Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
File: yoaOeySqNaTdEKyVmfBkqpadAx0.cer (raw, json)
Hash identifier: iFlnuuduw7imEC66PnnehwF2qLie+W7HS0iBPXMMQ8A=
Subject key identifier: CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA377997AB0C71E14C3E9B9FF96AB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43089
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:79:97:ab:0c:71:e1:4c:3e:9b:9f:f9:6a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:99:c6:e9:8f:09:06:f8:83:76:b8:55:9e:
4d:a1:15:fe:8d:75:4b:30:70:65:44:b3:10:c3:2b:
1a:9c:e7:86:c9:b8:81:44:5f:8f:44:51:fc:27:28:
c6:9e:6e:a1:06:56:bb:d1:2e:e8:ef:db:92:8b:bb:
74:f7:0a:47:57:49:cf:2c:47:48:98:9b:31:2a:e7:
d2:f6:82:30:cd:b3:24:a9:ec:ce:f4:4c:8b:e8:aa:
79:6b:33:67:b0:57:1d:20:8b:00:25:1a:01:6d:b2:
47:4a:2c:05:48:a1:15:dc:fa:92:6d:19:79:fd:22:
31:29:3d:8f:10:98:55:1c:ab:27:2c:ae:8f:52:4c:
e5:2e:db:2c:b5:1e:70:3a:ac:2c:1e:7c:2b:b7:b9:
d5:2d:18:96:17:34:61:3e:4c:b3:40:33:84:68:bc:
98:0b:67:64:36:77:32:5b:23:15:b8:c9:4d:dc:81:
94:31:da:45:55:ba:ec:a3:ca:a7:3d:91:b6:b1:b5:
8a:94:1b:75:1f:25:9c:70:18:c8:70:00:de:f5:32:
4a:7b:2a:e2:d4:fc:22:23:a8:a3:9c:57:16:9b:59:
e2:27:cb:c6:f6:4a:51:99:41:51:18:cc:91:9f:6f:
84:99:d0:43:ae:65:74:38:02:0a:32:62:85:66:93:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43089
Signature Algorithm: sha256WithRSAEncryption
3c:dd:cf:05:e9:ce:a9:86:87:a2:69:6d:9f:09:4d:8b:87:18:
3e:a6:34:9e:97:a0:51:d3:1b:54:5d:a4:70:f7:3b:17:f7:d7:
09:7f:83:a8:49:59:cb:9b:81:59:6a:e2:73:4a:12:f3:b4:4f:
eb:be:2e:89:84:95:41:ef:32:73:ce:97:ed:08:d9:a3:f5:66:
67:fd:9d:83:29:ed:c1:e8:98:13:0d:9c:95:f0:6f:28:28:f0:
d5:4c:54:59:ac:76:f9:e4:3e:da:ad:07:8f:78:cf:3e:8b:ed:
3f:f4:bc:39:18:58:5b:44:1c:77:94:28:2e:99:9b:df:af:b5:
a4:db:b4:d7:1b:95:b9:35:3e:7b:f5:ac:17:63:00:89:32:64:
73:a9:47:00:59:8e:57:42:ac:3b:35:d6:de:f7:37:57:78:e6:
09:85:7a:b3:b7:87:15:3e:72:7a:84:e0:e3:7f:83:0d:b8:76:
eb:50:e5:9c:05:8a:e8:f3:6b:e9:33:44:01:f1:fe:59:dd:b4:
e0:da:40:db:b2:b3:d6:cd:55:47:78:1f:14:7f:9d:44:60:44:
1c:0c:7b:ba:a3:f4:81:66:a0:8e:dd:44:36:23:1f:38:50:ce:
7a:81:14:38:78:91:73:9a:3b:a1:7d:ed:cc:ca:83:1e:4d:17:
d7:03:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:57 2025 by rpki-client