Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer (raw, json)
Hash identifier: zFNHsgJB9tvaBYGzsgWqJnEcN7j4SvLKS+EYT4DDKuw=
Subject key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1EA8BCA404A1D2A44180713037C7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.91.254.0/23
IP: 193.57.172.0/24
IP: 2a11:5ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ea:8b:ca:40:4a:1d:2a:44:18:07:13:03:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:18:ed:2d:80:06:ea:cd:4d:c1:96:f0:70:30:
af:4c:68:a6:8d:8a:b3:1d:88:5c:31:de:c0:b1:24:
dd:5a:3c:03:eb:65:82:9b:ee:5d:2b:0b:68:7d:df:
ed:86:ec:01:96:82:b9:e1:71:7b:f9:34:fd:0a:80:
3b:32:fc:f2:01:3a:d0:59:93:c9:70:f9:0b:98:69:
d9:ae:70:b7:c9:c3:d0:3a:d8:4e:0e:ce:6b:c2:52:
88:ad:68:d1:76:51:6a:f3:ab:34:a6:01:66:47:81:
66:5f:12:b0:7b:c1:b3:fe:68:a4:77:97:68:e2:33:
9e:36:1e:48:8d:ac:46:3a:e3:38:5f:89:cf:02:68:
d2:c3:36:3e:bd:fc:12:16:4d:0e:72:f2:70:7a:ee:
6c:28:30:4c:1e:6e:78:c5:b7:0e:f2:9f:1f:b7:7e:
7b:0f:62:86:e1:38:9b:69:eb:4b:dc:73:3b:c8:ad:
0d:54:20:f2:94:70:cf:16:68:a1:1d:18:c9:43:b6:
bc:b8:db:99:43:91:9f:5a:7a:35:00:f3:ff:e6:b5:
36:80:c0:d9:93:00:fd:10:64:30:85:f3:ca:e9:e7:
54:b4:7f:aa:48:4a:08:f9:3e:eb:6f:a2:bf:7e:65:
b6:87:13:97:b4:d3:66:40:01:ba:2a:39:c8:be:1e:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.254.0/23
193.57.172.0/24
IPv6:
2a11:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
60:03:8a:eb:76:0f:8a:97:e8:5f:b0:a1:d6:16:b0:1f:65:1d:
16:13:dc:e6:43:55:3b:f8:ce:30:1c:8a:4b:c8:c9:81:0c:85:
4d:77:9c:93:a4:fd:67:38:9a:d7:99:e3:50:33:20:bf:db:50:
9f:12:5e:d9:e7:61:41:c2:11:f8:3b:54:02:00:0e:f6:87:74:
0d:a6:49:33:a2:8c:ae:fb:cc:6b:b9:cc:08:f8:a9:36:66:e5:
c5:41:5f:f4:ff:78:83:c6:4c:79:f5:77:fb:78:6a:59:62:45:
2a:13:1c:5b:b5:ce:d3:88:dc:8a:4a:57:d4:62:e1:f8:d1:60:
20:8b:e5:9a:19:90:44:7f:90:d0:d8:7c:dd:81:f9:5c:88:ef:
f2:f2:d4:07:9d:a4:bc:4c:a3:06:4a:7d:b6:44:78:54:dd:e9:
bb:1f:db:f8:09:50:30:cf:e3:28:b4:88:ec:f3:c1:3a:40:94:
1d:a7:88:02:de:e2:49:9b:86:89:c1:4d:17:8d:8b:14:e7:4d:
79:03:e8:e4:c0:e6:fd:30:33:b2:f5:17:b1:38:b5:da:bd:d0:
20:78:22:22:3f:4f:63:6e:c5:97:59:11:bc:ec:ee:95:e2:60:
b3:53:4f:2f:4f:7a:f8:42:c0:c8:d7:8b:cb:b2:43:9f:37:5f:
46:fa:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:50:39 2025 by rpki-client