Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
File: VYR5uCKzUywZue4BAvmaiYUN8SQ.cer (raw, json)
Hash identifier: S/y9QwtUn4DJ/VwEEoIueQbHfnF3tPOsskHvWIdn4ig=
Subject key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2821B87456F96AC416AF5EC1588E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.118.212.0/23
IP: 2a09:b1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:28:21:b8:74:56:f9:6a:c4:16:af:5e:c1:58:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=558479b822b3532c19b9ee0102f99a89850df124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:03:f6:d4:05:df:fb:15:18:cf:91:35:cb:
e6:df:5c:2a:58:a8:36:ba:f3:af:64:28:aa:95:b3:
2b:ea:06:fb:6a:14:2a:98:1d:a4:fa:8c:b2:e3:c1:
0e:3b:02:6b:1d:75:01:4f:9b:2c:6c:d9:19:1f:1e:
fa:a6:b3:fa:37:98:f6:97:67:e9:08:6f:6a:fc:82:
e2:05:e6:f5:0f:48:d2:2c:a4:50:a1:6c:f1:8a:4d:
03:96:12:19:1c:61:26:59:fe:71:13:a2:0c:a6:6e:
30:98:55:a5:13:d8:1e:2c:08:dc:08:73:4f:a8:68:
3c:10:55:48:2e:16:b9:e9:0f:41:3c:e1:d8:0f:ed:
7b:f7:0f:a6:63:c0:9e:73:c0:75:ea:0b:a2:ec:ee:
4e:78:61:9a:67:b3:06:38:34:c2:cd:f5:5b:1c:93:
b2:6f:0d:71:85:0e:70:39:8f:bf:cf:89:9d:5b:89:
53:04:0b:d9:20:2b:a9:1a:24:a9:b3:de:cf:05:75:
96:b9:38:e0:c7:50:0d:94:7d:25:26:05:24:6a:cc:
8b:0d:b9:0f:5d:ad:8d:04:92:ac:6d:0c:d2:fc:f5:
ef:60:2b:aa:61:69:f6:bc:2b:24:43:70:f8:6b:17:
0f:a8:0b:72:d8:20:2d:da:dc:2c:f1:10:c8:a2:dd:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.212.0/23
IPv6:
2a09:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:6b:5f:3a:1a:8a:0b:b8:1f:d2:4b:c0:0a:db:ae:46:43:9d:
cb:9a:82:96:d9:18:a0:d5:1b:f5:21:90:8e:fc:38:17:2b:74:
08:90:37:e3:55:8b:1e:39:18:60:f6:4a:3e:45:24:4c:f8:01:
45:8a:07:5e:eb:b7:aa:53:7e:ad:c1:7f:de:88:ea:4d:42:d7:
43:d7:53:67:93:bc:1e:a3:30:71:2f:8c:c4:23:87:c4:6a:ec:
3e:90:15:e4:26:79:1c:b0:79:07:4d:53:df:ae:71:77:b8:39:
28:fc:c1:d6:09:66:69:33:a8:24:05:03:af:33:97:2b:86:56:
0e:88:fb:6d:05:f4:71:a6:d4:cb:dd:0c:a3:23:35:3d:ef:d9:
39:06:7d:ea:dc:80:c7:81:b6:60:66:af:bc:3f:12:7b:72:df:
7c:54:54:7e:0f:7e:de:81:cc:e6:34:f4:1e:5c:7b:a4:a0:93:
fe:4d:5b:a0:db:82:a1:f4:82:9d:da:05:92:be:fc:50:d7:a6:
c9:52:4f:22:60:df:f2:a9:a6:2d:c1:80:85:46:f7:de:e2:92:
e4:b5:c7:3a:f7:04:c1:a1:62:34:88:58:81:d3:d0:64:2c:ab:
76:ac:da:31:5d:93:2c:f1:b7:e2:54:23:5a:0d:53:1f:8a:53:
d3:e8:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:31 2025 by rpki-client