Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
File: yNAqmjozOK5j1ITvMAa4rW6vqho.cer (raw, json)
Hash identifier: Io+youfgIqjjFHERgVQF0mNmLG2FadDkXhVb/Wk+4bc=
Subject key identifier: C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011607F336C63DA05D344BB2FB7EA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.84.48.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:16:07:f3:36:c6:3d:a0:5d:34:4b:b2:fb:7e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:74:ac:0a:09:be:97:f1:56:a8:4d:f9:c1:
6f:d0:4b:eb:2f:70:54:c4:6b:4b:4d:a1:28:43:aa:
41:d2:a9:90:44:1d:9a:e7:da:02:77:8d:47:80:fb:
ad:21:63:fe:71:a5:c7:72:4b:57:98:e3:c6:6f:8a:
b0:bf:2d:7e:1b:42:06:ce:e0:54:40:7d:bc:e6:27:
f4:1e:b7:bd:d4:ba:85:61:49:b5:40:26:69:86:2b:
f8:80:c7:8c:93:d7:74:8d:3b:91:65:de:eb:e0:35:
cb:1c:66:11:21:69:0b:a9:66:27:c2:b8:61:d5:d5:
a9:9a:5b:78:f2:f8:46:c0:5b:f5:ff:ed:a1:14:61:
16:5e:b0:a1:77:d2:eb:a2:61:23:3c:c1:5e:69:ff:
91:63:c6:10:00:8c:aa:65:94:8c:ed:32:14:fa:da:
a8:4d:95:69:86:f2:76:c1:d8:8f:1f:86:94:9d:82:
56:8e:fc:f5:c3:67:ef:0a:44:6e:82:b9:ef:90:79:
32:a6:da:49:36:01:90:6d:57:db:2a:55:e2:6a:4c:
f6:4f:dd:c5:0f:56:62:ed:2d:71:44:40:cc:18:c3:
49:dd:44:98:c7:4f:d7:a5:58:41:a3:0a:e4:5d:3f:
78:04:f0:8a:e6:82:50:0d:04:ef:04:8e:cd:3a:b6:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ea:a3:e3:a9:66:22:65:96:e0:10:41:17:42:b4:0d:18:90:
70:80:98:42:a9:70:70:52:52:51:fd:e5:1c:34:e1:92:09:a8:
d4:af:26:1c:da:eb:12:8a:54:5b:ac:41:d9:9d:73:41:d7:ca:
ff:fa:14:e9:c8:db:c9:60:ec:1b:a9:a8:31:60:38:1d:26:e9:
81:e8:5b:a6:28:85:68:10:88:1d:93:3f:1a:2a:63:b3:25:41:
18:27:9f:27:ec:e3:ea:00:8d:6f:f9:ab:41:d6:8d:42:3f:ee:
a0:1e:68:cb:b9:58:fb:27:5e:d1:46:ab:a2:58:0d:dc:3b:3d:
de:4e:98:1a:83:5b:de:b2:fd:b3:cd:88:01:35:79:b6:ac:03:
fa:72:97:ac:b6:c7:95:c6:37:97:f1:90:1f:ba:19:f0:89:32:
62:5e:24:69:e5:e0:65:d1:ff:ff:70:df:29:84:7c:9d:24:35:
a8:31:03:16:50:ae:45:6c:9b:26:f3:cf:dd:d6:c5:e4:40:05:
66:68:b3:5c:41:ec:2f:c9:fc:1b:2b:c0:bd:75:71:14:f2:a3:
bb:0e:5a:5f:5e:fe:12:55:b1:62:be:bb:fd:2e:37:56:a8:db:
48:f3:c8:e7:90:91:aa:9e:78:b8:30:00:44:eb:12:17:31:ce:
ea:de:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:38 2024 by rpki-client on console-fra.rpki-client.org