Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer (raw, json)
Hash identifier: Zxw4zO6/yEAAB9DRNNh8kx4xzIrapO12k4lcXKOK6y8=
Subject key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3DCA2D009B0EEC23DCFDC5DA650C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51644
IP: 91.199.61.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3d:ca:2d:00:9b:0e:ec:23:dc:fd:c5:da:65:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:cb:96:85:e6:f4:b2:45:f3:83:52:c2:82:
9c:65:cf:6e:ad:d5:a6:0b:2e:29:fe:76:39:08:bd:
fb:20:8e:21:4a:cd:a1:e3:16:c8:40:b6:f0:0e:cb:
5e:f2:24:08:33:28:58:8e:c7:a8:12:bb:22:e2:1e:
a6:d8:e3:0b:ac:d7:06:bf:91:4e:95:7f:14:30:6c:
a7:9d:ef:30:b3:fc:f0:15:a8:a1:6f:e7:eb:19:79:
78:e6:20:e5:d0:b0:aa:98:e2:a2:a0:8a:7b:3b:ea:
c5:e2:70:27:e9:3e:d8:ad:6b:f9:91:ef:5b:b6:a5:
60:6f:06:82:df:19:c1:be:0d:4c:10:83:f7:3e:e6:
d5:8f:1b:d4:59:46:4e:7a:6e:59:65:ef:1d:84:ae:
23:ad:08:47:81:39:d4:90:cb:f6:4b:d1:db:96:8d:
b7:75:3f:b1:52:1c:20:2e:f5:dd:72:18:29:c3:e9:
c3:7b:4d:c1:49:77:10:31:48:e1:fc:5e:94:ca:5e:
f0:36:f6:cd:0f:eb:21:2e:96:bd:bf:b9:94:eb:3d:
a0:7e:3f:80:55:7c:54:95:a0:46:bc:c6:4e:30:c1:
f4:52:3a:ee:e4:5b:67:c4:7f:5d:cf:56:c5:34:e9:
ac:dc:91:dd:fc:32:42:60:1e:bd:b9:fc:2d:36:13:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.61.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51644
Signature Algorithm: sha256WithRSAEncryption
6f:f2:a3:9e:0e:16:7e:ec:43:f6:3b:64:64:84:a9:f1:4f:ce:
18:16:43:6f:c3:43:71:ed:bd:4e:10:76:35:51:4f:e4:e2:e9:
a0:1b:b3:63:99:8b:6a:00:71:ec:31:3f:2a:b6:4c:9a:2a:04:
3b:57:fc:bd:15:39:fc:b5:cd:21:58:97:21:25:9b:39:be:73:
cd:d6:98:82:0d:be:13:57:71:0d:13:1d:2c:d5:cd:2c:a5:e4:
a7:59:90:50:b3:f2:77:95:05:ad:c1:ad:ac:04:bd:0f:26:ce:
c4:86:08:c6:ba:16:fa:e5:2f:89:47:f2:7d:bf:96:8a:e4:8a:
2f:5c:97:ce:c2:f6:98:8d:da:81:d1:43:4e:a0:22:5f:b7:6f:
b1:c0:13:c8:ec:a1:37:24:49:43:02:ad:3c:4b:82:a1:d3:ac:
9f:9e:15:67:e3:26:51:a3:ff:fd:ad:60:fd:89:c1:67:63:39:
20:80:b6:1f:fe:f0:19:42:fc:80:3f:fe:d2:7a:d1:3a:f8:12:
17:01:5d:cb:e3:72:7d:cf:d4:c3:e1:3c:80:97:f9:4a:65:ed:
c7:30:11:80:e2:75:4e:2c:a2:97:d0:70:fc:31:2d:35:32:bf:
38:34:cd:3c:f4:bb:c6:5c:d3:bd:91:7f:2a:f3:3a:50:9e:eb:
18:cc:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:31 2025 by rpki-client