Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.cer (raw, json)
Hash identifier: vrE5X2fyH/MIOcRdqekHdw8or8s1Ny/Ly15x0uDUFbY=
Subject key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E07DCBEC2890173D95372EA2FC819
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.93.192.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:dc:be:c2:89:01:73:d9:53:72:ea:2f:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:d8:f8:1d:c5:56:cd:ed:39:90:ca:d1:eb:
64:cd:e2:78:0e:59:b4:28:60:87:a7:e9:8c:eb:04:
7d:b0:8a:35:13:cc:ae:77:9c:fb:b5:5a:2d:29:52:
e9:18:02:d7:69:73:d9:87:f9:ba:72:11:5f:7b:34:
dc:65:6f:91:ed:30:ad:97:fb:bd:be:64:24:7f:89:
ff:08:21:a3:66:35:d8:51:26:69:f7:bf:33:a7:de:
bc:ab:f9:57:14:6b:59:90:b1:0f:14:56:c6:c7:95:
2b:5a:96:57:c2:b8:81:e7:96:ba:04:fc:61:4b:51:
6b:ef:69:ba:18:45:84:67:99:4f:f2:d4:a1:96:69:
42:2e:eb:f2:4e:f7:00:07:95:d0:14:55:6b:cf:83:
36:07:32:8e:28:f3:fa:1e:20:00:06:0e:8f:2a:ea:
2f:fb:9f:ab:aa:77:fd:de:af:6c:bf:da:58:9b:2a:
cb:f7:3a:e4:c7:76:17:a5:e8:55:e0:2f:f2:80:09:
09:83:ab:ed:cd:3d:9a:e2:70:4c:c1:49:94:cc:0c:
b5:a2:18:d4:f4:c1:83:09:fa:e8:d7:84:be:91:d1:
7f:5f:9b:0a:8b:5c:48:d8:94:26:3b:06:08:f9:c4:
be:ea:9e:6b:38:2c:b2:22:b7:92:34:09:2e:42:9e:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/20
Signature Algorithm: sha256WithRSAEncryption
67:d4:ca:7b:d7:53:11:74:80:6f:cf:85:6e:51:ad:b0:89:fe:
ba:06:de:f3:3f:bf:1b:01:40:ff:97:0b:ad:73:18:82:8d:69:
cd:14:9f:36:20:e4:de:e7:c1:b4:b6:66:9f:6e:84:ef:78:cd:
00:5b:c4:ad:88:de:bc:14:01:32:52:fc:cb:89:36:40:4a:86:
18:48:40:23:07:9c:45:3b:81:af:69:61:e8:00:76:45:09:36:
d5:76:7d:82:cb:19:b7:67:a4:ad:ca:ed:cc:45:99:3b:6f:d6:
83:ca:7d:be:0a:08:8b:03:66:92:dd:e3:cf:ba:af:8c:16:9b:
4f:6a:0a:97:8d:12:e4:b7:a4:0d:57:6b:32:a2:44:46:ba:76:
ed:ee:77:c7:87:13:e5:4a:f8:b0:3a:8d:8c:98:45:2f:65:01:
f8:d9:2c:7d:32:48:d3:21:d1:c5:21:9f:2f:31:54:9c:e4:18:
ff:be:3a:8f:15:cc:31:88:d2:4c:7d:e2:05:e0:1d:75:31:45:
72:96:49:1c:7e:f8:c0:b8:bd:62:9d:66:d5:9d:86:98:ea:e9:
11:57:9c:f2:e7:d6:6f:af:94:ad:ba:50:b8:1b:20:14:c2:19:
71:2e:35:33:94:7e:98:65:b9:42:ea:2e:36:16:21:f1:31:47:
85:53:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:20:18 2024 by rpki-client on console-ams.rpki-client.org