Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
File: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer (raw, json)
Hash identifier: ZZ8Q62XrpOBj7OXpvBT3TRCRjFvDYdsnFl6GFuo/NHw=
Subject key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492FC9B7727B23B74E235A1E7393231
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.60.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fc:9b:77:27:b2:3b:74:e2:35:a1:e7:39:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:a5:83:89:94:45:1c:58:a0:ac:06:1e:0e:
5c:81:03:0e:36:02:60:40:1d:be:fb:f6:9a:f1:da:
40:66:25:34:79:6d:bc:45:8b:15:19:f9:c3:fa:98:
85:96:3f:79:f8:25:5b:c7:cf:91:bd:97:49:54:0c:
7a:ec:d7:b3:a3:27:9d:08:1b:11:f6:17:c0:66:5e:
eb:fa:a4:d1:f4:ff:f8:f4:4a:61:2c:27:6b:9c:b3:
3b:49:05:a6:a2:70:db:7e:c1:82:83:94:6e:f7:98:
81:3d:de:07:2e:83:5d:7c:ee:e2:a9:0c:08:77:d3:
bb:a9:55:52:26:99:71:93:4d:38:3b:0e:77:2e:c5:
fc:0c:dc:ec:1c:2d:60:4f:6e:bd:e1:68:22:f5:1e:
65:ab:03:57:da:b6:56:7f:83:38:fb:24:4a:f3:9e:
57:e4:90:c6:10:db:f1:61:1e:95:8b:bf:5a:9c:ff:
9b:0e:3a:52:1c:26:70:b3:c3:59:6e:ec:b8:c0:c5:
81:2f:82:3b:98:94:b0:9a:f0:55:41:e5:56:6f:7e:
47:58:c9:fa:43:ad:c4:f9:48:2a:34:25:d6:8f:39:
01:fe:ee:08:6c:8f:4b:ad:71:95:d9:f5:b1:91:bb:
46:89:2e:6c:64:4a:f4:d5:15:67:75:93:6a:01:5e:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:cc:46:d6:5a:31:81:d2:a9:07:69:90:3d:5f:e7:d5:8c:f2:
dd:50:33:48:37:3f:40:6c:db:f0:02:21:00:e0:cb:81:cb:79:
af:45:5c:b8:5f:75:04:24:ea:73:bf:3b:66:85:f7:cc:ad:26:
1f:a0:6b:b1:26:a4:9f:33:78:70:92:43:15:48:df:32:cb:b5:
1a:4c:94:b2:92:85:92:83:61:48:6d:b9:b6:04:fe:55:17:21:
90:7d:df:9e:e7:81:06:64:96:76:6d:4f:d6:5a:b6:05:59:3d:
35:16:17:a8:62:23:62:87:e7:0c:8c:02:f8:a5:f6:58:0d:84:
6b:4a:ea:8e:6a:3b:88:4c:28:2c:29:fb:30:4a:75:5b:f4:67:
56:60:f4:07:ac:3b:c2:64:89:2b:18:e1:77:f6:e4:43:9a:b8:
e8:a8:2a:2d:39:82:79:7a:2f:7c:1c:b7:96:44:29:87:94:45:
20:b8:c7:0a:08:86:92:d8:5a:85:37:7c:05:c9:11:1c:b8:98:
3f:1a:c6:ab:81:19:c8:ce:ce:fe:da:14:93:f6:fe:a3:f4:dc:
0f:b2:51:20:fc:c7:a2:6e:fe:f7:b7:c7:7a:cc:5f:9d:a2:2e:
47:c1:3e:94:cf:23:f9:61:bb:09:2d:31:91:21:48:55:09:be:
22:a3:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:10:40 2024 by rpki-client on console-fra.rpki-client.org