Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
File: 1YghK_XazhCA3EXixVuS_4XGwZI.cer (raw, json)
Hash identifier: OQ2titaAh3gPTRK9cMDjTVqrQMoUPrE17R+vGDxRqk8=
Subject key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019465C8C9992EC6E5E8714D82F20E2E299C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Jan 2025 17:07:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198260
AS: 207266
IP: 185.62.164.0/22
IP: 2a01:8840::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:c8:c9:99:2e:c6:e5:e8:71:4d:82:f2:0e:2e:29:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 17:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:2d:c3:89:12:6a:12:a4:5b:b5:cb:f7:cc:
c5:2a:7d:04:4b:0c:58:70:97:5a:f2:69:07:e7:87:
48:31:77:2b:9c:2a:18:4b:82:06:d0:ae:83:77:b3:
c6:e2:98:24:1c:3d:81:d4:40:93:b0:34:04:ab:ad:
c9:43:a5:1d:f2:0b:64:3b:ae:e2:b1:4a:b3:c5:d0:
6f:c4:d3:ca:c3:26:d4:38:14:52:c6:2f:0e:99:e0:
2c:56:55:bd:b9:4e:3b:03:54:45:27:c5:29:2a:f4:
5d:b2:4f:78:cc:c7:4d:fc:1e:d4:f7:ff:de:de:ba:
fb:94:f5:fa:11:ce:b0:f5:54:95:44:2c:88:e9:2a:
a6:fb:6b:a9:62:27:81:0e:9f:c5:31:b6:44:75:71:
a9:43:60:88:9d:66:eb:f7:68:11:f6:8c:b3:dd:b8:
52:d7:11:da:7d:df:6f:1d:f5:79:44:61:65:3c:71:
49:86:c9:ed:a5:db:c9:6f:a6:00:b5:34:d7:dc:9d:
db:2d:12:c8:90:0e:9d:cf:23:91:70:83:58:10:6d:
ef:d9:1a:f5:1b:92:6e:79:ea:c1:69:cc:c5:62:f3:
fd:86:f7:e7:da:bd:2f:eb:ef:13:cd:7f:b5:95:49:
33:9b:d3:e3:7f:b4:61:b3:13:d7:7e:93:f5:6b:55:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.164.0/22
IPv6:
2a01:8840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198260
207266
Signature Algorithm: sha256WithRSAEncryption
2e:fd:7d:30:1b:5b:68:0f:e7:39:b6:4d:69:f7:3a:2d:f5:dc:
83:32:96:a2:50:ff:7e:dd:45:b4:78:4b:03:a8:f1:b5:e6:cd:
25:44:7c:c8:91:10:04:cd:8a:99:1e:e1:3c:da:1a:4c:52:cc:
38:28:bf:f9:eb:c5:9f:b3:3f:50:1c:5c:51:67:c9:1c:fb:9a:
0e:b7:1d:cc:36:d7:1a:f4:02:be:32:71:a1:de:ea:88:45:eb:
6d:c7:78:d7:04:95:47:fb:1a:79:ae:e9:78:f2:1b:9b:51:21:
2c:79:57:b3:9f:c8:f6:b3:80:c0:b4:62:51:fd:36:f1:c6:07:
af:7d:5a:9d:10:2c:42:6f:1b:05:06:68:28:b4:20:37:d1:2c:
ee:0d:bb:32:a5:cc:50:ca:aa:d1:67:be:bc:ef:a3:84:a2:94:
dc:64:c8:73:92:fd:eb:bb:b0:05:1b:c4:0f:73:1c:db:4e:05:
1d:75:5c:73:9e:82:51:7a:1b:54:5d:f4:e1:29:4d:42:69:46:
03:f7:81:ed:bc:fd:26:5f:2e:c2:cf:85:a1:91:a8:1e:9d:0e:
be:a5:10:ba:70:84:db:ab:8d:93:a6:79:d8:84:a4:58:b5:7b:
d2:4d:e7:18:ae:25:9b:1d:82:d7:c4:3a:57:79:f6:61:ac:22:
75:64:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:42 2025 by rpki-client