Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
File: lYj7Sw-weytS4w2SGYmPKM-8mi0.cer (raw, json)
Hash identifier: 1gzhXvAxWx/dQxEY/EPnA36cnIZ5GX2/+0BLqgQ7ePM=
Subject key identifier: 95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDCD1FA52CABEB20622624354BB8EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57443
IP: 193.57.208.0/22
IP: 2a0c:d5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:1f:a5:2c:ab:eb:20:62:26:24:35:4b:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:39:e9:cd:9e:ee:bf:1d:e8:34:e7:58:bb:
15:ad:43:45:af:72:ff:10:1d:17:72:41:ec:72:80:
2b:74:6e:6a:4b:e7:af:9f:d2:53:3f:25:62:84:b4:
dd:99:02:96:b1:61:46:d7:49:e2:77:9a:56:76:e5:
a5:5a:53:37:55:51:9e:0d:8f:f7:67:ce:c8:0b:80:
9b:79:f6:70:55:03:d3:d9:4b:69:85:e0:5b:8a:44:
72:64:0f:d6:9c:63:aa:11:b6:72:f2:7d:a9:51:a4:
ee:dc:90:0a:c9:35:50:2a:9e:92:6c:b1:b5:4a:ff:
5e:0c:d3:86:cb:a5:32:7a:5e:5c:51:25:58:0e:c5:
84:9c:6d:30:22:1c:bd:97:11:3d:3a:a3:99:ea:72:
31:78:82:68:b9:49:28:dd:35:30:18:2b:49:9f:cf:
09:25:60:28:86:df:fe:3d:22:8f:64:d9:e2:6b:c9:
ae:ee:d5:12:9c:aa:40:03:84:1a:4a:d4:62:53:8a:
50:94:70:19:99:8f:34:81:df:de:67:2c:9f:81:2d:
6f:54:8b:53:e5:ec:71:ce:5b:c7:e2:24:f2:39:c4:
fc:38:6f:84:43:ed:5e:39:d0:d5:3e:77:50:a8:8d:
45:e9:a5:9e:96:ed:a7:a1:ac:a9:21:57:8a:5c:cb:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.208.0/22
IPv6:
2a0c:d5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57443
Signature Algorithm: sha256WithRSAEncryption
82:38:e4:ad:90:9d:28:d6:75:d2:89:bb:e0:18:bf:e6:2c:4b:
a8:1d:e8:7e:84:4b:6b:a8:c1:68:c0:59:89:ad:cd:67:71:48:
66:c5:80:75:24:49:05:26:eb:2e:30:90:4e:40:a1:28:75:b7:
e5:7d:0a:01:50:f9:6b:19:eb:6d:44:89:90:7c:e0:03:d2:3b:
4f:50:32:09:35:c3:de:e4:17:69:60:6d:28:5c:1b:fd:74:42:
9a:8e:e6:fa:be:34:3d:8a:6a:30:ab:72:37:4a:1c:10:29:5a:
24:02:92:0d:32:5a:a7:cc:e9:19:5a:51:06:1d:f7:b8:21:bd:
83:c7:36:eb:d0:09:10:de:86:4f:cb:da:9f:d4:a3:6f:c6:53:
ea:5a:0e:cf:8c:6d:41:ea:fa:77:37:81:e5:e6:2b:e8:b3:84:
b6:3d:50:9c:ed:8a:88:ef:55:25:b3:e4:b9:ae:32:bc:de:b1:
93:c2:3f:de:3b:ba:7c:9a:fa:8b:0a:97:ce:51:1e:21:51:60:
13:32:80:1a:38:80:79:9c:b2:a4:03:48:54:e8:96:af:0c:70:
a1:6d:ca:d9:22:96:e9:f8:27:13:b2:da:41:6b:4c:3d:52:95:
39:4e:c7:37:3d:86:a7:d7:70:5f:8f:0e:d5:50:f2:a1:56:db:
39:47:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:03 2025 by rpki-client