Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer (raw, json)
Hash identifier: rsEssbRvLEMebBp7hvGpvR5rLB/adLOHuFDzc5Xam4E=
Subject key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23DB919285C99D65EDB604DB68818
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211134
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:b9:19:28:5c:99:d6:5e:db:60:4d:b6:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c95998989fdb5a5f932147ad7162c63004e067a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:e7:a4:08:6a:cc:cb:9c:da:a7:18:a4:be:
26:1b:34:c7:bb:9d:d0:f1:4b:ff:55:b4:a4:9a:f9:
0e:91:fa:c3:1d:c2:b4:0f:98:d5:b4:44:ec:ff:ec:
8b:c4:cb:79:4b:5e:d4:94:cf:ca:19:a2:eb:b6:58:
90:5d:13:09:a9:8c:a6:7a:be:ad:1d:d7:5e:6c:cb:
5d:92:9d:e2:65:eb:f0:ec:ce:87:9f:69:ad:55:20:
b9:56:78:af:1f:58:0f:7d:34:42:7f:d7:c2:80:5a:
53:6e:62:e0:46:68:47:b2:9d:e2:17:3c:bc:cb:17:
e6:3e:88:fe:b6:b8:70:86:96:5c:41:9e:aa:96:78:
3c:5b:6f:2e:a1:3f:a6:36:e2:77:5e:4e:53:b7:26:
34:a2:9a:82:42:fb:b6:d7:48:69:cc:4f:7c:73:f2:
ce:23:b5:c7:3d:84:45:e0:34:85:3b:ae:e2:d9:96:
7a:1f:0a:76:16:4b:ac:13:74:aa:42:b4:78:3e:40:
77:08:a9:34:9d:d7:5a:b5:30:e5:1c:82:1b:cb:99:
92:f8:2b:c3:4d:c6:b1:5c:d1:62:2b:33:dd:96:00:
1a:6a:37:3c:12:e1:10:25:8a:a6:1c:40:64:bc:72:
7b:94:bd:4a:80:00:8e:54:b1:4b:da:81:68:74:20:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211134
Signature Algorithm: sha256WithRSAEncryption
25:60:20:8c:90:de:44:f0:6f:ea:99:a0:56:50:15:ce:12:9f:
fa:7f:c1:28:67:21:e4:0a:67:28:1d:56:43:0c:36:e5:09:71:
1f:8a:6e:1c:bf:74:6d:62:3f:2b:42:2f:70:52:31:d9:ea:15:
02:b3:a4:6a:a6:20:7e:0f:05:df:4e:4c:cd:47:67:aa:06:80:
9b:30:29:1c:f4:51:cb:17:0d:f2:73:24:85:85:c7:07:47:8e:
d1:b6:29:c4:02:4d:f7:80:f5:d1:f2:8b:22:2b:d0:e0:5b:52:
4c:d6:e5:5e:c2:61:8d:c3:98:fa:1c:6d:26:be:24:a4:88:9b:
12:c9:7c:7d:09:b4:b8:12:6e:7e:76:f1:ef:65:03:0c:d5:90:
84:f5:6a:4d:9e:02:71:45:eb:3a:73:8e:22:6f:1f:1f:b4:30:
35:ec:ee:9f:1c:09:12:06:12:c4:8c:3f:b6:e0:de:fd:1c:15:
06:e1:a6:6c:32:7b:03:bd:ac:a7:4f:05:5d:51:f8:fe:5f:2d:
71:49:00:f6:9a:22:98:6d:24:68:37:fe:a4:a4:d7:7b:de:dc:
3b:5c:13:f8:f9:15:70:a4:90:f4:91:7c:55:48:b2:00:d0:c1:
1c:7d:2e:95:97:d6:0c:f8:12:35:39:e0:3d:1e:dc:ec:89:c8:
2f:ca:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:09 2025 by rpki-client