Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
File: dy9i9-iZgXRBGAk19CuCo5mAotw.cer (raw, json)
Hash identifier: +C+hLDNFckTOQRqq8ODbDy05RMoy4asJbJ9tMt/oM1k=
Subject key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D0B1FD9EB9841205B2440EB9F03C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49082
IP: 46.19.16.0/21
IP: 95.130.216.0/21
IP: 185.4.36.0/22
IP: 2a02:6340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d0:b1:fd:9e:b9:84:12:05:b2:44:0e:b9:f0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=772f62f7e899817441180935f42b82a39980a2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:d4:02:a8:86:3f:af:3c:88:1f:73:a5:6b:
41:cd:b0:9a:69:54:07:8e:09:db:ad:36:9d:c2:a2:
61:ad:13:a4:c9:66:5c:99:7b:88:a9:ca:78:0e:53:
67:ef:98:1e:8b:a4:e8:ec:8e:c6:f9:ca:27:d0:e2:
2f:6c:8a:78:78:a1:9c:44:21:d4:1d:96:a5:5a:41:
f6:44:03:ce:fc:8b:9d:a7:1f:62:ca:fc:fa:f5:a5:
f4:0d:f6:26:c4:ba:bd:9d:21:44:67:cc:c9:72:0e:
7b:95:f0:de:cb:8d:42:f8:77:a5:78:fa:58:f1:86:
6b:8e:23:fc:82:cd:85:df:b4:ea:86:ec:57:89:f5:
a3:a9:93:db:1b:91:52:12:f6:0d:10:95:b2:e5:56:
7c:51:e1:93:52:a8:42:3e:19:0e:d6:a4:c6:47:06:
1c:f0:67:94:0e:d7:89:8e:d4:99:e4:f8:ed:81:4d:
e9:0b:0c:11:f1:e5:ee:b6:c0:ae:e5:af:6f:1b:7a:
12:59:3f:4f:56:ca:f2:8d:97:ae:4d:6d:e7:7f:58:
be:19:31:0c:05:70:52:99:eb:da:7f:e2:92:b9:6a:
fc:c4:17:2b:d0:cf:89:5a:95:ab:d6:01:1f:d4:21:
ae:6a:00:94:6b:a3:fb:2a:7e:6b:38:da:e8:ca:ad:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.16.0/21
95.130.216.0/21
185.4.36.0/22
IPv6:
2a02:6340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49082
Signature Algorithm: sha256WithRSAEncryption
2f:49:9b:33:f3:4e:d5:df:fc:2a:11:ae:e8:99:aa:cd:72:66:
35:f5:3b:01:ff:f3:d8:db:d5:1f:fc:76:03:e4:d1:21:a4:8b:
d3:49:21:31:58:d7:83:15:bd:7e:6c:1d:c3:02:ab:73:92:45:
a1:c5:a1:de:38:46:e7:9b:4f:39:52:90:1d:b1:28:8b:a5:64:
53:6d:5d:ac:03:22:ad:cb:f5:e3:68:f8:01:f1:d7:d9:da:04:
8a:76:a8:2f:0c:9f:ba:bc:b7:1b:6b:7d:61:dd:c1:59:cf:d3:
98:ae:b8:af:2f:fb:82:b5:87:4b:bb:42:40:50:29:82:3c:69:
9e:38:53:7a:99:76:d6:f9:3a:03:cd:78:7e:f6:e1:00:b6:4d:
1f:c0:74:79:dc:6e:db:80:96:81:b7:15:dc:d7:a8:5c:d2:23:
47:3c:28:e5:85:3b:2c:89:06:1d:41:48:50:19:aa:e2:19:39:
61:46:1e:b9:5e:96:42:0f:d4:8f:4c:81:38:e2:70:7a:54:e4:
ba:7e:ae:f7:d7:86:38:2c:42:8f:52:52:4d:8a:74:65:47:a5:
4a:a5:64:69:98:a9:3b:5c:d2:f6:19:fa:d3:10:b5:8b:b5:38:
6e:94:90:2b:13:ec:36:24:3c:4f:c5:4b:7f:9d:53:c0:f3:06:
ec:5b:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:56 2025 by rpki-client