Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
File: yohtVYfshfcSQs1XztQJVEUoFo0.cer (raw, json)
Hash identifier: YUdjmEGPi23njTywTHsbMxKU3pgu2JMHxxvtRYCZHSk=
Subject key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019127E7E862790B2E46089102C33DED9651
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Aug 2024 13:36:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:d88::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:e7:e8:62:79:0b:2e:46:08:91:02:c3:3d:ed:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 13:36:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca886d5587ec85f71242cd57ced409544528168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:0d:1b:20:01:7f:fd:12:d1:a3:25:f9:b9:
67:41:d5:3f:61:42:eb:1f:10:95:a7:d7:99:c0:2b:
8c:9b:dc:9f:e3:68:c1:1e:db:d0:52:5c:a1:dc:b3:
47:c8:d3:bd:1d:51:17:91:fa:b0:bd:1c:e4:31:bd:
b9:4a:5a:30:11:e5:15:a9:18:fa:d6:7d:f6:1c:1f:
59:38:28:d9:fa:6a:77:7b:40:70:2d:e6:5b:df:b0:
3f:ef:9c:70:98:ff:89:68:9d:25:75:3b:23:8d:8e:
57:17:5e:85:97:3f:f7:80:02:23:52:6d:ff:ce:2a:
18:b5:42:ee:ec:2b:32:46:f3:7b:5a:1a:19:12:3c:
cc:fb:6f:8f:a1:e4:78:d6:7b:3e:60:1c:ad:33:2e:
73:b6:95:51:f2:6e:9d:f3:d2:de:10:96:4a:be:21:
44:93:0d:33:66:58:39:0a:ec:c5:5a:8b:bb:53:51:
bf:99:60:af:b2:25:ae:bc:c2:47:4f:65:f1:96:a2:
f9:45:4d:d7:08:de:b7:96:c0:5b:83:1a:93:e5:5e:
a2:b9:e6:00:fd:d2:18:0f:1e:00:eb:5c:26:5b:59:
73:64:60:c9:17:47:e9:74:dc:85:1c:15:e5:9c:71:
79:ca:60:f7:67:35:ff:83:59:05:cc:ac:65:55:bd:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d88::/48
Signature Algorithm: sha256WithRSAEncryption
0b:2c:72:d5:cd:72:96:ab:4e:af:dc:46:80:ec:fa:fe:c8:b1:
1c:5c:96:87:79:86:9b:55:90:a3:60:7c:54:d5:32:57:64:f1:
30:d1:a8:83:c7:b6:e6:5a:2b:1b:85:17:e0:bb:48:df:3e:16:
12:65:34:98:f3:a6:3f:5c:c5:31:15:ed:44:d3:0a:fc:13:17:
89:a6:7d:1c:46:38:78:a4:ec:09:23:8f:e0:dc:c9:8a:18:44:
41:7b:04:0a:aa:89:d4:a4:dd:e5:73:8e:04:84:68:50:e6:af:
50:00:cc:92:cc:9b:fa:c3:9a:b8:b1:b0:98:4e:69:8c:de:0f:
13:06:01:cc:93:6e:52:0a:75:0e:e6:09:59:6b:00:68:c2:90:
d5:24:fb:82:ae:d3:85:cb:78:0f:fc:8a:47:b7:ed:73:81:4d:
ab:72:8f:76:2b:9a:53:09:65:6b:cb:94:a2:0b:59:a1:5c:68:
30:bd:c6:72:0a:c5:2c:6b:fe:91:18:25:67:2e:e6:c3:b7:1d:
23:5b:a9:f2:e6:ce:89:74:a3:1a:70:49:89:32:c4:84:fc:be:
f5:3b:f3:c1:4e:c7:21:f1:14:9a:80:29:ac:2b:d2:86:c4:69:
6b:9a:30:1f:fd:ec:0b:44:e7:be:e3:24:1f:a6:a5:5d:c5:20:
15:47:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:08:52 2024 by rpki-client on console-fra.rpki-client.org