Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer (raw, json)
Hash identifier: Dg0DED2hQLoK3o9aQ28lT1bBFBeULomcz/1+6Y+cMcc=
Subject key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3B3A14A83DBFC6D89D09658CFF06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60527
IP: 185.30.20.0/22
IP: 2a04:4840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3b:3a:14:a8:3d:bf:c6:d8:9d:09:65:8c:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:42:70:50:8c:1d:95:7d:a1:df:ac:60:2d:
cf:6f:cf:cc:19:5e:e2:24:ee:8d:c7:c6:4a:08:0c:
92:42:0e:c5:8c:c5:88:b8:26:ed:bf:40:32:14:87:
e8:29:1a:f6:a8:fc:81:73:4a:68:b3:43:c4:40:63:
87:36:7f:12:32:cd:2e:4c:97:14:2b:32:73:de:bf:
b7:62:42:ca:33:3a:64:62:cc:93:6b:86:1e:fb:c2:
0b:36:a8:87:8e:1e:39:d5:d0:c1:cb:50:ce:0e:7d:
65:2f:fd:7a:60:1a:96:d0:55:09:6e:05:53:7d:62:
2b:91:a5:c9:26:ce:8e:91:14:5b:7a:dc:04:ce:8a:
14:88:b0:92:60:39:70:3f:91:02:f3:69:a1:85:06:
59:04:f7:1a:38:19:ec:1a:68:d1:6a:5c:6c:98:bf:
c2:98:fb:9c:68:db:82:e8:d2:0e:6c:c2:fe:8d:ac:
7f:fe:36:8b:ee:e9:93:c8:0d:1d:a2:dc:db:44:aa:
d5:4d:2a:d8:7c:b2:d2:ea:21:19:10:4a:fa:29:ad:
f7:58:c6:57:98:e1:93:a2:05:b5:0e:7a:b3:8e:92:
f3:cd:c7:b0:8a:e9:f7:41:d5:ac:25:e7:5d:c5:7d:
08:9d:d2:f2:bc:6a:c3:5d:7f:03:2d:00:27:ef:ef:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.20.0/22
IPv6:
2a04:4840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60527
Signature Algorithm: sha256WithRSAEncryption
8f:8f:f4:44:af:74:fb:43:a3:03:8d:7d:8b:cd:1a:96:c9:73:
6b:34:71:33:46:c4:58:4a:d4:8b:11:50:d1:3e:a8:da:77:40:
b8:0d:17:da:eb:80:97:13:a8:71:61:c1:3a:9f:0b:9a:d7:97:
56:c3:da:e3:0d:5e:79:c7:c3:5c:a1:79:42:28:d4:f8:ca:78:
57:15:41:cb:b7:fb:8e:c4:15:26:f4:93:f0:53:09:ea:46:6c:
e1:75:83:e0:dd:20:93:f4:0c:47:ba:cd:39:fe:0b:f1:49:11:
86:59:00:f9:fc:a1:c5:4b:f9:d6:09:8d:22:e5:82:18:8a:5f:
41:13:7a:a5:c8:b3:8b:23:a4:c5:b9:35:75:cf:38:58:8d:c8:
d8:76:60:bd:be:78:14:bb:8a:40:67:5d:8b:9b:b1:8f:8e:dd:
9c:ed:b5:f6:6d:8c:23:89:2c:9e:3e:03:c4:2d:10:e0:7e:f7:
13:4b:8f:de:e5:81:58:71:41:74:07:47:a3:ba:dc:63:4c:f2:
7d:c3:95:ac:db:a3:a5:a4:3f:d6:ea:7c:e6:63:92:a6:d2:ef:
f2:a6:46:73:a0:58:b7:00:82:a7:d0:4e:fc:c0:66:b2:10:1e:
39:d1:f2:87:12:44:28:00:d7:25:e9:4f:3c:ce:a6:2b:a0:8d:
89:93:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:09 2025 by rpki-client