Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
File: KYijxojo6x_vBsN0p6pc-P13jg8.cer (raw, json)
Hash identifier: 7o0I+trXgMFTi/v/LPDZxMTb9qjc5Fy1qNC+cmWkMo0=
Subject key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942825E9C5366807A2E78D5A29F6202302
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25106
IP: 46.56.0.0/17
IP: 46.216.0.0/16
IP: 134.17.0.0/16
IP: 176.60.0.0/16
IP: 178.168.128.0/17
IP: 185.20.112.0/22
IP: 2a02:bf0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e9:c5:36:68:07:a2:e7:8d:5a:29:f6:20:23:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:64:0a:6d:d1:fd:3e:d2:e7:17:05:89:97:
df:11:2d:63:3b:19:5e:9f:5d:ee:dd:9e:e8:9d:01:
ce:26:06:83:cb:54:25:23:45:68:c1:8c:ef:a2:7a:
e7:65:e1:2e:b1:d3:2c:1e:a5:13:57:29:a7:de:fb:
42:28:b3:c8:d0:3c:62:80:19:13:1c:73:3c:b7:b5:
21:c6:41:ff:f1:1e:36:f2:db:1d:50:97:a5:38:47:
32:d0:43:82:fb:a6:2b:78:53:fe:72:01:62:68:5e:
38:a2:a9:57:a1:14:49:e0:8a:5d:2c:06:66:75:e9:
99:02:46:ff:7e:64:4d:5d:1b:38:35:3f:a5:51:88:
35:e8:2b:ca:a6:8c:72:33:b2:8d:cf:1d:b7:ca:c3:
ce:40:a5:dd:44:90:1c:1b:eb:ac:97:41:45:4f:f7:
15:49:cb:c4:bf:84:53:c5:97:2a:bd:7a:9d:18:95:
d6:cc:50:a0:99:a7:14:da:88:08:25:df:ca:b8:fb:
59:7e:02:ec:98:bd:0c:5b:d5:db:6b:4d:11:7e:e6:
b4:8e:13:55:bf:68:5a:b2:1d:77:75:4a:27:45:31:
20:c6:7d:f2:be:b2:e9:0b:03:a1:53:86:03:be:05:
bd:96:a5:cc:e7:10:c4:fb:49:31:c7:bf:a9:fd:7c:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.0.0/17
46.216.0.0/16
134.17.0.0/16
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25106
Signature Algorithm: sha256WithRSAEncryption
9d:ec:da:b1:84:1f:02:31:30:79:6a:eb:e6:e8:12:41:73:b9:
61:55:13:36:01:b2:ba:16:cb:f7:e0:d4:c6:d2:5f:d2:c1:89:
4d:0b:1f:1e:b4:b7:d6:61:8f:7c:61:57:85:38:62:21:d3:14:
d7:f7:00:d2:02:a6:c0:35:d0:df:2c:2d:c8:c4:fe:b2:e4:ad:
6c:a5:a8:92:28:49:4e:e5:cf:2a:a9:f5:60:8b:b7:bd:a7:1e:
ed:96:8b:5f:d9:bb:4f:c3:6b:ea:0d:b9:8b:f6:c5:89:7a:76:
3d:46:f4:52:5f:ed:5b:c0:c0:ba:37:4a:d5:61:1f:bb:7b:4f:
22:68:7d:a3:11:12:d0:de:92:cd:dc:76:78:3d:83:f9:7b:54:
5d:c7:69:01:f4:13:a3:8a:ec:7f:bd:38:47:a5:d7:fb:04:d4:
db:8e:83:89:c1:65:54:a7:2c:c1:d3:cf:af:3d:64:60:e3:5a:
da:66:55:66:1a:6a:11:26:cd:82:c6:11:08:25:80:ab:58:78:
15:8f:76:7c:f5:54:4e:3a:ac:ce:be:d3:9c:c7:9f:87:9e:e0:
c3:06:69:a3:e9:71:47:c6:fe:a7:7d:b8:f9:dc:75:60:8f:50:
32:d4:bd:d4:55:d7:17:30:ee:9f:2b:6e:34:50:64:a0:57:63:
da:a7:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:05 2025 by rpki-client