Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
File: YWAUEB_7zmdROc1MAroAY0rYbgI.cer (raw, json)
Hash identifier: JIdK42ukW/ZAvKpThGVZ0mCHq2eyck/iOy9b59j1iA4=
Subject key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B63578C58DD342B73356836971136
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:17c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:63:57:8c:58:dd:34:2b:73:35:68:36:97:11:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=616014101ffbce675139cd4c02ba00634ad86e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:24:20:b6:3a:72:6c:25:59:58:7a:5d:39:
a5:d0:ec:15:fa:22:79:61:dd:1b:00:06:c0:0e:31:
48:dc:f8:52:77:40:c6:eb:07:40:db:66:b2:e0:35:
5a:d9:52:f8:65:06:5c:a3:e9:f5:a7:0e:82:12:6d:
3d:2e:42:9e:db:d6:9d:f2:67:28:74:4c:f8:71:e9:
67:c3:ae:8b:6b:1c:fa:8c:2b:96:fa:ec:a4:c0:f4:
5d:c5:53:40:04:e4:64:43:02:6d:0e:93:ba:03:2d:
6d:f8:f8:3c:2c:85:ed:de:07:3f:ce:b2:49:2b:45:
65:67:ef:75:8c:91:06:a9:d7:18:80:dd:e2:22:ae:
e3:b8:34:96:f1:73:b5:6a:5e:7d:b9:a0:17:66:f2:
ab:6a:12:54:a4:a9:4d:55:a4:74:49:f9:fc:03:8e:
d1:dd:83:c4:11:e9:6c:6a:e7:7f:fb:95:86:80:05:
0c:b2:4d:8d:f1:d3:8a:fa:4c:db:dc:18:1d:b6:5e:
53:c4:97:01:bb:c2:8f:2e:82:96:d2:a0:60:1c:07:
9a:9b:6a:b3:61:f0:d5:24:08:6b:9f:08:d9:69:05:
c1:aa:df:79:28:9e:90:77:fc:cb:3e:cb:83:bf:6f:
ac:13:10:ae:c4:f6:18:72:e7:f4:d6:2f:8c:92:83:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17c0::/48
Signature Algorithm: sha256WithRSAEncryption
74:9e:d7:e7:3c:13:75:da:a5:82:c1:3d:b3:d3:1c:4a:04:33:
c3:2c:49:7a:06:14:0e:d5:4c:62:86:c6:5e:70:e7:15:80:cd:
61:f9:0b:a0:b3:33:ea:9a:bc:d8:dc:be:90:cd:6f:13:50:09:
74:e1:44:6f:8a:0b:ef:2b:4a:08:8f:50:2f:4a:c9:63:4d:b3:
8c:14:fc:bc:9b:e6:be:e5:08:be:07:b8:eb:ea:7c:c2:ce:d2:
fc:97:8c:2b:25:37:e0:22:36:bf:99:6b:50:72:69:f7:07:0f:
d1:12:4b:e7:06:73:56:af:9f:47:c2:fb:de:ba:78:ae:98:db:
30:69:47:72:85:d7:3a:de:e1:86:6f:2d:02:4f:84:00:52:2f:
07:d7:81:34:d5:06:70:37:a6:a6:cb:31:ba:58:fd:d0:ee:7b:
d6:49:e8:b6:1a:d4:53:9d:a6:6e:a1:44:2f:08:47:6c:c0:e8:
75:2a:fc:21:83:3b:fd:56:fe:5f:54:42:62:19:3c:67:7c:10:
01:b3:c4:11:34:1d:d0:24:5f:c5:7d:32:ed:7e:c0:2a:05:4d:
81:aa:a0:94:e9:bd:af:85:a6:00:fc:75:26:e2:8e:d2:54:d9:
dd:6c:44:24:13:e3:1f:83:ca:79:10:2e:25:fa:91:9e:5d:cf:
48:6a:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:54:37 2024 by rpki-client on console-ams.rpki-client.org