Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer (raw, json)
Hash identifier: 8/33W2HFajfX9yOFTzihso2Eh4LLt0i7SQ4dUOnLlaQ=
Subject key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420681DC50BC304E97CE92D422C610DF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13303
IP: 185.62.112.0/22
IP: 2a04:d080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1d:c5:0b:c3:04:e9:7c:e9:2d:42:2c:61:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:9c:1f:01:d3:10:1b:e7:35:56:ae:21:42:
52:bb:3b:7d:2b:e9:57:04:d7:e6:17:7d:93:b2:e8:
8b:1b:a4:f9:76:fd:89:52:fd:a1:7a:29:5f:db:a9:
0f:9a:bb:1f:45:73:9f:cc:33:e2:53:f8:2a:cd:cd:
1d:3d:4a:21:00:70:cb:b2:be:e5:3b:ac:49:5a:73:
27:d8:34:da:df:34:c8:db:ab:38:2f:e9:ff:7f:be:
4e:36:22:c9:8d:21:67:9b:6b:94:ff:58:16:a2:4d:
d7:c7:f9:73:d7:e6:86:05:1b:31:b6:de:d6:01:92:
a6:52:c8:18:da:b4:9f:b2:2f:e2:0c:76:05:3d:ef:
88:eb:98:ef:ed:b5:31:6d:3a:48:43:4b:41:4b:9b:
15:a7:98:c8:c9:35:8d:bc:69:29:22:e4:3d:76:32:
60:e7:74:2c:27:45:49:a5:1c:a7:05:7c:df:ac:7a:
bb:cb:46:5a:b0:fe:59:64:10:2f:00:10:92:92:9a:
0f:2f:a9:c7:31:4c:e8:af:44:47:7f:ca:f1:09:74:
5b:cb:33:57:38:93:04:54:b9:9f:ce:27:ee:54:e2:
99:0a:f2:37:0e:ce:71:03:55:ed:ef:03:62:9e:c6:
fc:88:a8:aa:8d:a2:b7:c3:c3:b3:a7:74:12:67:81:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.112.0/22
IPv6:
2a04:d080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13303
Signature Algorithm: sha256WithRSAEncryption
a5:c0:40:cd:52:15:a2:0f:ca:63:c7:9c:5f:88:de:c4:13:07:
8c:ed:9b:99:56:dd:1b:eb:7e:3a:fe:c0:c4:9a:aa:cb:bc:23:
82:93:8a:2d:8d:fd:0f:f0:b4:6d:af:f4:62:89:54:4d:69:24:
4e:41:03:57:c3:2d:a2:98:b2:22:05:30:7f:a4:31:23:02:bb:
04:cc:ee:c0:85:0d:4f:b1:0f:59:f7:04:35:ea:61:a4:f8:f4:
b1:c4:fc:27:d1:9b:c1:b9:1f:eb:5a:a9:35:3b:4f:45:95:50:
b9:19:66:67:fd:d3:cb:56:65:94:ed:71:79:78:49:eb:02:08:
8b:02:7f:61:83:fa:ca:42:df:72:39:31:54:06:d2:15:1c:5e:
a2:5d:69:fa:68:fd:47:10:20:87:a5:55:97:c3:fc:d3:e4:b8:
28:6c:b7:64:29:11:12:58:60:ba:53:11:6d:44:7c:7e:76:63:
9c:81:6d:d7:e9:ad:63:1d:02:0a:c0:f5:a8:53:45:5e:9f:bd:
32:00:95:c9:ac:9c:3d:0b:f8:be:bb:44:42:05:69:34:3b:ce:
d8:0d:65:ea:ff:a5:16:44:40:7c:1d:b3:ff:7b:cb:c6:d9:13:
e5:51:a8:76:ff:ac:16:34:26:2e:ea:b3:02:ca:c9:74:b7:f9:
e0:89:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:28:19 2025 by rpki-client