Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
File: ynSM0AzX_mohdVr2QtiBuN2aOfc.cer (raw, json)
Hash identifier: OwQaeAj1m/7q3dlW8IO9gDFycdQlwt4rIgptZprninY=
Subject key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49319CA6935FC518728CA0DA93B04A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.159.114.0/24
IP: 161.199.31.0/24
IP: 2a0f:efc0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:19:ca:69:35:fc:51:87:28:ca:0d:a9:3b:04:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:87:f1:7b:03:62:6f:e3:7d:9c:d6:c7:b6:
aa:3d:90:27:f8:a2:d4:1d:d0:83:04:d4:c7:77:d8:
a7:23:8e:62:2b:7d:bd:d0:39:2c:fe:87:cd:08:b7:
30:e9:11:7b:06:d5:02:4b:17:3f:bd:98:f8:df:0c:
f6:e1:76:36:d5:bf:93:4c:a7:d7:a1:10:12:af:25:
3f:80:c5:21:3e:c8:b9:c7:de:c7:26:13:52:5f:82:
8a:0b:a2:d3:43:2c:f4:d3:fd:7b:b7:2f:ee:39:09:
16:bd:b2:9f:48:90:7c:3c:f2:ab:fd:e4:07:ca:3e:
0b:f2:a2:d4:da:6e:5e:08:47:cc:01:ea:b2:52:b3:
6c:ce:6a:8b:f4:eb:e1:b3:ce:60:82:51:f9:ff:5a:
52:6f:70:c5:7e:6f:e2:16:fe:cc:16:52:a2:b9:66:
e6:15:8c:95:3e:12:aa:66:15:2f:17:83:1c:59:e9:
32:7b:0f:df:41:62:2e:62:8c:bf:a0:3a:5b:f3:f1:
cb:71:e6:2d:59:59:08:06:96:86:d5:91:9a:66:ec:
ad:35:cf:e8:35:0a:29:20:54:10:ee:b2:25:77:ed:
96:25:12:bb:ba:1d:6c:9d:93:ff:33:5b:5b:8d:cf:
62:aa:e3:ad:08:33:ca:ad:46:5b:d6:cc:f6:12:25:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.114.0/24
161.199.31.0/24
IPv6:
2a0f:efc0::/31
Signature Algorithm: sha256WithRSAEncryption
36:3e:45:ac:8e:91:01:5f:ff:76:94:aa:43:bd:b2:d5:1e:29:
02:e4:11:84:b1:0f:9b:a5:c8:ef:39:17:73:d6:ff:66:29:26:
b0:32:d1:ac:ba:48:fc:c6:a3:1a:cc:b7:cf:ce:90:23:49:2c:
35:08:f8:74:f2:bf:65:b6:ce:91:33:8b:fb:e5:a9:53:cf:94:
80:8f:d5:19:d3:f0:bc:78:71:52:76:01:e9:cd:18:f9:94:d3:
e9:be:94:5c:56:41:86:8d:ce:7e:7d:e0:09:85:f9:ff:86:ea:
28:35:36:ca:39:8c:d0:8b:09:30:b1:ec:e3:8a:60:6f:74:0e:
3e:6d:e9:3d:dd:9c:84:97:40:ce:1a:bd:bd:b5:25:a7:5c:b5:
bf:13:e3:5c:0e:d7:af:ce:6d:40:72:0a:e3:66:4c:a3:e4:d4:
59:67:06:20:95:c4:b6:32:c4:46:0c:3d:22:21:5e:7f:16:3f:
ff:55:d9:e8:89:5e:50:3c:cd:f9:19:d8:ff:62:78:dd:19:db:
be:6a:87:14:d4:fa:fa:91:d6:6d:b6:64:e9:7b:8b:44:cb:07:
a2:e2:d1:96:b5:5c:a4:d7:f9:fe:08:ba:71:f8:ce:e3:e0:b0:
1d:d3:2b:5d:21:e0:51:e8:fa:95:e5:74:ee:2e:9c:54:fa:6e:
ea:c6:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:20:16 2024 by rpki-client on console-ams.rpki-client.org