Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y1ojbIrLg4aEGSMtmO8syxLxnrA.cer
File: y1ojbIrLg4aEGSMtmO8syxLxnrA.cer (raw, json)
Hash identifier: sKXItkqQBSyikGkzezmWRfw5U1M95030IBpGUkimp3I=
Subject key identifier: CB:5A:23:6C:8A:CB:83:86:84:19:23:2D:98:EF:2C:CB:12:F1:9E:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01900361BDC0FBEC4030AB4A690565178BEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/a16bfb-36c5-45bf-b627-1d77718022d1/1/y1ojbIrLg4aEGSMtmO8syxLxnrA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/a16bfb-36c5-45bf-b627-1d77718022d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Jun 2024 18:20:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:8c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:61:bd:c0:fb:ec:40:30:ab:4a:69:05:65:17:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 18:20:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb5a236c8acb83868419232d98ef2ccb12f19eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:3d:0d:66:2f:09:aa:f1:5b:32:31:0e:90:
f3:b2:cc:e2:63:dc:d4:85:32:1b:1e:92:26:a9:21:
26:7a:08:c8:57:e2:17:0a:1a:a5:d2:c4:96:2d:5d:
dc:f5:8b:a3:08:53:b7:7b:5c:77:73:2e:ad:c6:5a:
42:91:11:56:61:ee:5d:6d:96:a5:04:c9:1b:9d:cb:
fa:0d:25:9e:51:c9:34:f6:fc:fd:fa:b3:63:32:ac:
69:08:47:0c:1b:0b:1a:1c:37:9f:0a:b8:e2:a2:39:
e1:45:ec:2a:f1:99:91:d5:50:50:c6:8f:84:1e:68:
56:d6:3a:df:17:fd:13:c6:f2:9d:96:63:f1:c8:4c:
8d:84:07:4f:4b:9d:ea:3d:85:ad:34:c4:e8:51:59:
62:e6:f2:ca:b8:31:2b:17:f8:f6:4e:38:2b:df:2b:
39:92:13:f0:b7:69:90:01:9f:ba:17:c1:4f:77:7d:
20:83:36:85:57:d4:a2:28:d5:02:60:6c:a0:d2:37:
15:ec:68:06:f4:4f:01:fd:dc:e9:e9:a5:73:00:8b:
7c:61:77:8a:97:76:b2:3a:52:3a:b0:5e:16:f1:f0:
2e:dd:2d:4e:c1:24:d7:72:8f:91:23:46:18:41:f5:
17:e2:77:89:b8:ca:06:94:76:4a:27:8a:83:e6:97:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:23:6C:8A:CB:83:86:84:19:23:2D:98:EF:2C:CB:12:F1:9E:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a16bfb-36c5-45bf-b627-1d77718022d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a16bfb-36c5-45bf-b627-1d77718022d1/1/y1ojbIrLg4aEGSMtmO8syxLxnrA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8c::/48
Signature Algorithm: sha256WithRSAEncryption
5f:36:0e:63:14:fb:99:5c:16:ac:44:c9:41:07:f8:f5:6d:5d:
bb:08:81:e6:60:b1:7c:48:8c:53:ee:33:b4:1f:ee:85:f7:7d:
ca:b0:30:1f:69:0e:7f:6e:ef:4f:16:07:ac:de:f5:41:5b:24:
f5:ed:03:e8:4b:db:73:ea:a3:64:35:69:54:32:e3:04:8f:2d:
4b:1a:3d:55:01:99:b4:8e:05:59:05:77:e9:4f:0f:30:06:07:
d7:bc:d9:f2:b4:ed:44:23:ee:bf:d1:a3:38:f7:d3:3c:d7:8f:
e0:6d:65:14:37:85:f6:d8:cc:6f:20:49:22:45:cd:4a:1a:7c:
cc:6a:20:18:78:44:4e:ae:5a:9f:d2:7e:d2:3f:f9:45:7a:80:
15:39:54:bf:e2:f0:f7:ed:71:87:82:5d:0d:07:18:aa:0b:94:
c3:22:ad:6d:90:7b:03:b6:f1:1b:83:cb:4c:97:a0:1d:15:d3:
48:93:58:03:3c:82:c4:9c:63:29:e9:9e:17:d6:60:76:af:51:
a1:be:99:4c:0f:c5:b7:b2:bf:7c:8f:db:45:96:d2:0c:a8:d5:
c4:e2:1b:5b:d7:0f:6e:f4:ce:3d:0e:57:bb:89:78:6b:5f:be:
43:b9:6d:6f:fe:80:3b:de:c5:64:87:73:84:24:73:97:b4:4a:
c1:d4:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:23:17 2024 by rpki-client on console-ams.rpki-client.org