Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer (raw, json)
Hash identifier: tpfPGoar5/pjdalNhmsgqYsDGyxT4+oJ1m87SvXK13c=
Subject key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01930095FED17426105A92A573AEE7641CCC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Nov 2024 08:27:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.222.208.0/21
IP: 45.94.112.0/22
IP: 185.34.220.0/22
IP: 185.78.164.0/22
IP: 185.82.88.0/22
IP: 185.251.21.0/24
IP: 212.80.212.0/22
IP: 2a04:6280::/29
IP: 2a09:5800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:95:fe:d1:74:26:10:5a:92:a5:73:ae:e7:64:1c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 6 08:27:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:9c:12:37:5a:fd:64:70:a1:7e:7a:58:25:
fd:5d:36:c1:05:75:49:5e:ca:eb:3c:42:dc:1b:38:
e1:9c:72:58:4f:00:2a:26:f3:72:01:8a:a0:57:a1:
cd:b1:fe:98:e2:17:ce:93:74:0d:01:db:91:c5:ca:
c1:f0:ba:e3:62:71:6b:8e:74:0c:1f:45:6b:75:56:
4d:11:23:4e:f3:84:6a:a3:9a:72:c7:31:2d:a8:f8:
df:6d:6c:96:6c:fd:84:e7:c5:df:08:bb:cc:fc:41:
23:f7:6e:4c:03:5d:7b:2f:00:a1:57:12:aa:8a:92:
2e:12:60:74:09:48:af:20:7f:89:55:e6:8a:45:fa:
81:30:f4:11:fd:78:40:62:0e:94:c7:61:bc:1d:b2:
1f:d0:3f:07:97:90:d8:ea:ef:a1:5e:a0:e7:28:49:
1f:1f:d0:0d:2a:3a:13:e8:cf:c9:de:f4:60:a4:ec:
6b:9f:9d:6c:9c:c8:d4:52:b4:63:cf:0d:90:ef:ef:
31:1d:7b:1f:67:7e:41:18:11:5e:bf:5f:e1:c0:f6:
41:5e:9b:1b:23:71:76:6f:15:de:e3:85:7d:85:b7:
18:f6:37:61:be:0d:29:74:7c:f9:4a:30:47:06:93:
e9:9d:73:e9:32:74:76:d3:be:e1:89:21:26:09:79:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.208.0/21
45.94.112.0/22
185.34.220.0/22
185.78.164.0/22
185.82.88.0/22
185.251.21.0/24
212.80.212.0/22
IPv6:
2a04:6280::/29
2a09:5800::/29
Signature Algorithm: sha256WithRSAEncryption
14:b5:97:d0:62:3e:64:43:79:a9:9d:7f:85:69:04:1c:ae:8c:
05:cf:bf:c1:89:a6:04:34:bf:26:52:63:fb:14:46:77:94:5a:
e1:ca:58:fe:c6:de:0a:2a:49:99:9a:b8:38:da:67:6c:73:0c:
8e:a0:2e:75:c5:71:86:d7:ad:3e:af:4d:1a:fe:27:9d:f5:81:
c7:cd:13:d6:c0:2c:0a:da:f0:34:cc:7d:57:4e:d5:63:0e:c1:
e5:4a:76:cf:9c:c2:fa:f9:94:12:09:f4:5c:73:91:0e:35:ee:
3f:79:91:c7:5c:88:21:4b:93:dc:49:aa:60:6d:04:38:a8:cb:
5c:80:da:cb:e1:f0:f2:54:ed:d5:27:55:c8:6a:f6:a6:71:19:
cb:b4:3f:b6:f3:30:a4:4b:6f:0b:74:cd:9a:11:62:8f:e2:ec:
05:83:5d:38:58:09:9c:89:56:19:0d:36:9e:01:0f:af:9c:fb:
53:b9:9b:ec:f0:cb:5b:3a:21:59:fd:cb:9f:e3:9d:4a:49:1a:
8e:42:1c:60:06:b5:dd:51:72:ad:97:88:e3:5f:b6:9e:c5:a3:
f4:d9:ec:ba:06:1a:62:5f:61:98:37:45:2b:30:38:46:24:a6:
e8:2f:51:2a:fe:19:bd:a2:ea:fb:a9:0b:5f:3b:9c:ec:67:09:
30:f1:5a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:10:22 2024 by rpki-client on console-fra.rpki-client.org