Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.cer (raw, json)
Hash identifier: AuBDNrWxpH5toe277rv/a3PVNazgZZZfk2B2fyHwzoI=
Subject key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E103A251B27D3C64D6DD5B9D4BCB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.153.112.0/20
IP: 185.74.120.0/22
IP: 2a00:d3a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:3a:25:1b:27:d3:c6:4d:6d:d5:b9:d4:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:c7:00:0e:66:9b:7e:06:3d:87:5e:6f:c9:
8c:db:49:10:0d:d5:1d:fa:87:14:db:11:38:d2:ec:
bd:39:db:79:68:99:e5:c4:77:3a:e7:4c:aa:20:8d:
4c:d5:60:d7:85:5e:c8:c7:65:98:b9:b1:0c:bf:5c:
5b:06:3d:43:cf:22:1e:6b:dd:25:c0:d5:a2:32:f0:
2a:1a:a7:17:44:3f:95:00:4a:45:07:7e:a1:51:d3:
57:28:69:66:ee:8d:ac:f5:07:86:d3:26:98:f2:ce:
4e:15:bd:73:14:10:ff:82:ed:37:ec:da:a0:68:b2:
08:f0:3f:84:fe:36:03:94:c2:59:61:65:72:97:a4:
b5:f6:a7:00:e7:a6:59:5c:c0:51:70:09:fa:db:11:
23:3e:a8:51:d7:09:06:a8:74:c0:cf:be:3b:ef:42:
89:f1:c5:4b:4d:1b:20:e2:e8:15:80:5d:50:49:ba:
57:8d:e9:8a:56:37:be:17:66:6d:6c:f4:6a:be:36:
c4:d7:07:9d:12:1b:11:97:1e:b8:29:5e:ac:37:6a:
87:7c:a3:15:f5:9e:7a:ae:f6:f8:fd:22:35:ce:62:
00:c8:97:6e:80:f9:8a:eb:26:29:3f:80:e1:57:cb:
0b:f2:53:16:6c:33:45:3b:19:e2:e4:e5:d4:b1:99:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.112.0/20
185.74.120.0/22
IPv6:
2a00:d3a0::/29
Signature Algorithm: sha256WithRSAEncryption
03:ae:6e:97:1a:c9:33:4c:29:18:09:fc:44:3d:bb:e9:23:c1:
e1:a2:93:b7:c6:ee:c7:2e:11:f1:98:f0:e3:5d:0d:21:68:c7:
f3:7e:2f:32:b7:9a:3b:23:23:f8:6c:54:b6:c9:62:39:aa:19:
e7:a5:b5:b1:98:c3:d1:8b:80:92:3a:f1:18:f1:55:f3:07:3b:
93:a2:b3:40:c3:09:0b:cf:4d:78:6f:25:e1:a5:18:3e:70:29:
b2:8c:49:15:9c:33:8e:e7:97:fe:b1:bc:86:40:6f:99:c5:25:
14:6b:54:ae:52:6b:71:3c:7b:b8:93:56:0b:4b:86:74:28:51:
d3:12:72:14:b7:42:d9:05:a7:74:9b:cc:c1:22:fa:2a:fd:f8:
21:50:93:13:c6:9e:19:50:a1:5d:da:22:cc:b4:31:e1:f1:57:
42:e9:8a:b5:69:13:48:58:a6:35:4a:48:5b:53:5c:03:07:bd:
10:47:19:0b:db:24:80:08:18:d7:e5:53:26:2d:68:3b:b7:bd:
e6:4c:1e:72:fc:68:a1:ad:77:c8:ee:59:d3:60:db:7e:24:2f:
ad:20:bc:6c:08:63:64:d6:6b:14:fe:1b:6d:19:ce:a8:e7:42:
e3:1c:30:46:3c:c5:a4:7e:00:c8:35:28:6f:8f:36:a7:42:d1:
6d:b9:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:53 2024 by rpki-client on console-fra.rpki-client.org