Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.cer (raw, json)
Hash identifier: NnVATGx4aubgf0Qtpz3xH+sJtgv6RzMk5W/eKVEd+KM=
Subject key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B697A54EB754D9C4DDE7C83C28EF42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.94.132.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:97:a5:4e:b7:54:d9:c4:dd:e7:c8:3c:28:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:14:81:72:65:a4:43:f5:70:fd:40:53:5c:
11:39:67:1b:cd:61:58:4b:15:47:f4:20:31:5a:96:
26:4b:d7:ec:75:de:b6:21:40:39:a0:71:a1:db:96:
92:1a:51:54:e0:13:a2:66:ed:52:2b:2d:98:b0:ae:
62:25:d0:e1:b9:9d:5f:08:85:58:66:16:07:57:f6:
21:55:3e:7c:08:77:e0:fb:a9:6c:16:10:00:d6:ac:
02:ef:1d:18:60:39:5e:82:2f:b8:83:65:60:e8:49:
6f:ee:68:b6:68:a2:6c:a4:8c:9a:e3:64:af:d3:62:
58:db:25:26:55:3a:93:be:05:c0:bc:cb:f4:71:f4:
57:ba:66:ea:46:9e:de:ce:d1:e9:9c:60:85:c7:ad:
5e:2d:e1:86:8c:09:bd:c3:31:ad:02:c6:be:03:f7:
0b:fb:8a:0b:67:9b:37:4c:b8:ab:c6:bc:26:cc:40:
9e:0c:4a:db:8b:35:c3:b0:9f:11:29:6e:37:02:df:
d7:0e:11:38:4a:7d:66:dd:02:12:df:32:d3:8d:90:
70:11:d7:63:5d:dc:5a:3d:33:e0:b5:7a:da:57:cb:
99:bf:30:8e:27:37:24:4a:b3:39:42:9d:01:bf:7a:
ef:a6:c3:4a:81:ce:ac:ff:c8:42:23:89:33:c6:db:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:60:93:18:23:07:55:a4:b1:66:d6:3a:cf:81:2a:e8:f9:0d:
a0:c8:15:e6:b4:e2:d1:12:10:19:98:a8:87:04:60:03:ec:01:
69:b5:0e:8b:93:d1:ba:70:26:07:78:28:6f:29:b7:d7:6c:39:
15:a8:99:06:61:54:2c:61:78:0d:9c:73:71:c0:c2:4f:b7:32:
ed:ac:33:57:ce:65:ec:c8:32:db:87:7a:c4:30:b2:8d:79:58:
11:2c:5f:bc:7d:ce:0f:7b:27:6a:19:1a:4f:c9:6f:fc:77:47:
e1:28:cf:e0:2f:80:e9:e9:ab:ae:7b:99:d0:da:5f:55:71:78:
de:fa:20:7c:70:41:0a:2f:e8:24:1f:08:d7:d1:a1:2d:51:13:
be:fa:15:14:3c:fd:18:f6:13:4c:f3:46:b8:73:eb:bd:be:8c:
ac:1a:9b:75:2f:55:36:0e:4e:4a:b5:f2:b3:ad:90:6d:d1:ad:
59:09:26:e3:eb:5e:29:b8:ea:d7:81:a5:e9:07:2f:a8:e8:e3:
0f:05:63:4e:c1:9f:c6:20:59:35:14:fb:21:49:8f:ed:4e:d0:
de:5b:0d:6c:83:8c:bd:d7:ed:c0:05:7b:5b:dc:e6:9c:85:a7:
f3:85:ff:c0:f3:79:fd:28:51:93:8d:f7:04:d9:7d:36:6f:12:
0b:a8:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:21:49 2024 by rpki-client on console-fra.rpki-client.org