Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer (raw, json)
Hash identifier: UB1sI1bWimVJg5Z8wgR92nlHRPbBtCxiseXPZII5QZI=
Subject key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682EB1312A6FE3BD1241152AD45387
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59494
IP: 185.145.140.0/22
IP: 193.187.80.0/23
IP: 2a07:4480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2e:b1:31:2a:6f:e3:bd:12:41:15:2a:d4:53:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:ed:29:34:9b:17:77:c1:ba:ca:7b:cf:d8:
fe:83:d8:8c:17:44:80:6b:25:dd:c7:14:8e:55:7d:
17:c3:ec:07:d3:b7:fc:46:16:3f:83:4b:ee:63:f4:
37:df:3c:87:8e:32:ab:1a:7d:87:11:2d:57:e0:3f:
9b:ab:c5:8e:7a:49:79:9c:ab:50:43:c1:7b:09:da:
47:2a:79:5b:7e:fa:00:d5:33:06:b6:b7:b0:73:f5:
a2:c9:41:03:c3:36:42:74:91:da:c6:88:35:2f:b8:
dc:c0:c6:e2:b2:fc:4b:58:76:f8:44:00:e4:34:85:
c1:fa:cf:e3:e1:73:0f:ed:d1:f0:ce:99:20:49:ad:
61:74:7a:48:4d:1e:ac:89:00:c7:a7:12:98:55:52:
d1:5c:97:44:94:87:a6:ee:f0:12:e3:58:71:86:61:
ef:c4:77:d6:0e:ed:17:f2:2e:c9:f4:94:00:cb:65:
42:e2:f5:3e:e6:26:f9:0c:54:e8:4a:25:d6:a5:c1:
57:dd:95:e4:fc:1b:fd:39:98:c9:d6:a5:91:97:40:
e3:9f:4b:14:f6:58:45:35:ce:60:b7:bd:4f:3e:ad:
b4:5e:a0:3b:e6:ea:1f:06:1d:31:2d:be:47:b0:9f:
d9:60:16:4f:20:b2:b4:72:bf:48:61:ef:14:68:45:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.140.0/22
193.187.80.0/23
IPv6:
2a07:4480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59494
Signature Algorithm: sha256WithRSAEncryption
04:49:5b:63:d9:a0:d6:de:a9:cc:ed:22:5d:7c:75:0f:d8:2b:
05:01:05:d8:2b:43:e4:6f:98:b1:7d:4f:bc:9b:3c:b0:7d:d0:
3b:10:6e:c0:81:65:35:c3:9d:c3:a8:fe:0c:8c:8b:08:08:28:
7e:c3:6a:b2:90:1d:81:fd:2f:f1:a4:31:0b:db:5d:7e:18:ac:
e7:2d:48:54:bf:e0:27:fb:9b:fb:02:27:be:c7:54:d9:9f:61:
e7:44:f0:ca:af:d8:ee:11:2a:6e:d9:42:ab:f4:ad:eb:0d:35:
81:33:c9:38:78:51:75:a9:49:ac:c8:40:6d:fc:a1:06:70:47:
64:15:06:7d:cf:b9:d4:b9:b0:72:17:bf:62:c1:09:bd:20:80:
1d:80:cb:4c:09:9f:fa:56:e9:c9:bd:a2:31:48:be:f2:b1:8f:
46:95:f6:b8:8e:d9:f5:0f:67:29:21:48:d4:79:1f:7f:df:d8:
89:c5:9e:0f:12:47:d5:84:0d:aa:93:e3:b9:fa:1e:7f:e8:57:
30:14:de:72:4c:8b:17:ab:bd:ce:8c:ce:63:07:33:43:61:78:
cd:95:a4:cc:19:0d:1e:3a:eb:70:43:20:f5:9c:6e:d5:76:89:
27:0d:d1:30:f9:ff:38:df:5c:c6:73:05:3f:c7:7d:3f:6f:37:
93:f1:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:44 2025 by rpki-client