Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
File: ypO97sfEJpjfaskM3cbAGzp_LEk.cer (raw, json)
Hash identifier: XlFDrc4/z97j0SJwrr+i3Fqj46vOVbhla6dhbjjGUz4=
Subject key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBA352519E1A9046A9622C8BB062A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202944
IP: 185.1.71.0/24
IP: 2001:7f8:a2::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a3:52:51:9e:1a:90:46:a9:62:2c:8b:b0:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:22:1c:8c:54:2a:79:b7:69:68:83:c2:d8:
af:fd:c8:fa:4b:b1:a8:67:09:cc:25:48:af:13:f5:
ef:8b:be:59:e0:67:3b:d8:5a:a3:d1:b9:57:3f:5d:
0a:c6:df:a0:01:d9:c4:8f:8b:ba:60:c2:e9:3c:15:
e1:14:03:0c:89:09:6b:a9:df:1f:60:09:28:c5:3e:
13:c0:62:a5:f4:f2:bc:fb:e5:06:6c:3e:a2:38:d3:
7c:da:c7:d7:09:0e:43:4f:ba:1c:fe:9a:93:e1:1f:
14:12:3d:e7:bd:bb:88:ff:da:e3:ed:93:32:2d:d5:
fb:bd:4a:36:2f:81:8c:bf:06:ff:39:b7:1e:a8:b1:
6b:8f:d6:8a:bc:b7:c2:f3:53:76:d7:86:0b:f2:41:
0b:17:89:b3:cc:81:32:6e:ba:ae:5b:88:07:6c:6c:
8d:f1:c4:08:da:d5:5d:de:1c:d7:cd:ef:90:23:5e:
f4:58:b0:60:29:ad:fb:f8:d8:8d:03:58:6c:9e:c5:
af:72:97:e8:0a:63:e0:95:45:4c:07:98:3e:1b:e8:
01:0e:e1:57:84:b4:12:b5:91:e8:1b:ec:ae:25:f4:
56:bd:ea:38:16:3e:5b:d5:a2:ca:65:85:6a:92:e1:
f0:eb:26:f4:19:01:8d:65:ba:c8:22:28:26:1f:34:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.71.0/24
IPv6:
2001:7f8:a2::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202944
Signature Algorithm: sha256WithRSAEncryption
5f:b5:26:22:3c:81:45:83:bb:bb:cb:15:39:8f:7b:d2:0a:a2:
82:48:4d:06:c0:1d:ad:2b:37:31:18:5f:b0:d2:f5:2e:42:a4:
7c:07:f6:51:7d:26:3c:a4:55:5d:a0:1c:b4:de:81:47:7e:3b:
a6:d0:84:ee:ef:45:d0:2b:18:60:de:40:a6:99:dc:d7:22:da:
c2:ee:6e:d9:10:2f:22:06:18:21:ab:55:db:04:c4:97:90:5e:
df:76:4b:06:17:db:86:a1:ac:29:e0:17:26:88:bb:2a:9a:a2:
68:69:fd:b2:5b:79:4c:e3:e2:0b:b3:11:a2:93:1b:1f:69:6c:
d9:47:23:06:46:d2:be:dd:3e:ba:b9:8a:56:3e:25:11:ee:c3:
b2:57:a9:da:cf:82:58:b1:ff:04:9a:2f:28:b3:41:9e:2c:0e:
42:a5:65:f1:1f:4c:bd:59:b6:53:32:9d:96:0c:06:f9:85:1f:
00:6a:99:13:a4:a3:bf:11:14:c3:e3:96:55:2d:63:aa:0c:8a:
83:d6:b4:23:0e:c8:a9:e8:95:c4:37:6b:eb:1e:79:7a:37:c2:
52:80:93:62:7f:b8:1e:f0:5d:69:1b:2a:52:13:32:a8:07:69:
a6:b0:f5:c3:27:88:ae:6d:9f:fd:64:5e:31:4b:02:c9:e6:7a:
cc:45:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:01 2025 by rpki-client