Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer (raw, json)
Hash identifier: iZ4hfFbkhVI4L8v2AWbOpAVcUdmHHwW+G8uGRHLM/6Y=
Subject key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0A6CA6FCAEEB17DD781943DFB182
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.94.112.0/22
IP: 185.34.220.0/22
IP: 185.78.164.0/22
IP: 185.82.88.0/22
IP: 185.251.21.0/24
IP: 212.80.212.0/22
IP: 2a04:6280::/29
IP: 2a09:5800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0a:6c:a6:fc:ae:eb:17:dd:78:19:43:df:b1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:9c:12:37:5a:fd:64:70:a1:7e:7a:58:25:
fd:5d:36:c1:05:75:49:5e:ca:eb:3c:42:dc:1b:38:
e1:9c:72:58:4f:00:2a:26:f3:72:01:8a:a0:57:a1:
cd:b1:fe:98:e2:17:ce:93:74:0d:01:db:91:c5:ca:
c1:f0:ba:e3:62:71:6b:8e:74:0c:1f:45:6b:75:56:
4d:11:23:4e:f3:84:6a:a3:9a:72:c7:31:2d:a8:f8:
df:6d:6c:96:6c:fd:84:e7:c5:df:08:bb:cc:fc:41:
23:f7:6e:4c:03:5d:7b:2f:00:a1:57:12:aa:8a:92:
2e:12:60:74:09:48:af:20:7f:89:55:e6:8a:45:fa:
81:30:f4:11:fd:78:40:62:0e:94:c7:61:bc:1d:b2:
1f:d0:3f:07:97:90:d8:ea:ef:a1:5e:a0:e7:28:49:
1f:1f:d0:0d:2a:3a:13:e8:cf:c9:de:f4:60:a4:ec:
6b:9f:9d:6c:9c:c8:d4:52:b4:63:cf:0d:90:ef:ef:
31:1d:7b:1f:67:7e:41:18:11:5e:bf:5f:e1:c0:f6:
41:5e:9b:1b:23:71:76:6f:15:de:e3:85:7d:85:b7:
18:f6:37:61:be:0d:29:74:7c:f9:4a:30:47:06:93:
e9:9d:73:e9:32:74:76:d3:be:e1:89:21:26:09:79:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.112.0/22
185.34.220.0/22
185.78.164.0/22
185.82.88.0/22
185.251.21.0/24
212.80.212.0/22
IPv6:
2a04:6280::/29
2a09:5800::/29
Signature Algorithm: sha256WithRSAEncryption
65:16:e7:9b:09:b4:d5:d9:52:79:07:a1:6c:e6:df:b9:7f:5a:
81:a6:4c:95:f5:b1:db:06:c6:ca:bb:26:ca:9a:6f:9a:4d:a2:
55:22:ea:c2:4d:28:82:64:ec:44:96:87:86:c6:56:0f:96:cf:
b9:97:c4:91:0e:80:ce:dd:17:3c:18:44:a4:33:0f:a0:0b:07:
00:57:6e:50:04:b0:68:b7:1e:6a:a8:54:9e:8b:10:40:06:81:
f9:91:70:22:88:23:ac:84:40:91:19:19:0d:c6:39:11:7e:e3:
38:ed:cb:35:f2:1d:05:4e:5f:83:14:db:4a:0b:a1:4d:dc:20:
cd:6d:01:e7:72:0f:b6:0d:49:4a:a3:75:07:9c:74:bb:9b:04:
b4:c0:d8:83:77:1b:04:c5:25:80:88:d6:bc:b7:fc:7f:93:0c:
26:6c:13:5b:76:1c:0c:23:d7:6d:5f:fe:c1:94:de:70:37:5e:
e4:e6:ac:93:a7:53:44:33:43:63:04:10:5b:97:e5:17:66:54:
e6:f0:31:f1:c5:8a:13:99:9a:01:2d:f5:75:a7:3d:25:bc:2c:
b7:80:99:cb:38:af:79:29:d6:3b:1f:67:c5:8f:94:a5:33:6b:
56:9a:b3:90:70:a3:f9:d9:f1:dd:a6:df:39:c7:7e:4d:73:6d:
73:57:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:25:02 2024 by rpki-client on console-fra.rpki-client.org