Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
File: ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer (raw, json)
Hash identifier: Cq5nrZvUPVFpEld4wVNNy35GQzLcKC+Akl9I3voe1zg=
Subject key identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194FA388E3156261918589562BBF1A1A9B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Feb 2025 12:53:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201424
IP: 185.61.196.0/22
IP: 2a02:7c20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:38:8e:31:56:26:19:18:58:95:62:bb:f1:a1:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 12:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:5e:a8:19:99:0c:e2:36:12:f0:2d:0f:fe:
3b:6b:bf:ed:9a:ad:be:67:79:78:7a:32:ed:92:f5:
ee:b2:ea:bf:1d:cc:75:2a:bb:30:ad:70:a9:0b:97:
59:b3:48:24:a7:f4:71:b0:7f:3b:32:83:7b:5a:d6:
08:c0:5a:75:aa:38:c8:18:21:bd:f0:cf:a7:eb:64:
11:24:f2:d6:fe:59:7c:13:ed:90:d8:59:77:94:ce:
8a:24:a2:29:b2:26:39:9b:d3:11:c9:a6:bb:52:c4:
9d:4b:36:33:6d:dc:7b:46:f6:02:ac:fe:fe:ba:fa:
e5:ff:7e:ad:26:24:cd:0c:c5:e9:ba:b7:61:c4:20:
92:59:98:52:05:06:79:3a:17:e2:6b:b9:32:ed:c3:
49:4c:13:39:62:69:e0:c3:38:20:97:60:1c:22:6f:
c9:ba:20:78:31:ad:b4:c4:c9:d4:1f:fe:bb:55:ac:
d5:94:04:02:ed:68:ab:f4:2d:58:54:f5:85:69:aa:
49:8e:8b:bf:55:d5:07:b1:b8:32:db:81:8f:5c:f0:
89:eb:0c:a8:bb:5d:ca:69:3a:ba:be:3a:dd:ad:1b:
ed:5c:91:58:31:e9:bc:46:3e:1e:8c:64:78:53:ad:
9d:27:3e:b2:82:43:d1:a6:2e:11:5c:ca:72:b7:1f:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.196.0/22
IPv6:
2a02:7c20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201424
Signature Algorithm: sha256WithRSAEncryption
1f:c4:32:14:8f:e9:8e:69:4e:16:1a:35:81:cd:c9:9d:60:17:
3b:26:9b:fa:fd:bb:0f:d8:87:9c:0d:a1:9c:b5:73:99:47:86:
c3:fa:4e:de:46:54:94:95:34:54:48:f1:aa:3e:2a:35:06:c7:
90:ca:61:2e:ed:70:67:56:53:08:4d:fa:03:6a:54:f0:28:08:
57:a8:42:07:d4:2d:23:cd:ec:47:c9:7a:17:38:85:a2:1f:8f:
f4:c6:32:d1:5b:79:bb:ff:e7:2d:cc:3d:33:cc:20:98:4a:3e:
ca:20:5e:42:ca:85:48:9d:77:f7:3c:a3:7b:15:8c:5f:23:d3:
94:90:64:b6:f1:93:de:aa:e2:c4:73:42:13:0a:1c:6d:0f:62:
1e:33:fa:84:95:ac:3a:8a:6b:72:98:0b:58:a8:69:f6:88:9f:
77:2a:f1:5d:23:e1:be:bf:db:90:b9:97:04:16:eb:da:df:35:
c5:f1:09:8e:75:0e:68:03:0c:f1:77:2e:2f:0f:39:37:5d:47:
74:1a:36:cd:49:b6:7d:a7:25:56:fb:72:65:29:5c:fa:d2:64:
4d:25:f4:4b:6a:4b:ee:f3:d9:08:93:e5:dc:42:b4:e1:d6:5e:
b8:e4:08:0d:72:b7:bd:f6:3a:4c:b0:5e:f0:11:2d:57:87:88:
62:92:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:20:39 2025 by rpki-client