Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
File: yCIG9QbIJusQV-XCabNxDjiraWw.cer (raw, json)
Hash identifier: OkWWiR4g6OcX18c87MpslQmMtDTo02R8hc/DDPzmcDU=
Subject key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424F8802B3424E8642BF79EAE2FDE43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.123.51.0/24
IP: 194.139.6.0/23
IP: 194.173.47.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f8:80:2b:34:24:e8:64:2b:f7:9e:ae:2f:de:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:49:4b:ca:7c:be:dd:37:00:ac:db:0e:3a:
01:b3:81:71:15:a2:19:f5:ef:03:89:47:6d:6b:0e:
b9:81:b3:13:44:b2:c4:77:8a:fe:b3:3c:96:cd:13:
7b:82:ce:b1:b8:54:d9:06:ac:e0:4d:b7:cd:a9:7e:
e3:00:1d:5b:d3:a1:df:49:f0:65:bd:e1:21:82:c8:
a6:87:6f:07:b9:4e:ed:0c:1e:25:5d:48:93:11:f1:
2e:24:7d:96:e8:fd:41:45:37:d3:4b:ec:8e:ec:b8:
98:72:57:a3:6a:e1:56:4c:c9:9f:53:7b:08:09:ed:
56:fd:de:16:0b:f2:fd:ac:c7:bd:f4:f2:e3:c4:ba:
4d:c6:7d:8a:05:63:46:32:86:11:9c:02:92:16:4c:
8d:52:e5:83:66:c6:d8:13:85:46:5c:fa:32:84:0e:
19:12:2d:d0:90:1c:1a:43:7e:67:7a:8b:1b:1c:26:
07:1a:06:40:f6:ca:98:af:e5:48:15:83:26:bf:bc:
1a:e8:2f:4c:0c:d3:db:b6:b2:85:b3:4d:5d:d4:50:
d2:5d:25:a9:03:88:2c:65:d4:ab:f2:2e:f4:8f:af:
60:32:6b:30:ba:4d:da:30:c8:78:f5:ff:81:77:c7:
d3:7f:34:8f:23:94:a8:b9:3b:64:a1:49:97:78:95:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
194.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ab:4f:c0:41:7e:70:5d:a0:d0:1c:e5:cc:b2:0b:f6:ae:e2:
0a:3c:70:9a:b5:97:05:29:5f:4d:e5:4d:83:dc:16:29:2a:05:
bc:9e:9e:a1:56:90:6d:27:6e:ec:5c:55:5e:47:3e:b6:37:5e:
1f:07:44:00:c9:78:ff:e0:81:59:66:b1:cc:81:51:cb:86:26:
e9:94:07:16:bf:d0:b6:d6:6a:a2:bc:d0:f4:27:d6:ae:1c:8d:
ca:08:aa:c0:ba:48:c0:7f:58:80:f5:61:e0:95:d1:68:9c:00:
c4:1d:c1:37:0d:71:7a:57:74:04:da:b1:e7:a0:9d:1c:2b:e5:
af:18:c4:4a:61:f7:7c:d3:4d:8f:4b:15:f0:02:a7:7a:07:64:
93:69:82:b9:0c:55:0c:7e:fe:b4:44:01:c4:cf:a6:a3:f9:5a:
f6:6d:3c:51:af:c4:42:a1:2e:19:14:20:1d:aa:f4:a8:f3:80:
33:3b:cd:4d:39:4e:41:5c:ef:81:4f:fa:53:bd:30:ed:18:b0:
b7:8b:6f:57:88:d2:75:5c:6e:cc:e3:11:6b:d4:07:7d:eb:9a:
10:01:e6:f6:d3:f1:65:81:5b:69:90:0e:1f:13:34:2d:b3:e2:
07:08:1f:00:f4:55:b7:8a:d7:b2:a3:88:84:a1:c0:eb:b8:57:
1b:1a:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:29 2024 by rpki-client on console-fra.rpki-client.org