Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer (raw, json)
Hash identifier: taXAGXl230noyO0MfS7FI5RXYMi5tuhAkd4tCDlDvtU=
Subject key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E0E4C08446A522AF1D2D87A6BB40E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202516
IP: 193.58.164.0/22
IP: 2a0c:9540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0e:4c:08:44:6a:52:2a:f1:d2:d8:7a:6b:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:88:a1:0f:ae:f3:07:29:32:e7:40:4a:e1:9e:
42:f8:b3:4d:e7:97:2d:06:1d:8d:55:48:8a:0f:13:
80:18:c6:48:88:4a:bb:67:05:a9:6f:c9:9c:8f:54:
a6:e4:81:f7:16:03:76:56:37:71:73:c7:b7:c9:67:
30:8c:fc:65:25:77:04:4c:5a:0c:6e:f1:d2:78:b4:
86:e0:0e:60:31:85:2f:db:a7:8c:71:49:02:89:ca:
f4:62:f6:66:5c:dc:49:6e:d2:1e:69:db:17:14:c6:
42:4c:de:d8:27:67:a4:1d:b4:02:c9:8d:11:c3:5a:
a4:40:59:b6:f8:ca:95:28:f7:84:51:0e:c8:db:05:
97:c5:73:0d:f1:ca:d2:83:75:bb:7a:14:34:3a:94:
15:2d:b5:a5:9c:f8:9d:07:75:9d:3f:af:2d:aa:59:
9d:5c:bf:43:0b:af:18:78:f4:db:08:80:ac:f8:17:
d3:a0:9b:24:f4:e4:11:a0:6e:83:6b:ea:15:17:97:
03:2d:b2:17:1d:91:03:89:0f:55:4c:fc:98:d7:3d:
6b:a8:f1:10:ef:c2:8a:cb:f0:16:3e:11:e7:04:c2:
1c:b4:f4:4c:d7:00:34:1f:ce:5c:57:3b:30:6f:11:
06:eb:f9:9c:ee:40:29:21:33:ec:cf:26:e6:c6:e5:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.164.0/22
IPv6:
2a0c:9540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202516
Signature Algorithm: sha256WithRSAEncryption
31:f8:50:01:37:da:52:6e:6d:b6:da:9e:c5:c3:5c:93:72:67:
46:4b:d1:74:6d:40:f6:ad:d5:04:4a:51:98:d0:cb:55:7c:76:
6e:d4:24:6b:ee:8f:9e:aa:62:93:de:ef:b1:6e:3c:83:a2:f6:
41:77:5c:ce:b0:b0:31:aa:95:32:e2:84:fe:68:25:4a:c4:f3:
64:32:b0:83:a8:3c:24:e8:0b:ef:2d:3c:8a:60:b8:ad:4f:27:
f4:2d:d3:0f:13:9d:3d:54:55:c3:1f:bb:f0:a5:d7:a7:3a:62:
8b:91:0d:c1:1b:44:6e:06:5e:4c:de:b4:e4:ca:ff:95:c3:94:
5e:a0:e4:a6:cd:72:c6:9b:fd:7a:85:cc:76:0c:13:4d:ad:10:
99:55:7f:e5:8f:c6:a9:e1:7f:1e:d3:43:bd:6b:65:fa:35:75:
5b:84:1f:59:05:5a:16:b4:30:84:b6:60:fe:9a:05:70:73:39:
a1:0c:dd:57:67:18:29:4b:2f:3b:93:c3:7b:51:c6:04:9e:6a:
92:97:8a:b8:4a:06:24:78:38:7e:3f:06:4d:00:2d:f6:1a:00:
64:d8:2e:5e:5e:24:6e:34:5d:cd:ca:48:b7:36:0e:a4:3e:d9:
d7:e0:c2:64:86:bd:0a:ec:ff:c2:05:be:4e:e2:8e:eb:47:01:
40:e2:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:42 2025 by rpki-client