Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer (raw, json)
Hash identifier: dN/9dnPS1kZlumH7j94/Ued230Phv3wZUob8i6GNEsY=
Subject key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424455D373101CC12B4B26FE1F9B1E0EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213365
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5d:37:31:01:cc:12:b4:b2:6f:e1:f9:b1:e0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:2e:91:0c:ec:31:95:6e:83:97:92:b8:52:
7a:22:61:4b:ae:50:bf:97:25:ac:22:59:a1:87:32:
1b:40:c6:78:83:d8:0f:71:85:67:07:f6:67:65:a8:
2d:5f:98:71:24:ff:ca:9a:5e:a9:77:6a:bb:8b:bd:
43:6c:6c:24:4d:8e:5f:40:6c:b1:12:24:06:4e:4a:
f7:82:11:fb:c2:70:9c:fd:fe:e7:da:a3:8b:71:05:
3f:2b:a6:24:20:55:5e:15:d0:76:5e:ef:3e:2c:6c:
de:87:09:2f:6b:38:7d:2a:64:ea:70:dc:7e:4f:9d:
b0:95:f8:ee:aa:5d:94:57:81:68:89:ca:4d:87:40:
a6:31:7c:f7:65:13:d7:17:3c:76:d5:ca:16:4c:9b:
4b:4d:36:e3:eb:0e:cf:85:39:bd:85:d7:23:5c:fe:
ce:ba:ef:9b:8c:d5:35:8a:7c:ed:db:f1:0b:59:5c:
65:8b:5b:1c:02:91:00:aa:95:5f:25:ae:f5:e9:0f:
b0:88:87:7f:ec:3c:ea:98:8b:47:d9:6b:f2:64:8e:
d5:e6:11:27:c6:84:df:02:78:e4:f4:5e:55:61:de:
08:cf:e9:83:3a:07:98:3d:77:53:3b:42:b6:7a:73:
d3:1a:2f:43:88:9d:c0:f5:3d:4d:06:a4:9d:8e:44:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213365
Signature Algorithm: sha256WithRSAEncryption
29:97:af:ff:a0:a6:8b:6a:99:a3:74:18:5c:ce:ff:d3:72:b8:
ef:8f:c5:8b:ef:48:f2:b3:26:09:0c:fb:4a:bd:7d:cd:63:01:
e0:fd:fe:99:31:1c:5e:13:eb:9f:2a:09:af:65:3f:dc:be:ba:
ab:34:9f:49:bb:a9:50:56:da:4d:d4:ee:cd:b6:9b:5d:74:81:
42:66:e9:97:59:84:13:fe:1d:79:54:50:a6:10:05:cc:dc:e1:
01:04:2e:1f:14:9b:bd:bb:10:a2:5a:2e:24:14:5c:c0:60:c8:
12:16:f1:81:5e:7c:42:78:51:e1:b1:c1:40:c2:17:ed:f5:ff:
62:7e:73:bd:df:3e:a6:3c:67:76:e2:fc:4f:54:9f:e6:15:5a:
34:f4:60:f1:d8:7b:73:98:9f:ec:1e:fa:0e:db:b7:cc:dd:cd:
97:71:e0:95:bb:d1:0b:87:9b:ab:14:cf:2e:77:8a:55:84:d0:
42:e5:18:2b:36:ba:35:01:18:58:28:6e:1f:63:b5:34:ae:df:
49:56:45:c3:5e:e4:d5:52:b4:d1:1d:c4:fa:3d:66:80:a8:25:
89:37:70:8f:4f:aa:e6:c8:db:17:78:c0:6a:05:92:4f:d6:06:
21:d2:6d:f8:d7:51:58:bb:e2:2a:ee:dc:9a:7b:e6:a0:46:98:
fb:3a:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:08 2025 by rpki-client