Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
File: ygBGolNBzREDtgzOC5nqN1S6XEE.cer (raw, json)
Hash identifier: WWuwY0vDM2zJdjOIDYvIjwgH5Kr9CIrQ0unR/+P6omE=
Subject key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1A72371833DDF2825C8DDA7C8B7D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.160.252.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a7:23:71:83:3d:df:28:25:c8:dd:a7:c8:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:c5:89:d0:80:dc:1a:38:13:24:f5:84:43:
0f:b6:c3:3f:98:f7:20:98:39:73:d4:97:f0:6d:23:
94:b5:62:c0:26:b7:e1:cf:21:0a:59:f8:a5:26:d0:
07:f0:ed:69:1e:de:6b:c0:d7:fc:e3:31:36:85:02:
11:63:55:60:9f:70:4d:b3:ea:e0:71:e2:6e:1d:d7:
36:4e:99:d1:83:46:9e:3b:68:20:d2:95:19:48:dd:
ca:4c:5c:9a:8c:0d:9c:eb:61:bb:95:36:50:fb:d4:
6b:54:8a:98:1d:86:1c:5a:37:e8:e0:75:c9:56:fd:
2e:a8:ac:37:76:26:5d:3b:ea:5d:fe:0b:fd:e6:39:
b7:fe:e9:b3:62:df:e0:26:eb:cf:6b:3e:95:3e:0d:
cb:71:5b:95:ab:91:49:63:e1:67:01:78:6c:77:01:
72:a5:fa:8c:e0:5b:d0:ae:28:10:a8:c6:10:ba:40:
c5:31:4a:b0:58:1c:b8:cb:68:09:aa:20:9f:8e:54:
4b:33:04:48:30:6b:6f:10:c6:40:09:dc:97:f2:d7:
98:68:f9:9d:61:89:fe:d3:0d:8b:39:cd:7b:95:f9:
c2:88:4d:f6:8d:e0:3a:02:31:5c:bf:51:e7:cd:5e:
2c:bc:88:db:74:3e:34:92:ec:b3:56:c7:a8:b9:5f:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.252.0/24
Signature Algorithm: sha256WithRSAEncryption
26:35:62:d4:5b:81:61:7b:49:17:72:83:52:d8:2e:29:08:92:
81:3f:8f:e7:8c:f7:3b:47:bc:c5:d0:f2:bc:95:ff:d2:31:91:
2f:37:91:15:13:76:c2:bf:4b:30:be:0b:01:d0:11:e9:c7:46:
29:20:9b:6c:41:a6:07:80:1a:c1:f9:69:bd:4e:56:d0:c6:7a:
7f:c5:f6:7f:35:4e:0f:6a:c5:f9:dc:e1:a3:32:86:ce:8c:10:
8a:b7:a0:26:ee:f0:1b:66:e9:65:11:b9:18:75:65:8c:b9:e6:
22:30:1a:04:44:0f:18:fe:34:af:48:c9:22:ef:02:63:97:dc:
7c:81:10:b6:8c:49:9a:d7:3f:a5:cc:87:8e:f0:a0:f2:e9:a9:
2e:56:cd:ab:3a:f7:e9:91:2d:eb:36:3f:33:f5:10:2c:1a:88:
d4:97:c2:b8:6f:47:ca:df:31:f8:f8:11:0a:24:1d:50:a0:6b:
74:4e:b1:99:f8:92:a1:24:a1:9a:13:c7:5f:16:e9:7d:b7:e4:
3c:1e:6d:93:22:0c:14:8d:06:1d:28:a4:90:f5:60:e0:a0:25:
c6:2f:c9:5b:a6:d2:6a:13:2a:85:2d:c4:6b:b3:0b:29:a7:d3:
ec:d4:3a:f7:58:4e:98:75:8c:0b:f6:31:f5:85:b2:24:46:10:
d7:16:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:11:29 2025 by rpki-client