Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer (raw, json)
Hash identifier: daObjzKt1sRwVE4erCmmCTNSVigVAqI2SJ3VE8VmiLE=
Subject key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4938A29845B9F9338D3BC23AF84D113
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.1.168.0/21
IP: 37.252.200.0/21
IP: 185.15.32.0/22
IP: 2a03:b7c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8a:29:84:5b:9f:93:38:d3:bc:23:af:84:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d335041718b18830b1f58c15d3518510fe6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:14:20:7f:05:13:e2:17:24:4a:f6:07:a9:
0e:cd:0c:70:07:1c:50:da:f1:81:f5:62:3e:04:ef:
12:25:59:4e:c3:f2:b5:04:97:a9:49:7d:d6:25:28:
22:aa:a4:67:1f:56:ad:6b:65:9b:b2:00:5f:84:00:
5a:42:e1:57:69:54:39:16:3a:8f:b0:fc:17:1d:30:
ad:a8:6e:bb:b5:83:c1:86:13:64:e8:4a:db:11:fe:
05:8a:6b:06:d9:83:79:a5:3d:7c:3d:bc:2a:75:ca:
2c:ea:26:ca:64:65:ff:4d:e2:c6:3b:7d:c7:a7:a7:
49:8b:13:d4:c6:99:83:11:e0:19:21:74:0e:0e:86:
b4:a7:ce:56:3e:b3:19:88:11:c8:e6:98:30:31:80:
0f:1d:cd:2d:9d:5c:0c:61:11:c0:7d:01:c6:7f:fc:
c0:6c:31:f1:a0:60:46:b7:2d:f0:b9:19:d6:a2:f4:
5e:a5:b7:6e:ad:77:c9:b4:3d:f5:e5:54:09:aa:7f:
dd:ae:ad:c7:4a:50:00:09:f7:cd:70:1b:68:3a:bc:
ab:36:03:e5:1c:0c:e9:bf:60:a1:f3:6c:5e:c9:e6:
c6:35:21:10:cd:c8:4b:11:05:c1:bb:0c:0d:f6:f4:
b6:22:a8:30:44:ab:10:88:27:0b:22:79:0d:39:bd:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.168.0/21
37.252.200.0/21
185.15.32.0/22
IPv6:
2a03:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:fc:ca:f6:21:26:67:b7:41:92:fd:63:1e:f6:47:16:ce:01:
fa:28:a8:a9:23:5d:07:fd:fc:55:86:df:36:81:db:96:20:9f:
16:69:67:25:b6:b1:93:4c:54:d1:58:d6:6b:a8:14:b6:1b:bc:
5e:0d:a4:73:ad:80:7d:c1:06:91:dc:64:70:c7:07:e8:12:c0:
6f:b1:a4:ce:77:d6:72:5a:04:82:d4:d7:1c:66:b8:33:7e:46:
a0:77:76:05:1b:bf:b3:24:40:6e:8f:df:06:f5:8a:02:99:21:
69:1b:24:af:79:a0:4b:14:14:17:ad:93:0b:7d:3e:24:ff:7f:
2f:c4:89:3c:f2:61:f9:32:37:a5:8a:cf:be:f6:1b:b5:d5:b5:
d7:88:7e:e5:29:5c:e8:2c:11:96:33:13:64:d3:36:83:db:bb:
a1:51:69:e9:a5:42:46:f2:c4:7c:a9:8a:d5:43:e3:25:63:bc:
dc:51:e8:07:12:46:f0:3d:96:56:62:0e:9b:0c:b5:be:03:93:
f4:b1:19:ef:84:59:d0:4c:32:15:c8:cc:6f:4e:2f:fa:cc:8b:
06:ba:02:eb:d7:4f:50:da:72:47:55:18:b5:7f:4c:0b:09:27:
e1:fc:3a:c9:d5:b9:af:fe:2d:f5:fb:da:30:ad:6f:b1:52:d8:
2f:ee:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:34 2024 by rpki-client on console-fra.rpki-client.org