Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
File: YmC2AROb4BNWnr-OG-taaUuch-w.cer (raw, json)
Hash identifier: egMvCKX4qaq91BEFVBoqFy6AWykGebetrx4Th6fBHXM=
Subject key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192AEE34DF886B85363741D1E176A7BF1FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Oct 2024 11:43:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.203.116.0/22
IP: 195.5.174.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:e3:4d:f8:86:b8:53:63:74:1d:1e:17:6a:7b:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 11:43:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:26:6c:83:9d:45:51:1b:48:35:cb:66:62:
a1:1a:ce:da:32:20:28:08:9a:48:77:0f:1e:28:13:
3e:82:bc:7f:57:75:1b:38:d2:50:78:01:05:94:ec:
e3:0a:72:35:77:d1:4d:9d:34:7a:72:ac:8a:f7:ae:
57:f7:ff:62:c4:96:8a:bd:64:94:11:27:59:8c:ab:
9b:f2:f9:ca:7f:f4:dd:4e:41:e9:42:d3:b1:af:1d:
63:40:ec:2b:05:52:d6:1b:47:d3:23:a0:5f:0d:5e:
cb:3c:8f:c8:5d:58:b1:de:5d:fa:c1:5e:cb:75:4e:
6a:d5:c9:24:1d:00:7b:49:ae:a4:7e:ce:d1:01:aa:
fe:35:36:9d:97:c5:32:4f:1b:09:93:ae:67:fe:39:
77:46:2b:78:80:3d:05:bb:29:3d:97:d5:99:af:15:
dd:f8:5d:5e:2b:13:7c:95:0d:bd:1f:1c:eb:02:09:
35:d1:00:49:a8:7a:57:3f:3c:04:a2:93:d5:c1:c7:
cd:a6:9f:23:73:94:58:46:dd:8e:ea:a3:bc:f7:75:
e2:c1:d0:5d:00:a9:91:9f:1e:33:95:5d:5c:26:77:
ce:fe:f1:42:bd:94:fe:45:64:f2:9c:a2:ac:8e:24:
84:3f:67:7d:27:1e:4e:6e:53:a5:bb:be:52:26:21:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.116.0/22
195.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cf:43:29:c1:89:fc:52:82:2d:f0:7a:fa:e2:be:ea:ea:ec:
52:55:e6:2b:3f:02:fa:88:e2:fd:e1:bf:b1:06:ed:f3:56:fc:
f7:bf:49:42:75:ab:91:3f:10:48:2d:5b:9f:23:e2:d0:62:3a:
71:47:bd:98:16:95:7a:84:7e:ee:94:e7:b2:5d:bd:00:7c:68:
59:a0:90:e0:d9:03:67:a2:71:de:9e:08:60:b1:47:be:bd:ad:
6b:b6:86:54:fb:1c:6c:4d:fb:e0:aa:95:49:73:a2:95:89:52:
8b:e6:62:f9:0d:ec:68:ac:6a:f0:46:00:d9:a2:80:e6:12:36:
0a:95:14:5d:8b:ea:8f:94:49:d7:94:e8:e5:37:8d:24:e8:c5:
c0:21:98:01:59:9c:91:d6:a2:8c:e0:9e:93:a2:ba:ed:89:0f:
93:ca:28:98:16:1e:47:7d:de:a2:2b:13:79:46:f8:ee:0e:84:
4d:03:fc:8b:d2:b3:42:ed:37:bf:86:8d:73:c6:86:78:f2:6a:
c8:a7:d0:a5:b3:ea:5a:f3:7e:44:80:f4:64:1d:ce:f9:e4:30:
b8:15:ad:d9:1b:42:b8:b6:3c:00:00:1a:f0:eb:96:d6:01:74:
85:24:38:56:31:06:57:86:21:97:73:2e:fa:7a:e8:df:47:fd:
07:2d:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:17:51 2024 by rpki-client on console-ams.rpki-client.org