Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
File: yyVzFrhB13Pct5reio8-clnxEqs.cer (raw, json)
Hash identifier: bdOZkLVsLqv+9Y0LCzo7kCMPV+QqbQb+VFbH0FOprRY=
Subject key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5EC68508045E33F21040E20ABB1A0B76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 09:08:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.106.206.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c6:85:08:04:5e:33:f2:10:40:e2:0a:bb:1a:0b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 09:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:fb:c0:68:50:e7:93:bb:94:51:dc:16:aa:
03:f5:63:36:c9:fb:81:33:d8:54:36:07:26:67:96:
1c:43:70:fe:8a:f1:48:39:56:79:33:bb:df:e2:ca:
74:6a:df:69:1a:84:53:6d:98:02:a5:6d:fe:5b:61:
ac:75:d7:69:d0:72:e2:81:af:ca:0b:87:ed:92:3a:
d5:4a:30:17:07:37:bd:d3:e8:ac:e6:d8:85:35:0f:
bf:59:eb:bf:a8:de:8a:56:76:ec:b7:9f:2d:66:71:
5c:d7:8b:c2:28:59:ab:66:27:6c:21:09:ce:db:09:
a5:77:51:2d:66:62:d4:cc:ab:cc:79:5e:cb:b0:0e:
f7:4e:c8:59:c4:ba:30:0d:be:e7:34:ba:f0:78:49:
ff:db:76:99:0d:2a:eb:d7:a2:e1:a7:b4:ad:15:bf:
77:15:1e:18:fa:25:a0:11:c6:f9:a4:bb:90:02:c6:
a2:e0:15:96:e4:f5:53:d5:49:91:3a:2b:ca:1f:48:
b7:6b:86:35:43:d7:b6:c0:e7:3f:8d:13:74:2f:8c:
79:0e:73:cf:55:1d:8f:b5:5c:df:33:aa:ce:ff:c1:
ab:73:cb:d8:4f:70:25:e8:f2:55:fc:2c:0b:b4:ce:
d5:c3:2d:a5:18:61:71:8b:f8:9c:b4:78:8a:7b:2c:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4f:2a:00:31:be:b4:d2:42:cc:1e:17:d1:54:f2:22:2c:cf:
ea:74:a6:18:e6:47:09:b9:d7:d8:1c:98:38:24:a0:88:54:4d:
52:87:e6:a4:b8:7e:aa:6d:f7:7b:cf:99:eb:9c:f0:80:50:37:
5d:97:bf:cb:9f:e8:f5:e1:ed:fe:59:53:2f:aa:40:59:81:55:
9a:cf:57:1f:0e:ac:9f:f0:e4:fd:c0:3c:16:66:e0:d3:48:18:
8f:f2:3d:14:bc:d9:57:13:30:c4:63:b3:59:f4:e6:f3:35:a7:
30:00:21:1b:45:63:de:f0:ca:2c:27:de:21:18:1d:52:10:04:
12:38:97:b1:63:a1:ef:bc:fb:ec:04:d5:01:83:5b:f4:5d:7a:
ff:ef:2a:df:51:46:39:97:89:1c:f8:d7:b4:ed:a8:46:5d:fc:
f5:e1:9c:c1:24:c6:93:3a:3e:09:d7:a5:fd:e6:89:f6:a1:1a:
0f:cf:b0:53:81:e5:9c:5e:4e:1c:2c:af:3f:d1:48:64:44:a3:
ca:d7:a7:e6:12:62:40:cd:89:d0:98:69:0d:a7:72:d0:b9:d3:
f2:02:c9:1d:d8:34:47:41:5e:7a:8d:4c:61:01:1c:5d:96:39:
d4:c1:e0:2f:43:68:42:88:08:0a:e3:ef:60:f1:29:50:e9:a4:
ce:e8:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:43:10 2024 by rpki-client on console-ams.rpki-client.org