Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
File: YTChAogFFzqiJUSk67mECskbyNA.cer (raw, json)
Hash identifier: +0urJkZ8O8c/FfKwynvaU3Uc2UELtDqbARChwtBZtfg=
Subject key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7151462227B963542BAA417722C67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213022
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:15:14:62:22:7b:96:35:42:ba:a4:17:72:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:af:b0:83:4c:ce:b3:d9:f6:e8:2d:df:76:
00:5d:53:3c:58:2e:13:40:2b:7c:a6:7d:73:7c:93:
3a:2d:20:a5:e0:22:30:fe:2f:06:cd:58:ce:3b:35:
56:c1:b5:b6:bb:31:9c:34:27:b7:ab:92:80:93:cb:
00:51:e0:a6:ec:9a:a8:57:0c:cf:5a:8e:16:ba:d2:
6f:65:0d:83:69:9c:c2:77:42:bf:f4:49:c6:80:5c:
f3:b2:cb:6e:46:c8:9a:05:35:f6:ca:0c:cf:81:a3:
2d:50:45:5d:ec:d0:e8:f9:cf:b6:e4:7c:a7:e6:c1:
c0:ba:f2:19:4e:38:11:52:62:88:e3:f0:8f:2b:f3:
0d:3d:c6:cd:88:38:30:70:02:ea:4c:d3:76:0f:de:
aa:2d:13:94:ba:27:5e:96:9f:4b:78:00:9e:82:c2:
da:93:37:28:c8:3c:1a:4e:b5:b5:41:f3:89:64:d2:
13:ab:e7:da:d7:6d:f9:d2:29:f3:4e:3f:16:02:ae:
28:4f:9b:cf:18:9d:6b:20:9e:e8:5d:43:f0:d9:b5:
dd:13:fc:0c:09:42:9b:ff:4e:fb:d4:34:93:37:69:
4f:11:91:2f:e9:0f:8d:38:90:0d:72:98:64:10:ee:
ce:69:33:b8:c4:4f:19:00:19:5f:0c:55:b6:e0:cd:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213022
Signature Algorithm: sha256WithRSAEncryption
7e:39:95:1d:22:11:d4:02:db:38:b4:e8:5c:be:e5:31:67:24:
29:19:17:b1:1a:1c:e1:60:ad:f1:00:4c:88:e4:cf:c5:ab:9c:
a3:72:ec:62:94:d0:7f:73:46:ce:4c:a5:56:d1:1f:ff:be:1d:
46:30:ae:87:0b:26:03:7a:d4:51:5b:4c:d4:5a:0d:b9:c9:58:
98:4e:36:e3:38:73:56:a2:3f:a5:5e:e9:07:ad:82:84:6d:ac:
d9:34:70:75:bb:c4:3f:ca:35:36:9e:23:b5:20:71:6f:2a:d0:
7f:65:97:45:fc:99:54:b8:89:6d:1c:1b:f7:70:df:2e:43:1e:
12:12:6d:e8:93:24:9b:bd:d2:30:f4:e0:0e:3a:2f:ef:b4:b8:
a3:72:0f:62:78:c2:b2:b8:94:f6:6f:8a:f0:01:c2:ea:bc:28:
ee:98:e8:df:76:82:67:5e:de:68:e5:3b:11:7d:b6:7e:4d:0f:
c8:ad:3e:c0:ad:a3:52:99:63:b9:f2:c8:a4:e9:38:a6:43:ac:
4e:45:6b:a7:97:25:ac:20:a8:bc:31:fb:c2:90:ae:8c:29:45:
9e:5e:52:0d:4a:e5:30:1e:7e:9a:5c:00:a5:98:cf:c2:a4:46:
ba:0e:53:b0:c6:6a:90:3c:b0:5a:0f:e8:87:8c:77:27:43:7f:
51:47:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:34 2025 by rpki-client