Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.cer (raw, json)
Hash identifier: EuOPsilAr9MxMWRevS0k5Q9QQPjG1jiSFouxcLH2Fec=
Subject key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748915326E6CD48BACEF2A5611A9100
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.93.192.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jan 2025 14:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:91:53:26:e6:cd:48:ba:ce:f2:a5:61:1a:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:d8:f8:1d:c5:56:cd:ed:39:90:ca:d1:eb:
64:cd:e2:78:0e:59:b4:28:60:87:a7:e9:8c:eb:04:
7d:b0:8a:35:13:cc:ae:77:9c:fb:b5:5a:2d:29:52:
e9:18:02:d7:69:73:d9:87:f9:ba:72:11:5f:7b:34:
dc:65:6f:91:ed:30:ad:97:fb:bd:be:64:24:7f:89:
ff:08:21:a3:66:35:d8:51:26:69:f7:bf:33:a7:de:
bc:ab:f9:57:14:6b:59:90:b1:0f:14:56:c6:c7:95:
2b:5a:96:57:c2:b8:81:e7:96:ba:04:fc:61:4b:51:
6b:ef:69:ba:18:45:84:67:99:4f:f2:d4:a1:96:69:
42:2e:eb:f2:4e:f7:00:07:95:d0:14:55:6b:cf:83:
36:07:32:8e:28:f3:fa:1e:20:00:06:0e:8f:2a:ea:
2f:fb:9f:ab:aa:77:fd:de:af:6c:bf:da:58:9b:2a:
cb:f7:3a:e4:c7:76:17:a5:e8:55:e0:2f:f2:80:09:
09:83:ab:ed:cd:3d:9a:e2:70:4c:c1:49:94:cc:0c:
b5:a2:18:d4:f4:c1:83:09:fa:e8:d7:84:be:91:d1:
7f:5f:9b:0a:8b:5c:48:d8:94:26:3b:06:08:f9:c4:
be:ea:9e:6b:38:2c:b2:22:b7:92:34:09:2e:42:9e:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/20
Signature Algorithm: sha256WithRSAEncryption
75:44:e4:67:8f:06:84:87:ba:89:59:6d:18:ba:dc:94:63:24:
88:02:48:c7:8f:de:0d:fb:43:63:c2:2d:84:b1:0e:9f:43:af:
8c:44:b7:0e:33:e1:b9:6e:4b:8b:d3:b2:86:0d:ed:47:35:a4:
5b:b8:fc:85:40:a4:48:07:ed:08:f3:61:49:79:28:8c:fa:bd:
40:76:20:25:e6:da:b3:df:d6:e5:ec:58:8d:8e:04:3f:f1:32:
fe:95:a0:1f:be:49:3f:d1:71:0d:32:78:85:71:75:73:21:aa:
76:5b:cd:f2:d9:00:8b:0f:51:d6:da:5d:fa:ab:ef:4c:80:cd:
48:1f:39:5b:e9:11:9f:db:5b:80:51:50:75:7d:42:06:14:72:
37:46:62:41:df:a0:0d:48:00:6c:40:1f:bf:d0:00:0d:52:52:
f1:16:f8:05:be:bd:30:8c:86:99:72:f9:1a:fc:15:8e:b1:01:
56:84:12:c1:38:07:90:ee:5d:0f:ca:b5:88:ca:3a:84:b9:db:
d9:79:e3:61:96:47:dc:5b:89:5b:5c:bd:06:01:2f:92:8a:e6:
c3:5e:09:4a:b8:7b:80:4f:d0:38:65:14:88:1f:9d:8a:bf:3f:
17:cc:90:c7:82:42:5e:53:bd:e8:28:5c:03:ec:48:09:d4:07:
0b:24:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 17:45:49 2025 by rpki-client on console-fra.rpki-client.org