Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
File: L0yd_nsacqVRu6FamZpsGTM__5Y.cer (raw, json)
Hash identifier: BAyVEgYbjj0KOQC2hmbQvyzZfQfQ/VwacImet123faU=
Subject key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2497BE5B5D992CEE998A43390B917
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202629
IP: 185.138.180.0/22
IP: 2a07:b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:49:7b:e5:b5:d9:92:ce:e9:98:a4:33:90:b9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:48:f1:d0:6b:71:2e:86:e5:a5:33:aa:2e:
8c:d2:54:de:a8:40:26:61:b5:35:8f:84:5b:4e:6c:
8c:32:47:09:e4:87:48:dc:04:eb:ac:a5:da:e7:94:
88:5c:4a:85:76:62:a3:b7:0e:a8:b6:1c:3c:9d:41:
3d:fa:3f:cd:41:12:ae:9b:43:ad:05:31:74:de:8f:
f1:6f:9b:87:02:ff:6d:76:7f:54:c3:7c:db:38:7e:
c4:80:26:f6:ba:cc:ba:f8:87:77:af:b4:64:2b:72:
c1:e5:bf:60:82:a5:5c:b4:c5:63:39:2f:d5:de:31:
4d:1e:5b:bb:b5:39:a3:f2:1a:19:ab:9d:61:1b:6f:
5e:17:e5:a5:6d:79:d0:d9:df:8e:7d:a8:cd:c8:01:
34:31:52:06:6c:4f:a8:c4:4b:cf:0a:0b:bf:1b:21:
85:b6:0e:97:0e:58:14:f9:34:1c:a6:f0:4b:f6:03:
43:c1:6c:8e:1b:70:52:bf:64:8d:ea:c3:23:3e:3a:
c9:51:51:14:6f:de:c0:39:3a:7e:a0:8d:bd:c1:7a:
d0:e1:a0:1e:99:8b:13:ac:e4:91:a8:5b:17:5a:e9:
05:cf:f0:42:32:97:c7:84:20:6c:fd:ff:78:ad:15:
6b:72:d7:ba:4b:80:f3:fc:95:a7:27:c6:c2:62:5f:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.180.0/22
IPv6:
2a07:b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202629
Signature Algorithm: sha256WithRSAEncryption
14:1b:fe:33:47:74:0f:f6:c8:bd:77:5f:00:4b:b7:61:8a:83:
5e:72:9a:d4:d9:1a:2c:c8:c7:1a:93:4a:6b:6c:93:ef:51:5f:
1d:09:60:a6:79:21:60:74:6e:5f:50:8d:af:2e:0b:fd:ab:12:
d1:27:48:3e:3b:3c:cd:d6:24:25:dd:a1:68:52:b4:2e:47:85:
88:62:6e:37:cf:31:02:e7:28:62:f4:f9:1c:2d:35:00:03:8f:
a7:66:fd:08:8f:47:07:86:c0:56:3c:55:d0:b9:bf:ee:d4:be:
bd:b8:3f:bb:06:0c:72:28:37:44:1a:c4:d3:08:c4:0c:77:da:
38:87:84:ad:a0:8c:2a:ff:57:da:ee:5c:8e:c9:da:62:1e:59:
06:66:19:0f:f0:6f:1f:dd:d8:01:94:2d:64:89:54:04:33:98:
0f:c6:8b:5a:21:34:71:18:b2:72:c2:ae:3c:99:23:aa:61:9e:
13:06:c6:79:33:41:8c:19:71:51:28:31:1d:fc:df:ba:31:8f:
46:31:71:6d:da:9e:54:54:77:8b:f8:f8:db:c9:e0:c1:2c:8d:
80:0f:25:e0:9c:7d:3d:5d:fc:6d:1f:05:d5:00:3f:36:1b:0d:
fb:07:68:2a:d6:a3:11:a6:c7:9b:14:cc:4c:19:23:fe:f2:38:
0e:44:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:40 2025 by rpki-client