Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.cer (raw, json)
Hash identifier: eUbJahajK2qLdg8HDYn3lWA+LeK96GevxUGArk9IdpM=
Subject key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F91F54AF97FB8B73FD0430F208B0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203770
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:f5:4a:f9:7f:b8:b7:3f:d0:43:0f:20:8b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:21:0c:40:9e:04:be:e9:08:f3:22:61:7a:
bf:6a:c3:19:e8:57:3f:f2:b2:95:d9:d3:4a:44:85:
f4:74:29:0f:4c:05:ce:e9:3d:d4:cd:29:fd:35:c6:
ae:e1:72:0d:71:05:9f:d1:08:79:52:d2:0a:b8:af:
11:ee:7e:d5:81:52:d3:79:69:5d:4b:94:3f:a7:48:
92:ba:da:48:e9:ab:7b:70:a6:20:98:34:08:c5:5b:
68:dc:6b:c5:ee:65:f6:85:8c:4f:06:8b:eb:29:ac:
70:a6:42:92:dd:5e:a3:29:16:ec:bc:a3:95:a5:b8:
05:c9:e8:a5:ce:d6:de:06:fb:49:4e:1a:29:40:00:
9d:14:e2:37:f7:d0:5c:ae:58:cc:9b:55:89:85:08:
40:a5:d7:8a:0d:5f:df:cf:1f:84:5c:2d:76:35:25:
d6:80:66:81:d0:24:15:d6:f3:3f:22:c6:a3:f3:19:
00:c8:0f:88:a3:2e:4d:b3:00:ec:d1:94:ef:97:9d:
5b:f1:a2:db:2e:10:20:01:ff:a8:1a:33:b7:f5:cd:
89:de:af:80:49:f5:7e:7d:3c:a3:d2:ca:56:15:3d:
ee:12:c2:47:2d:07:e0:20:c4:84:84:7e:5e:df:43:
f5:e3:32:af:80:ea:81:4f:00:c9:5d:9e:f3:68:9b:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203770
Signature Algorithm: sha256WithRSAEncryption
72:bd:10:82:89:a6:7b:15:62:e7:95:f4:ea:4c:e4:c8:b3:f0:
24:da:7d:16:28:79:14:d5:fd:44:80:b9:9a:04:23:fc:3c:db:
ad:6b:cf:b6:86:ac:58:ff:07:f7:b2:8d:62:58:70:42:97:39:
1e:1d:5e:ff:36:48:5f:f2:55:85:0a:a9:73:60:16:a6:a6:bd:
02:9d:eb:4c:db:82:da:cd:cc:b4:ce:3f:2e:33:7f:49:94:be:
ff:ec:fe:98:94:13:5b:f9:d5:3a:64:e0:26:6e:26:40:9b:8a:
b9:1d:4e:97:0c:11:51:27:e6:b4:49:49:30:61:32:e8:cb:90:
20:6c:76:1f:09:00:b6:53:1e:14:21:75:0c:70:92:d1:75:1f:
68:c4:e0:74:94:2d:15:26:ce:66:0b:d5:2a:f5:12:a0:d9:4a:
8d:f7:6c:59:7b:06:a6:8d:49:d4:f8:9f:fb:d0:f7:7b:e6:7c:
6d:50:11:d1:31:37:63:aa:60:31:03:dc:36:5b:80:af:8a:96:
ba:f1:6f:6c:b3:43:73:c2:b7:5a:32:19:2d:8e:ea:14:4c:49:
0a:7b:6a:2d:ae:eb:ff:f9:32:29:91:38:3e:6a:b2:6f:d2:a9:
8b:87:3e:9b:94:72:86:51:8b:bd:4d:d5:47:c8:aa:2d:0a:d4:
74:d9:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:21:51 2025 by rpki-client