Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
File: JY9ajila0de0ih4RlYeQBStXolM.cer (raw, json)
Hash identifier: wMmo1qC2s5mcoBg2AkWON5RTZDax/3QkI0uHkaVCkuE=
Subject key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC139A2CD050D8E095AFD32565904D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8255
AS: 25117
IP: 145.226.0.0/16
IP: 185.228.228.0/22
IP: 2a03:7780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:13:9a:2c:d0:50:d8:e0:95:af:d3:25:65:90:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:d2:58:c8:ff:cf:85:c1:81:c5:3e:cd:64:
4b:e7:f9:c1:28:6d:03:9b:57:67:8e:be:f9:1b:1b:
0f:7d:90:6d:23:89:ce:c6:58:73:47:98:93:cb:1f:
e1:15:3a:56:95:ba:b0:bb:89:72:dc:fd:0e:90:b0:
cf:27:6f:3f:4e:f2:6d:be:ee:c6:1e:25:75:70:07:
43:8a:87:dd:58:70:13:7b:24:0b:dd:ae:c6:a7:87:
bb:ac:28:7a:de:ab:ee:04:d6:30:e4:6d:ea:52:d6:
65:df:ae:36:81:f4:fd:18:53:55:9c:38:b4:16:7a:
e7:b8:40:78:8b:ca:c6:f5:b8:18:5a:b3:09:ee:a2:
65:9a:fb:78:8b:10:22:61:2f:91:4b:f4:97:89:b7:
2c:d4:a5:48:ae:bd:f4:d3:05:3b:5f:6c:ae:cf:fa:
6c:c2:60:a1:3d:23:6a:d3:39:f4:89:21:18:df:81:
de:1f:f6:0f:21:e9:b5:7e:3c:b3:05:63:81:e7:af:
ab:a3:95:bc:22:03:32:51:ea:55:b1:d5:91:7d:d4:
75:c0:08:89:f7:ae:12:57:51:b4:18:69:7d:bf:d5:
36:f0:b1:d4:ea:4e:2e:72:ab:d8:2f:1b:a1:65:63:
72:a4:b1:04:37:93:fd:7c:9a:6b:d9:99:37:c6:5f:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.226.0.0/16
185.228.228.0/22
IPv6:
2a03:7780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8255
25117
Signature Algorithm: sha256WithRSAEncryption
67:dd:15:4b:99:e3:f1:8b:48:d6:10:07:3a:78:92:55:a4:6b:
27:b6:8d:36:c6:b5:d1:bf:d1:0a:fe:8e:26:c0:a9:11:91:bc:
8f:c3:be:60:15:38:8b:dd:df:77:55:fc:d8:3f:bd:d1:c0:f3:
b0:66:76:04:c7:e1:d9:ae:40:a7:92:08:fe:d9:63:76:c2:ab:
55:5a:9d:99:57:10:dc:51:5e:37:88:6e:8f:6f:b6:f7:48:ff:
36:66:46:41:d8:46:f5:51:15:ac:c6:94:23:2e:75:88:d9:92:
a7:26:92:91:8f:ae:44:c7:11:e2:f8:85:c0:80:80:1f:4c:f5:
08:32:da:7f:87:fb:e1:7b:76:68:5b:5c:af:dd:6b:ac:c5:1d:
da:98:15:60:63:fe:7c:8c:eb:d1:88:89:67:1f:29:5e:9b:6f:
d7:28:b8:d5:00:01:88:ea:98:d3:98:f6:ae:a7:35:cc:24:83:
45:be:ef:c1:ec:6d:b9:0d:3b:6e:34:dc:1e:ef:5e:9c:9d:1a:
aa:45:da:ec:18:bf:dd:a0:60:b5:6a:e2:f8:64:83:d8:0c:33:
a4:dc:b3:0b:22:0c:8b:b7:7c:ba:aa:6d:10:96:1b:4e:a9:aa:
76:44:14:c5:44:c6:2f:c9:59:1b:0e:ef:83:65:ce:d6:9f:aa:
7a:b8:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:37:55 2025 by rpki-client