Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.cer (raw, json)
Hash identifier: Y/2liHdS4kN4r+tCq7tFNrPwLNEM+9IzhUiuuOfjWhc=
Subject key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9DE933F94E625DEF8C657851B15D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44498
AS: 49906
IP: 2a02:2960::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:93:3f:94:e6:25:de:f8:c6:57:85:1b:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:80:c4:83:2d:6c:e8:e0:ce:d9:e0:0d:8b:
50:cd:0d:2f:68:d2:3c:a1:42:26:ab:e4:9d:08:0e:
ef:96:32:a4:99:17:73:3a:66:90:2e:ba:df:db:10:
d5:56:84:ff:1a:32:54:ec:16:de:cf:b3:a3:51:0c:
7a:04:4e:12:3b:ca:fa:e8:b6:ea:33:22:6b:26:6b:
fb:ed:ab:7e:43:96:ed:ff:fb:ff:4f:00:f0:d3:70:
b8:b0:ce:c0:cb:02:0e:8e:a5:1d:e3:3a:98:81:e7:
d9:c7:7d:44:03:31:8f:e6:54:d0:ea:49:f0:5b:24:
a8:8b:38:2b:3a:0b:79:82:ff:c2:27:f6:ce:42:19:
7a:42:58:07:6e:4c:7b:ca:67:5a:09:31:74:68:b1:
17:d5:d7:06:a4:1c:d6:b6:3c:bc:17:08:ab:dd:58:
14:5e:8c:06:85:de:d0:f7:2e:c5:a9:ff:69:1f:c0:
54:70:5c:cb:0f:c1:7b:22:80:f5:37:82:c6:ec:d1:
03:58:ab:04:4a:e8:f4:ca:b7:ba:f4:b8:91:f8:2c:
87:5d:08:63:f1:d1:6e:e3:c9:aa:d6:67:20:c1:a7:
f2:1c:5f:f0:7b:bb:9f:8b:dc:f3:af:a5:af:33:18:
8d:ac:82:78:0a:f4:b2:d0:0b:57:1f:d7:54:59:2b:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2960::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44498
49906
Signature Algorithm: sha256WithRSAEncryption
6f:d1:ed:2b:88:8b:b8:05:39:18:0b:46:58:61:a1:ce:c4:7c:
24:c7:47:b5:21:ef:99:f1:26:8e:13:c8:d7:87:fb:f7:6b:5f:
8b:a5:8c:2f:88:02:ac:86:9a:0e:8c:9d:6d:dc:54:d4:38:11:
ef:e9:49:58:21:61:ab:76:74:6c:b6:09:9b:cc:52:3c:38:69:
5a:d1:43:40:d9:13:2c:10:83:18:aa:bc:b4:61:e0:97:fc:fd:
9f:41:1a:4d:be:a1:fc:72:23:ac:54:80:b1:de:da:c6:df:21:
54:20:15:a9:87:6f:41:11:d3:c0:1c:b4:07:3a:48:62:6b:bf:
13:88:25:7e:12:56:61:0f:1b:4c:37:39:c0:ca:cb:c6:90:7a:
7a:2a:f3:84:bd:3a:3e:e2:f3:a8:49:a1:6c:90:96:f6:1c:a4:
45:f5:7b:d0:27:54:cc:ba:a1:c7:c2:d1:1a:53:fb:17:f0:87:
cd:00:da:e3:d4:61:87:34:16:82:bd:c5:91:bc:25:2d:1c:54:
7d:f3:bf:86:0f:69:de:df:e9:c5:79:d1:c7:64:c5:a7:b9:c7:
73:70:0b:03:f0:0d:41:cc:41:1c:e0:b2:e4:04:26:55:f1:1f:
e0:48:39:f3:b0:a7:e4:95:13:d3:a1:97:45:f8:57:ea:93:e1:
89:3a:fc:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:25 2025 by rpki-client