Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
File: YoVOil7h3sifJbKnhZAj_7Ejufg.cer (raw, json)
Hash identifier: vOrOLC/EGgw1tyAL9/kowyl+sLW2JYPwgFbQdL6FfII=
Subject key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D9E70E65CEDB4CBD2F859555451A817F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Feb 2024 17:50:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.65.168.0/22
IP: 194.33.98.0/23
IP: 195.12.40.0/22
IP: 195.43.56.0/22
IP: 195.90.112.0/23
IP: 2a05:80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:70:e6:5c:ed:b4:cb:d2:f8:59:55:54:51:a8:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 17:50:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:4a:56:d2:03:93:39:23:69:cf:17:37:ed:
fe:8a:96:3e:f3:fe:db:52:ac:2a:2b:93:04:eb:1c:
0c:ba:a3:0c:e8:7b:d2:00:57:69:46:df:24:5e:ab:
3b:8e:24:5b:83:82:3a:e5:8f:04:ea:82:ea:2c:9e:
f2:02:61:3f:59:3c:bb:15:2e:6c:9b:e3:e5:03:c7:
ed:ad:f2:d3:ca:07:1e:ec:25:5c:7e:bc:ab:c1:44:
c6:39:e2:ec:93:00:38:f6:33:20:d3:c3:13:79:06:
4e:03:d9:2d:d4:dc:99:2c:12:ef:f7:87:85:6b:68:
6b:8b:92:2d:0a:5f:c4:63:94:93:8d:3e:45:3e:06:
86:ae:f2:cb:92:86:90:52:86:03:56:f9:60:2d:ad:
98:b3:88:27:40:6f:77:03:e1:80:fd:61:17:cc:6f:
08:49:79:2c:e9:55:02:61:a0:d4:d2:08:40:92:62:
61:03:a6:81:0c:0c:59:01:a0:31:f1:4b:90:67:60:
f1:ad:35:b2:7c:c8:a5:60:58:01:46:de:15:77:8e:
d1:b4:8d:26:6c:5a:4a:19:da:84:5e:cd:08:5c:4e:
de:25:14:45:ba:6a:86:2e:74:fb:7d:c6:57:c3:cf:
b1:ff:5b:17:f5:fd:fd:ce:11:5a:9b:17:00:06:5e:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.168.0/22
194.33.98.0/23
195.12.40.0/22
195.43.56.0/22
195.90.112.0/23
IPv6:
2a05:80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:3d:cd:91:0e:5b:9c:8f:89:58:8c:e7:01:5b:87:3c:9b:06:
cd:97:bd:cb:52:19:01:dc:5f:cd:50:0d:ae:84:f8:78:af:ff:
8f:b2:3e:bd:25:15:ab:af:82:72:3b:bb:21:a7:b2:24:b5:50:
7d:5a:95:bc:22:d3:7b:c1:a0:6a:50:9b:13:e3:f8:15:d8:50:
bd:a5:40:f3:2b:e7:07:c3:3a:e8:78:f8:5c:44:2d:7f:0c:1f:
6c:fd:50:91:3b:32:08:ad:36:8a:91:99:6d:94:55:a7:9d:a3:
00:f5:0b:cf:2f:6f:ea:c2:15:e2:99:f9:1f:f6:ac:39:9a:95:
c0:21:c2:b3:68:a0:35:b4:5e:19:5e:2e:ab:87:59:e3:b3:3c:
b6:35:18:d6:ab:2f:d7:5a:bb:c1:62:10:51:ca:3f:80:ff:1f:
45:e4:33:f8:ad:24:ab:25:ed:27:4a:df:25:9f:81:9e:cb:91:
dd:30:87:99:26:01:ef:d3:f8:a0:85:19:d7:f2:46:6d:43:16:
94:75:bc:a5:c3:5c:51:f7:fb:ff:93:da:4a:26:88:ef:7d:e4:
58:61:a8:6a:a8:4a:50:4f:9f:ec:02:8c:96:48:e9:4c:5d:c2:
bc:41:e7:17:07:39:fc:3b:21:8d:58:d2:18:21:9e:fe:0b:15:
b9:a6:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:04:48 2024 by rpki-client on console-ams.rpki-client.org