:3a:57:8b:e3:0e:f4:b3:e5:74:39:37:0f:
a6:c3:4f:05:61:af:ce:12:82:21:4e:b2:08:d5:17:
8d:ad:b4:01:0d:d0:95:a3:c9:c2:71:5d:34:8f:40:
f1:35:20:ff:c1:43:b4:75:14:81:0c:82:12:15:7b:
47:51:19:c3:cd:73:17:9f:79:4f:8f:ad:63:81:41:
91:fc:0c:4c:f7:6d:e6:7e:20:45:38:4a:28:27:a6:
f4:6c:28:a2:64:fb:e9:4a:82:40:8e:f2:21:01:6d:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.124.0/22
194.50.107.0/24
IPv6:
2a01:9080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39658
Signature Algorithm: sha256WithRSAEncryption
a5:00:20:ec:c6:ce:c4:d6:c7:3b:c8:c6:bf:1d:28:27:27:d6:
5a:e4:de:cc:13:fe:c5:aa:44:c5:a2:aa:4c:16:65:62:64:5b:
88:9c:c7:4f:26:5d:c6:d1:53:9d:ae:c4:0d:61:9a:32:c0:14:
f9:8b:43:e2:05:2c:3f:6f:9b:19:b4:f5:4f:ba:ae:af:f7:d4:
d7:42:85:5b:68:71:4f:b4:8f:b6:18:bf:54:c2:5e:ac:68:b1:
9b:4e:9a:81:88:aa:e2:03:40:f6:b2:06:8a:6b:34:43:21:45:
76:67:e0:e9:9d:75:0b:8f:9d:8b:1a:17:41:c1:cd:11:29:6e:
3b:79:8f:ee:d5:cb:da:0d:36:13:35:95:a2:a1:a0:33:1e:2d:
b2:ab:59:22:9b:4c:c8:3f:02:3e:b4:1b:5c:56:71:11:07:35:
96:35:cb:2b:69:86:3b:df:44:76:ac:f2:c2:1f:b4:97:57:a5:
1d:90:6f:c9:57:fc:36:01:41:c3:fd:21:f1:a9:5c:92:1c:f8:
3c:1a:b0:da:1d:d1:3b:bb:d7:b9:0e:c7:7c:eb:af:70:2b:0b:
07:04:f1:65:db:ab:44:13:f0:34:71:67:7e:8d:06:e7:f5:80:
f2:02:7d:39:e4:c1:0c:ee:73:14:49:f7:b2:4d:ed:53:35:02:
e3:7f:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:27:25 2024 by rpki-client on console-fra.rpki-client.org