Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer (raw, json)
Hash identifier: AobZ344Zj47GmjDiXUR4ZVT/l8aS+KCHVv7key5IQ1Y=
Subject key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B67AD3752031BBAE53B94C990EAA73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.91.254.0/23
IP: 193.57.172.0/24
IP: 2a11:5ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7a:d3:75:20:31:bb:ae:53:b9:4c:99:0e:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:18:ed:2d:80:06:ea:cd:4d:c1:96:f0:70:30:
af:4c:68:a6:8d:8a:b3:1d:88:5c:31:de:c0:b1:24:
dd:5a:3c:03:eb:65:82:9b:ee:5d:2b:0b:68:7d:df:
ed:86:ec:01:96:82:b9:e1:71:7b:f9:34:fd:0a:80:
3b:32:fc:f2:01:3a:d0:59:93:c9:70:f9:0b:98:69:
d9:ae:70:b7:c9:c3:d0:3a:d8:4e:0e:ce:6b:c2:52:
88:ad:68:d1:76:51:6a:f3:ab:34:a6:01:66:47:81:
66:5f:12:b0:7b:c1:b3:fe:68:a4:77:97:68:e2:33:
9e:36:1e:48:8d:ac:46:3a:e3:38:5f:89:cf:02:68:
d2:c3:36:3e:bd:fc:12:16:4d:0e:72:f2:70:7a:ee:
6c:28:30:4c:1e:6e:78:c5:b7:0e:f2:9f:1f:b7:7e:
7b:0f:62:86:e1:38:9b:69:eb:4b:dc:73:3b:c8:ad:
0d:54:20:f2:94:70:cf:16:68:a1:1d:18:c9:43:b6:
bc:b8:db:99:43:91:9f:5a:7a:35:00:f3:ff:e6:b5:
36:80:c0:d9:93:00:fd:10:64:30:85:f3:ca:e9:e7:
54:b4:7f:aa:48:4a:08:f9:3e:eb:6f:a2:bf:7e:65:
b6:87:13:97:b4:d3:66:40:01:ba:2a:39:c8:be:1e:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.254.0/23
193.57.172.0/24
IPv6:
2a11:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:9b:53:0a:cf:55:62:fb:e4:5e:de:c6:42:27:21:8a:3f:7c:
2a:fd:eb:09:b6:60:a7:ee:85:d2:6d:a6:17:61:48:03:47:0f:
f7:9e:63:a7:14:c3:8f:32:ac:5c:58:b5:88:c7:d8:2b:d1:ae:
d1:b2:bd:8c:6b:74:9f:dc:e2:53:e0:b4:74:52:c8:2a:91:86:
d3:d7:a3:95:ed:18:b6:31:82:0a:2d:3c:c0:5a:df:3a:72:e0:
af:06:d2:2e:cc:94:ec:8f:d8:eb:99:73:15:a7:d2:5b:d3:95:
07:ad:4a:42:3a:cc:af:f1:ec:2b:5d:5f:1f:a0:45:0b:ca:18:
f8:36:0b:de:7a:5b:5d:10:44:af:02:35:f1:9b:c6:e0:4d:41:
e2:f2:f5:a3:31:82:1a:62:14:96:3c:9f:2d:7a:34:fd:89:1a:
18:f0:0a:38:ba:f1:9b:4f:9a:e4:19:44:7d:5c:e4:3f:0b:f2:
2c:72:39:58:57:f4:eb:c0:07:dd:b8:ba:46:4d:7d:79:6b:46:
e3:92:66:41:86:40:78:81:57:28:9b:44:a4:f8:df:5b:61:4c:
ee:89:0f:e8:66:b8:8a:73:2f:cb:10:18:61:e7:dc:75:24:c0:
b2:2f:66:e1:0c:dc:c0:89:de:e8:58:a9:d0:ce:0e:e8:20:98:
a1:7d:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:03:20 2024 by rpki-client on console-ams.rpki-client.org