Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.cer (raw, json)
Hash identifier: 3/0VXUC5dHzAFbYnfyaer3y4ui5fvGa9/IT0FpzhMjY=
Subject key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793E1FB859D7AC92A7ED701B8F51B41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.189.60.0/22
IP: 2a0b:d680::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e1:fb:85:9d:7a:c9:2a:7e:d7:01:b8:f5:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f58df2c469c978895f8458024c506e801c8fb21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:ff:0c:d4:2f:35:07:a2:93:de:f9:a9:20:
10:ec:c4:32:a9:e4:fb:52:e8:9a:4b:59:9f:52:52:
cc:7e:7f:58:a4:a1:e7:27:32:73:b6:53:e0:3a:dd:
1b:a9:79:05:11:73:8c:42:ab:85:19:84:95:23:69:
2b:c7:3d:1a:c0:de:00:8c:9b:95:96:06:31:eb:11:
67:28:19:70:cb:ef:19:3a:36:40:42:62:91:7f:83:
a4:dc:9b:9c:d1:51:c5:50:8a:f5:78:73:77:41:29:
2d:7e:c1:19:38:3c:71:bf:6f:fa:6d:09:28:77:22:
13:62:d9:cc:89:46:e7:0e:17:d7:22:28:bb:97:72:
39:bc:af:29:73:59:3d:54:84:47:1c:06:27:2f:35:
89:11:40:a7:98:41:9c:77:8a:cf:c7:6e:d8:f6:e7:
37:9d:1f:9d:9f:e6:8a:b3:5c:82:a8:2f:52:ec:e1:
0f:8e:e3:a5:02:6d:27:ee:0b:eb:68:e0:ca:3b:a5:
39:09:36:82:14:fd:d8:ce:e7:84:f9:ba:46:19:a5:
eb:1f:55:02:af:2d:27:f5:0a:f2:ac:a2:04:e5:c8:
73:c7:c8:f9:fa:34:0e:09:a0:6d:c0:7a:20:3e:40:
3b:9a:21:5a:6c:8d:b3:8b:2d:fb:1f:23:83:63:21:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.60.0/22
IPv6:
2a0b:d680::/32
Signature Algorithm: sha256WithRSAEncryption
88:86:24:67:3c:97:01:5d:e0:14:13:70:ef:05:c3:f1:a4:e4:
15:96:5a:f9:04:34:5b:e9:11:26:a6:9b:3b:ca:10:96:3c:f1:
99:9f:0f:aa:20:4c:5a:5a:b9:86:99:03:0d:7d:ce:33:65:81:
52:f2:8c:5f:88:da:32:28:f5:ca:60:97:44:96:bd:ad:36:2a:
2f:dc:65:18:d8:55:96:eb:d0:f0:60:7c:f4:47:5f:f1:51:7d:
ca:f6:ea:73:9d:36:3c:ea:d1:8a:45:ea:c3:63:1c:2b:33:06:
98:d8:5c:73:17:1f:5e:38:9a:e3:12:e6:c6:58:17:57:5e:49:
ec:15:cd:a6:4a:39:ad:86:23:6e:00:58:cc:68:d6:8c:e4:67:
00:6f:aa:4c:88:88:2f:ad:39:ec:c0:89:e8:fa:e0:3b:2e:fc:
38:45:bf:3b:46:d7:8d:7d:e7:11:4e:88:6a:89:8d:bb:5e:67:
83:ae:c4:ff:89:ab:79:8f:df:1d:99:48:51:25:3e:6f:2f:81:
43:2c:6e:88:33:52:ca:85:8e:db:20:d8:89:8c:8c:b7:7a:87:
43:71:80:37:bc:2d:7e:4b:71:ae:1a:29:6a:0d:55:30:9b:9d:
2c:65:f8:4f:11:3b:c7:2c:18:ea:72:aa:db:5d:ae:3c:ca:9c:
ff:83:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:01:03 2024 by rpki-client on console-fra.rpki-client.org