Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
File: YnswW6G6vvS_7GhYHkA51BtfcfI.cer (raw, json)
Hash identifier: Kb5YKhhpRQ8yc9dSC/LTgZBxgoXm8qBgYFbLE2EZuWo=
Subject key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F63C64EF4BE799C8B1A2D45CBFBD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8224
IP: 159.253.96.0/21
IP: 185.79.52.0/22
IP: 195.72.192.0/19
IP: 2a01:2d8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:c6:4e:f4:be:79:9c:8b:1a:2d:45:cb:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:d1:2d:d7:12:6f:01:55:98:ab:51:fc:de:
89:94:35:74:9d:bd:9e:60:b6:19:bb:6a:9b:d5:b5:
cf:1d:88:fd:84:3e:00:0d:14:a3:0c:8d:5a:34:80:
25:8a:85:af:43:5c:20:c7:56:f2:06:b2:79:e3:d3:
e4:16:7b:aa:a0:f4:b6:8d:14:20:58:10:85:52:99:
29:48:29:e5:5a:33:72:1a:d4:2a:b6:da:a7:8e:f7:
6a:a0:0c:06:66:76:22:86:4e:ff:91:f0:2a:79:85:
de:88:93:26:89:3e:5b:11:3f:c1:cf:41:fe:51:92:
b9:89:92:ad:6f:45:2f:53:ab:6b:db:11:e1:dc:72:
0c:57:ee:ee:bc:b3:ea:ec:33:ca:e0:97:f3:17:be:
2a:20:a6:7d:67:3a:7b:1d:bc:15:9c:5c:3e:8a:a1:
fc:a2:61:0e:52:7c:84:04:14:aa:7d:e4:7f:07:50:
7f:ff:f0:34:b8:7d:5a:b6:dc:b3:2e:db:0b:1e:a4:
7a:74:f0:92:29:25:12:36:27:aa:2e:9c:ee:6a:13:
90:37:83:42:cb:17:ef:a4:fd:64:83:e2:fc:c6:35:
f7:5b:dc:65:de:68:04:01:23:31:3a:68:71:b4:65:
e7:f0:79:48:9d:49:12:2b:8e:20:64:d8:c3:79:f2:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.96.0/21
185.79.52.0/22
195.72.192.0/19
IPv6:
2a01:2d8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8224
Signature Algorithm: sha256WithRSAEncryption
99:66:03:0c:f1:f1:70:bb:ee:b6:48:e5:d3:54:33:66:b7:79:
de:6b:f3:df:72:58:6b:68:9d:89:6b:f9:4a:2f:3f:ac:38:f4:
33:b0:c2:a9:53:b1:9b:60:dd:cf:86:f0:ac:b9:7d:82:f3:8b:
64:57:d7:8a:37:74:48:7a:79:d1:c1:e2:49:34:ef:1f:f2:ae:
25:16:d5:56:36:1e:7d:ab:ba:f2:4a:64:95:1f:35:09:20:0a:
7d:f8:f1:69:71:c4:36:e3:be:f1:05:4f:1f:ae:1d:d5:18:82:
75:65:c0:ad:04:24:3a:24:6c:ff:a2:95:1e:9e:5f:13:fc:44:
e5:13:9d:e5:d2:0e:6c:26:83:df:4c:69:31:ea:33:1f:3e:b6:
4a:d5:d9:34:71:48:bb:21:61:a3:df:b2:ac:86:e8:d5:92:92:
a9:9d:a2:51:48:f1:8c:4f:1c:39:fe:fd:a5:1d:06:ad:e6:42:
83:98:91:38:61:73:07:da:c3:41:72:eb:4b:cb:3b:8c:32:b9:
7b:03:83:1d:77:af:15:06:7b:18:6f:9a:f4:11:d1:4d:ea:b5:
94:0e:af:42:a7:55:2f:45:e5:90:5a:b9:04:a8:18:fc:82:b6:
1e:18:8f:11:41:7a:a0:e1:94:46:ce:36:a9:d7:6e:7e:30:82:
66:6e:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:21 2025 by rpki-client