Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
File: YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer (raw, json)
Hash identifier: ame4JMEZRg/lGKKnaf3t5scC1IRPHutzDKBBbA/4dpc=
Subject key identifier: 62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC795193F134627738F65DF6484F16A78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.18.92.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:19:3f:13:46:27:73:8f:65:df:64:84:f1:6a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:cc:bc:bd:2d:68:9d:ea:23:ea:2c:8d:06:
ee:3b:19:3e:a2:aa:8e:88:2e:3d:a8:38:36:28:34:
b9:28:bb:c2:78:df:15:9c:80:6a:b7:33:19:c7:af:
65:05:6c:60:47:01:33:52:81:c5:ca:ff:fa:9f:ee:
53:10:43:fb:28:f3:b6:6d:a5:9d:4c:20:0c:a0:ba:
bc:8a:f8:69:34:77:3e:4a:a5:83:33:91:6b:95:35:
ba:e7:a6:96:33:27:20:74:5d:a3:87:8b:59:17:9a:
80:68:8b:98:53:51:60:91:45:a1:7b:c8:e6:82:f6:
12:7c:a1:62:f6:e2:f8:51:6f:d6:8b:a6:1a:12:e5:
82:b8:d3:5b:ca:82:53:fd:14:c0:8b:fc:e3:9c:5c:
60:b4:32:7d:ee:ce:44:60:06:76:25:89:24:d0:2e:
d2:a2:4b:5d:0e:af:59:9e:ec:e6:f5:ac:ac:84:af:
bb:94:71:04:37:7d:5a:39:43:b2:78:91:26:d2:81:
fe:34:84:b5:54:1f:80:12:9e:5f:75:32:f0:89:db:
e2:d9:1a:71:d4:7c:38:f2:a9:4f:d8:20:6f:a1:e3:
c8:51:c5:92:92:5f:f4:d0:16:b5:ed:ba:69:a3:61:
ca:ca:ff:06:78:1a:c4:fd:cb:34:41:26:71:2d:81:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cb:19:73:92:13:eb:e3:b9:72:86:8b:88:15:45:50:ca:1a:
fa:ca:1f:aa:f0:bf:21:0b:60:a4:a5:c3:b7:1a:21:b1:8e:ae:
48:5b:a5:b2:1d:73:d1:2d:05:76:84:e4:04:78:f0:ee:c1:00:
84:3c:c1:17:79:f9:aa:b6:13:a6:97:37:ef:90:4c:00:fa:37:
1f:9e:cd:41:09:c4:c6:ae:25:11:11:a3:a5:87:48:c2:49:bd:
56:36:93:e0:0f:5b:c8:c8:e0:44:05:7b:25:a9:ff:a5:69:58:
45:1a:33:39:72:57:ff:71:9d:93:c1:0a:4c:49:97:4b:27:9d:
71:3b:d1:0f:df:4f:be:89:5c:b6:27:ca:b8:71:88:81:8f:7d:
83:6a:d3:55:7b:44:c1:db:0e:d1:dc:e0:8c:69:08:d1:0b:02:
1c:66:77:7b:1a:23:37:8d:c6:3e:58:09:e4:9f:68:db:a2:9f:
80:d7:df:68:6c:8a:14:fb:e4:d2:70:fa:d6:bb:31:d6:28:43:
10:45:92:43:d7:eb:fa:f0:df:d8:db:22:32:42:42:86:ef:65:
a4:ba:b9:76:46:32:f7:47:cb:7d:35:a3:85:1f:c8:fd:eb:a3:
0c:6c:fd:95:78:eb:16:7b:2e:f2:65:e9:15:cc:78:27:ac:1b:
05:43:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:04:47 2024 by rpki-client on console-ams.rpki-client.org