Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.cer (raw, json)
Hash identifier: RRbBiFY4vO83L8k7j6ZXDs/Cl3n7RlOj/+61ijq2ZnQ=
Subject key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC0816DF359ABF0908E9D9B16F3070
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198392
IP: 31.217.224.0/21
IP: 2a01:7f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:08:16:df:35:9a:bf:09:08:e9:d9:b1:6f:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:78:23:90:cd:93:64:2e:60:d1:47:c7:03:
84:1b:dc:4a:46:54:e6:c6:5c:b4:3c:e3:c9:86:72:
e7:41:7d:e5:fa:62:ab:28:8e:b4:ee:88:99:78:7e:
55:91:61:e6:16:58:54:02:95:87:56:28:2e:70:ec:
ce:51:59:87:a1:3c:97:56:54:56:54:1f:9f:33:5e:
59:42:ce:dd:42:12:de:e3:33:85:a6:e9:78:20:7d:
d6:1a:a7:81:2e:62:50:89:05:03:6c:e8:56:f8:ed:
26:f1:0b:73:b0:2f:7c:df:cb:53:04:59:f1:47:56:
fe:8b:2d:e5:2c:9c:73:c2:e1:95:0d:7a:9d:76:1b:
4e:57:dc:21:3c:97:60:98:74:ea:8e:d8:08:b6:3c:
99:bc:1b:bc:35:9e:bd:f8:b8:a6:bf:93:63:31:19:
87:2c:af:45:8d:c9:e2:6a:1a:b8:82:f3:5a:f9:6a:
b8:73:7f:85:f8:62:0e:c8:ab:23:ef:5a:45:87:2c:
b5:3b:2c:2a:8c:62:e8:7c:ab:f0:cc:64:80:6b:74:
c8:fa:c8:65:f7:ab:f7:8e:90:8b:91:11:9d:4e:68:
09:5f:a2:a2:b5:1b:c8:4f:02:48:b2:6a:b6:5d:00:
e3:43:36:02:13:e2:c0:77:53:6d:59:d7:e1:da:98:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.224.0/21
IPv6:
2a01:7f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198392
Signature Algorithm: sha256WithRSAEncryption
4c:6e:4b:f8:8a:c3:29:b1:aa:8e:7a:14:17:c9:e4:6a:e4:57:
27:11:7b:32:e1:63:33:2a:f0:07:54:88:72:cf:5f:15:24:4f:
9e:c0:a2:57:22:a9:09:11:56:43:af:4e:6e:25:2a:4f:b5:29:
9a:cd:0a:ae:0a:a8:c9:be:3e:32:b7:fe:ae:c6:78:d2:2a:bb:
33:1b:4d:1f:3a:8e:cb:f4:e5:ad:e6:e7:a5:5e:61:17:59:96:
60:15:a2:a9:d6:c3:7d:60:d2:71:19:d9:75:1b:e0:85:39:b4:
99:a0:d9:28:62:7c:c3:dd:0c:15:4c:42:fd:b7:3b:06:42:da:
a5:e5:ad:b1:fd:3e:59:63:8e:73:7d:74:42:90:6e:b5:48:26:
8f:6d:e5:6d:10:14:82:1d:ef:4b:70:26:45:8b:e2:06:57:b1:
dc:4e:7e:7e:fa:3d:c1:2b:fb:3d:16:34:ea:da:16:dc:45:93:
af:65:4b:eb:7c:53:39:a4:c2:f6:3d:33:72:9f:18:fa:7c:5f:
88:31:ad:c9:db:63:35:17:6a:17:af:db:29:2c:ae:82:65:0a:
5d:0a:57:76:a0:7e:dd:db:7b:fc:95:e4:c4:f9:3a:80:ca:f7:
2a:9b:9e:54:61:4d:06:25:b5:f3:35:8d:74:c6:23:5f:ad:ef:
ba:a4:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:16:09 2025 by rpki-client