Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
File: yRh69xD2KF4TVTBxMoudmUhSxHE.cer (raw, json)
Hash identifier: EK5/Gz2xiXEuUKIyC5CYKAI2BP/IObETTev5E0Lxbic=
Subject key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD4A5D9C089E09A96CA261FC3FE653
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203009
IP: 185.132.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4a:5d:9c:08:9e:09:a9:6c:a2:61:fc:3f:e6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9187af710f6285e13553071328b9d994852c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:a3:25:41:1d:a4:cb:f1:64:64:9b:5b:9f:
c4:d3:cf:05:33:ca:ba:d2:4d:60:92:d5:8f:ac:37:
0a:49:13:4c:87:55:01:91:43:c4:5e:96:4b:92:94:
7f:d2:ac:3d:ec:ec:cd:48:56:61:4e:ac:27:58:72:
ac:d4:ae:7a:77:67:a1:42:51:4b:c3:c9:d6:fe:da:
b9:7a:0f:b0:9a:92:d4:0d:f8:e2:4c:8a:f8:d0:7b:
30:3c:0d:1e:22:32:09:06:09:a1:7b:05:80:72:aa:
d3:80:61:e2:cb:86:91:9d:09:66:d6:67:6d:07:d2:
84:bb:b9:6c:da:e2:b0:c5:ba:b7:86:7a:d2:c2:30:
6c:13:82:83:29:d1:bb:79:a4:1b:fa:ef:2e:3b:7b:
be:1e:53:83:ba:82:74:09:ad:07:7d:31:9f:5d:24:
c3:6c:45:42:f0:21:66:e2:27:fa:33:64:ee:bc:f1:
b0:46:39:91:f2:98:a0:16:04:79:70:b8:49:1e:44:
15:85:31:d2:54:43:ef:36:19:28:54:46:a0:c9:6b:
90:88:5f:90:90:28:13:11:bd:4d:05:5f:22:0a:28:
4b:f4:46:bb:e6:a9:d4:73:a6:3a:6b:be:54:ca:87:
14:52:25:0f:81:5e:c7:ab:ae:93:d8:33:72:2b:96:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203009
Signature Algorithm: sha256WithRSAEncryption
96:ab:8e:fe:53:fd:8b:6e:73:3b:db:19:da:85:ba:49:f5:2c:
cb:21:dd:2a:c4:24:5f:41:43:a9:b2:f8:d1:46:6c:9f:65:6e:
04:f4:2a:28:a5:d6:1a:34:98:ce:b8:00:9b:de:09:a9:01:c7:
32:76:8b:02:dd:04:cd:bf:67:85:66:8b:d5:c9:9f:c6:3c:6e:
5f:b8:c6:ac:a9:e7:87:7b:06:ca:45:84:9c:21:2d:81:96:f6:
07:57:36:0d:15:b1:ba:bb:33:09:f5:5a:da:92:cd:1c:4c:91:
98:b5:c1:69:58:55:db:ed:c2:b7:a1:0b:8f:e4:ce:86:59:2f:
c5:b7:cf:9a:55:cc:57:1b:b7:8b:a1:9e:e8:c2:d6:ab:07:2b:
1f:12:03:59:d5:c5:f7:0a:3c:5a:a0:1d:88:19:8b:ba:5c:32:
a7:f4:eb:2a:0a:22:ec:dd:3b:cc:81:03:39:c8:4c:5a:49:1e:
25:06:e5:3b:e5:34:f2:40:29:4f:f1:87:36:87:4b:84:86:45:
96:ec:b4:64:d8:7e:f3:fb:ff:1c:38:49:b6:0e:d7:c0:5e:17:
c2:3a:f9:e3:17:85:89:c8:4a:4f:0c:72:b1:e3:17:14:28:fc:
a7:fc:7c:e5:7b:43:a8:a5:b3:14:27:c5:90:59:81:c1:b1:f1:
af:22:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:47 2025 by rpki-client