Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
File: YjqxggzkjFedpAxm2FJl8cLPy04.cer (raw, json)
Hash identifier: M2iEUC9R6LxYIrCdUpyqr1Lzw9kXjOXPp10vSJKtxYE=
Subject key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD2D3ED5F5665D47E7D3C13288FD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216453
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:d3:ed:5f:56:65:d4:7e:7d:3c:13:28:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:32:d5:6f:e2:1c:cb:18:5e:01:e0:47:00:
a5:ab:03:35:55:44:5e:ee:95:05:c0:b9:a3:3e:ca:
6a:77:42:a3:e8:b6:55:af:ea:c5:34:02:77:26:b5:
b6:ae:82:c1:25:2a:16:99:f9:3a:f6:40:e3:6e:06:
5f:44:24:62:f7:2e:8e:85:23:2a:02:6e:81:fe:f9:
8b:7b:e1:8b:64:4d:2d:33:49:dd:b5:af:44:48:2e:
a0:b3:b8:32:35:5b:a7:db:ba:f1:9a:3d:81:ad:1f:
39:66:1a:75:45:1d:f3:b8:6a:ab:d0:53:3b:8d:87:
40:59:d1:b5:dd:12:b2:04:c0:ef:a8:8e:6b:59:42:
48:d3:b5:31:86:f1:14:8b:2a:52:f1:64:46:41:d6:
0a:f1:31:42:13:67:82:a8:d9:56:f9:a0:ae:64:b5:
bd:7d:e5:d8:81:be:62:1a:cb:70:41:a2:4a:b4:6e:
ce:b3:fc:fa:02:43:ed:b3:2b:f1:01:21:0b:7f:22:
fc:d4:e6:bc:5d:4b:2f:de:72:4d:71:db:8a:d0:0f:
53:17:99:39:23:ed:bf:d6:ec:cc:dc:7a:9d:48:01:
d3:ef:da:8b:3e:15:0c:42:5a:e2:c8:8a:8e:a7:39:
36:07:dd:d7:8e:ca:c8:16:6d:bf:eb:6d:de:d5:2d:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216453
Signature Algorithm: sha256WithRSAEncryption
a8:a8:61:4d:c1:0a:b8:0f:6d:34:00:02:92:2c:c4:76:13:d2:
ab:07:8d:a9:7b:93:34:05:f0:3c:75:01:b4:65:29:c8:5a:0d:
8a:c7:bc:f1:70:59:1f:34:c6:ed:da:d8:47:42:a7:ce:96:59:
2f:b1:95:46:57:c6:9c:67:f4:a5:b1:5b:de:1e:c1:cd:b5:a1:
cc:30:a0:32:5d:40:a3:18:24:7f:e2:52:f4:7c:1c:d0:52:5b:
75:c1:fd:4e:ec:e1:36:a8:45:c1:da:8f:f1:92:a3:b0:74:41:
9d:7d:15:7e:53:6a:df:3b:07:3e:b4:a2:f3:94:a9:d6:d1:d7:
5c:5e:d4:4b:2b:46:26:40:a7:f4:d2:51:39:59:a1:5d:5e:e1:
6e:39:98:d1:9a:ce:d8:fb:40:00:7b:b6:35:4d:c5:d9:85:51:
e7:24:1f:f4:65:39:60:31:2b:d2:21:20:9c:2f:30:19:20:fd:
a1:f4:cc:fc:38:23:99:2b:eb:1c:e3:08:09:8f:da:5e:21:0c:
d4:bd:5e:bf:39:a5:6f:bb:53:82:60:13:79:05:dd:33:54:60:
a8:e4:f7:8b:41:b2:e7:61:88:42:a1:cf:08:2e:c7:5a:32:10:
18:b0:41:61:04:1d:ac:7b:a4:1a:64:de:a2:69:1e:9c:5f:24:
72:e6:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:53 2025 by rpki-client