Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.cer (raw, json)
Hash identifier: +Cznn5a7ahtnNR5w/ZG4C526t1UtuIYiu0+vWz9XBEg=
Subject key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B631B87CCE53C8A75DD2DB7D864591
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59439
IP: 91.240.178.0/24
IP: 185.168.52.0/22
IP: 2a0d:c0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:31:b8:7c:ce:53:c8:a7:5d:d2:db:7d:86:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:e5:97:ce:ac:5b:6d:13:b9:74:95:97:5c:
9f:67:3f:23:15:10:22:3a:ee:12:5b:40:2c:5f:3e:
d3:c3:a6:71:3d:4c:28:5e:bf:29:a9:09:a6:85:7f:
d1:a4:82:65:6f:d1:50:70:51:4d:92:4c:98:17:b0:
6e:40:a0:5d:40:85:0b:55:74:03:7e:91:af:d6:76:
ea:f2:d3:41:45:9e:a8:69:be:ac:68:04:77:37:a8:
d3:32:80:3b:c5:cc:c0:86:12:48:5b:89:f0:bf:11:
fb:b6:48:39:69:c0:e0:36:4d:13:2b:43:93:c5:2c:
61:27:a7:71:d2:14:63:4a:a1:5d:b3:0f:f0:aa:da:
02:13:3e:4d:b1:3f:32:d8:e9:0b:d9:ab:7c:ed:b3:
4f:67:aa:03:01:3a:75:a7:00:80:63:bb:4a:44:6e:
fe:8e:e2:72:6a:63:a7:b8:00:12:51:9d:e6:6b:71:
e2:82:d5:02:56:13:d2:47:76:b4:ea:99:76:c8:f5:
92:b9:c4:e7:66:04:b0:14:3c:d3:a2:dc:5d:96:b5:
3b:b5:02:8d:a4:c9:d3:21:91:df:05:1f:70:b1:b4:
c7:0e:04:41:e4:22:94:e8:e4:87:14:87:42:ee:64:
83:cd:51:e1:c3:9d:c7:78:fb:37:27:68:be:98:06:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.178.0/24
185.168.52.0/22
IPv6:
2a0d:c0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59439
Signature Algorithm: sha256WithRSAEncryption
75:75:8d:dc:2e:86:9b:1a:c8:53:4d:dc:1b:8a:ab:05:cd:57:
57:8b:f0:db:d8:87:12:65:41:bc:d0:48:a9:54:20:c7:1f:9d:
f4:51:08:41:b6:2e:e9:b5:a6:64:40:09:ed:e1:f1:0b:eb:59:
31:df:2b:14:6d:8c:41:2c:c7:4e:a1:ef:c3:39:3a:f6:79:21:
74:d3:77:f9:f9:87:0b:40:06:8d:15:c0:b2:0f:39:59:10:27:
d9:3c:ae:f9:01:8d:8f:d7:38:d2:19:4a:06:1b:66:d0:35:15:
6e:5e:7d:3b:be:50:30:ff:d3:df:e8:79:dd:fd:d0:ae:90:11:
df:46:e3:25:4f:46:8e:99:2b:99:f7:f6:fc:4a:ad:82:92:c5:
95:39:79:16:2b:9a:98:4a:a4:bf:3b:38:a0:c3:ca:aa:90:0e:
73:34:7f:e5:a5:a8:4d:c7:97:9f:78:2c:e8:2c:9a:10:ec:f4:
cd:d5:b0:c5:68:c4:c8:43:7e:d2:83:cd:50:fe:60:95:53:34:
7f:a5:74:04:70:9d:2d:4d:38:9d:48:86:11:30:d9:10:57:6c:
c5:0b:a3:0d:a5:92:60:6e:74:a9:b3:e2:2d:8a:f4:8b:29:74:
f5:7a:d0:55:98:a8:fd:08:7b:cf:0c:c8:d7:37:3c:83:c5:d8:
5a:1f:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:07 2025 by rpki-client