Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer
File: YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer (raw, json)
Hash identifier: HAIZJcb3J7xVcZGVEumRJsm0oeEuoj44WtP6PqpHtU8=
Subject key identifier: 60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA22C928B8DC260439D6B403DD3E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.22.243.0/24
IP: 193.22.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a2:2c:92:8b:8d:c2:60:43:9d:6b:40:3d:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:d6:fd:4f:fa:b1:44:dd:a2:12:24:57:ec:
1c:e8:fe:ab:6f:c4:04:6f:9d:ce:5f:3d:1f:28:3d:
0c:2a:fa:ba:eb:d5:0d:83:c9:88:05:23:b1:de:28:
ea:d8:12:00:54:77:c6:35:95:1c:e8:6d:e4:de:9b:
c5:26:0e:63:f7:f2:9e:3b:c8:b6:58:c0:9c:68:96:
b5:30:d2:3e:98:f8:db:c6:2f:55:f1:8f:c9:d9:bc:
68:26:de:62:da:c4:34:14:16:67:4c:2f:a5:3a:fa:
c0:c3:88:94:f0:78:bf:1a:bf:b1:94:ac:d9:a2:e1:
dd:db:07:fb:68:0a:e0:0f:9e:ef:37:fd:db:c8:72:
10:b7:78:66:6b:10:68:28:aa:ff:64:76:53:bc:a8:
a0:03:15:f1:cc:49:5a:cb:cc:84:37:b9:58:31:8a:
8a:05:11:b0:31:eb:b7:69:bf:f8:f8:fe:57:c7:31:
cc:7e:e8:03:54:e9:b3:ea:e9:6b:a6:b3:b7:d0:94:
44:d8:d8:f8:d7:f4:46:3a:40:9a:41:e8:84:98:dd:
33:fd:33:f1:72:bd:d1:45:c7:9e:8c:5b:50:a9:8f:
77:3d:0f:06:fd:07:a2:ed:23:5f:59:10:03:14:01:
e4:12:b1:11:42:d4:c7:9d:fe:71:d2:40:0f:44:d8:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.243.0/24
193.22.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ad:01:97:43:b5:ba:ab:fe:3a:3b:65:7d:9c:62:5f:47:95:
ba:88:30:1b:1d:79:45:e5:12:fb:3d:cf:26:c6:89:13:73:12:
c8:b0:51:4d:6b:fd:36:e4:1c:0d:e6:f9:d4:c9:f8:e4:e6:42:
d6:a9:c4:4a:00:98:d4:ac:05:22:dd:a9:a2:9e:12:14:10:b5:
57:74:69:04:67:0d:c3:ff:5e:10:1e:ba:ca:62:9e:a6:6e:30:
68:f7:f0:ea:78:b7:71:35:fd:4e:2a:fe:eb:af:56:7a:af:54:
33:d7:ce:81:3d:c2:ae:d2:a5:cd:84:57:c3:80:e2:c9:56:59:
18:fe:5d:87:03:08:c1:e6:b9:ab:e0:dd:85:b0:5b:9e:0e:fa:
f7:da:85:d5:74:d9:0d:a7:09:15:75:eb:a2:5d:7f:f9:89:c3:
33:9e:07:3d:c2:33:a1:d8:ae:e3:70:2e:91:b8:c8:d0:d3:b9:
6a:8e:ce:4d:13:7e:68:b3:83:a9:5c:1c:12:b8:4e:4a:9f:7f:
1d:bc:2a:37:14:f0:a7:0c:2c:5a:d6:fa:ea:7e:cb:af:76:e1:
29:17:1d:24:58:77:72:20:c6:ac:ef:0c:04:b2:48:6a:77:d7:
4d:8e:da:28:18:d8:57:99:99:23:5b:1b:be:03:e8:02:f5:f4:
97:11:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:36 2025 by rpki-client