Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer (raw, json)
Hash identifier: ZcnpOj2497lbOeRC+nzj2dtvIzmhJbBMC5AcB1PS3Pk=
Subject key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34963DA355539E070DF485ABB9CDE59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60720
IP: 185.26.192.0/22
IP: 185.116.200.0/22
IP: 2a00:8d60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:63:da:35:55:39:e0:70:df:48:5a:bb:9c:de:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:de:bd:66:14:56:df:b8:1e:be:25:71:29:
2b:d1:8e:8d:aa:4e:18:12:5c:54:f5:2a:8b:9d:e1:
07:3e:7c:f6:c4:0a:09:10:00:3d:02:71:a0:57:37:
fd:17:ca:5d:7b:86:83:43:15:de:62:7b:dc:30:05:
49:7a:1d:17:eb:d4:92:1c:a0:3c:ac:30:4b:d0:dd:
d8:40:7b:85:09:d4:f0:a3:f4:4a:95:45:c7:38:ed:
0e:c3:2e:37:9c:3f:16:9c:86:b0:9d:25:cf:c0:eb:
0d:0a:12:80:0d:0f:5d:0a:96:c2:43:8f:fb:f6:25:
33:49:09:b7:b5:46:cc:9f:e0:f2:2a:7a:dc:da:73:
cb:d4:75:3d:c2:61:2c:1c:e3:da:57:c2:bf:e9:2a:
ed:ee:9b:9e:59:12:00:50:46:71:9f:bc:83:35:b2:
f0:f7:e0:98:78:54:cb:bd:5f:6d:8b:fc:18:ce:49:
ff:01:dc:df:b5:f1:67:93:3d:05:e6:f4:f7:81:e9:
81:bd:6c:76:2a:75:7e:ce:49:5a:3a:9a:1b:63:ee:
58:15:27:1d:21:77:2e:cf:ad:bf:38:26:c9:23:06:
59:f7:67:9a:e9:c9:50:12:f6:f0:24:d6:02:99:1d:
27:73:03:3b:b0:32:8d:d8:ec:ab:85:04:bd:6a:b3:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.192.0/22
185.116.200.0/22
IPv6:
2a00:8d60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60720
Signature Algorithm: sha256WithRSAEncryption
75:5c:75:7e:60:71:1a:ea:cc:c6:5d:a6:84:d2:5c:a4:64:20:
52:d3:de:5d:f8:29:bb:20:e6:ce:71:03:7d:b8:e1:e4:08:21:
59:a8:98:1e:6a:26:d9:c1:de:c4:e1:25:a8:13:5f:b6:6c:7d:
75:2d:6c:09:87:c3:0e:e9:11:db:41:f2:c3:bb:95:2e:7b:cd:
e9:17:03:e2:83:44:9c:47:6d:ec:7f:8f:8a:cd:7b:9c:7a:30:
0d:a8:0f:cf:a3:d7:59:62:0f:20:9c:10:8c:98:60:a7:28:71:
08:c2:06:c4:d4:2c:b7:c9:21:20:c4:55:f0:53:c6:81:57:be:
c2:35:c0:81:78:34:2c:94:bc:68:12:b8:82:36:b7:e6:a3:99:
47:9a:aa:a6:24:c0:a1:21:24:c2:44:5c:99:1a:be:c3:b9:76:
22:01:ee:e2:63:ce:84:f5:8c:a6:75:26:27:5a:1d:66:f0:d9:
dd:ed:b8:55:60:eb:b9:2e:bf:de:55:26:74:f0:86:ea:a0:6e:
9f:b0:55:58:78:80:47:97:86:f1:8e:0a:9c:80:b5:07:e7:4d:
81:d6:96:ed:70:87:2e:6f:e2:94:86:71:53:20:3e:6e:ca:f8:
51:ef:b3:cd:44:ff:1d:2a:88:e6:9a:69:86:67:89:59:3f:cd:
0f:a3:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:43:09 2024 by rpki-client on console-ams.rpki-client.org