Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
File: YoVOil7h3sifJbKnhZAj_7Ejufg.cer (raw, json)
Hash identifier: hDylKX8r8mUj69rmc8D9o+cnmq8y1OhJ+pkZUjs2hBo=
Subject key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252234DF9E8BD3F36DFB1E2095827E68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.65.168.0/22
IP: 194.33.98.0/23
IP: 195.12.40.0/22
IP: 195.43.56.0/22
IP: 195.90.112.0/23
IP: 2a05:80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:34:df:9e:8b:d3:f3:6d:fb:1e:20:95:82:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:4a:56:d2:03:93:39:23:69:cf:17:37:ed:
fe:8a:96:3e:f3:fe:db:52:ac:2a:2b:93:04:eb:1c:
0c:ba:a3:0c:e8:7b:d2:00:57:69:46:df:24:5e:ab:
3b:8e:24:5b:83:82:3a:e5:8f:04:ea:82:ea:2c:9e:
f2:02:61:3f:59:3c:bb:15:2e:6c:9b:e3:e5:03:c7:
ed:ad:f2:d3:ca:07:1e:ec:25:5c:7e:bc:ab:c1:44:
c6:39:e2:ec:93:00:38:f6:33:20:d3:c3:13:79:06:
4e:03:d9:2d:d4:dc:99:2c:12:ef:f7:87:85:6b:68:
6b:8b:92:2d:0a:5f:c4:63:94:93:8d:3e:45:3e:06:
86:ae:f2:cb:92:86:90:52:86:03:56:f9:60:2d:ad:
98:b3:88:27:40:6f:77:03:e1:80:fd:61:17:cc:6f:
08:49:79:2c:e9:55:02:61:a0:d4:d2:08:40:92:62:
61:03:a6:81:0c:0c:59:01:a0:31:f1:4b:90:67:60:
f1:ad:35:b2:7c:c8:a5:60:58:01:46:de:15:77:8e:
d1:b4:8d:26:6c:5a:4a:19:da:84:5e:cd:08:5c:4e:
de:25:14:45:ba:6a:86:2e:74:fb:7d:c6:57:c3:cf:
b1:ff:5b:17:f5:fd:fd:ce:11:5a:9b:17:00:06:5e:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.168.0/22
194.33.98.0/23
195.12.40.0/22
195.43.56.0/22
195.90.112.0/23
IPv6:
2a05:80::/29
Signature Algorithm: sha256WithRSAEncryption
72:b4:c9:12:38:f8:bb:a6:e3:ac:2a:30:17:d1:75:95:af:52:
67:ce:63:fd:70:39:6d:3a:fc:41:a3:53:7c:04:ef:9e:5c:6b:
91:fa:87:84:ee:cf:c9:9b:d1:f0:63:f0:25:43:c7:6f:a8:65:
58:c0:28:76:a1:dd:cc:54:43:dc:9b:99:44:f7:f3:2a:88:55:
ae:fe:12:ec:fe:c0:32:21:ca:b4:8c:43:e3:58:45:5d:e6:4a:
c9:ba:76:85:6d:a4:76:be:a9:87:55:45:ed:21:f7:7f:9d:2b:
09:81:ab:56:b9:0d:e6:b6:01:50:10:ac:e2:bb:3b:66:5e:d8:
43:2d:9c:fc:de:3b:ab:df:6c:0c:95:c2:7d:ea:ad:30:be:79:
4a:30:c4:d3:7f:56:bc:de:4e:74:09:72:da:20:90:d0:7e:fb:
03:99:c3:0a:96:00:eb:2c:d8:4b:92:93:5f:70:c7:52:2f:09:
21:95:4e:a8:3d:4a:41:7e:19:22:8d:58:c2:30:1d:fc:3b:23:
22:fe:cd:f0:f8:6b:94:bc:04:d9:3e:0a:4a:e2:86:9f:36:1a:
64:70:2d:20:94:a4:d9:6e:f7:62:12:68:78:ff:93:f4:9f:5e:
8a:b0:5a:0b:f2:7e:0f:ea:6f:5d:5d:b3:3b:bd:66:15:4f:ff:
eb:73:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:39:57 2025 by rpki-client