Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer (raw, json)
Hash identifier: L875uzgnTgEwciLk6wDQ7rv34agaRA8uWor/OSZiXDk=
Subject key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D12A4CFEA70C85A82D02D88523744
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29060
AS: 57598
IP: 37.246.0.0/16
IP: 81.91.112.0/20
IP: 81.162.128.0/18
IP: 217.17.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:12:a4:cf:ea:70:c8:5a:82:d0:2d:88:52:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:c0:c7:40:c8:06:02:3d:1f:74:dd:13:53:
ec:0b:93:63:52:98:1a:e1:ce:af:df:88:7d:71:2a:
e8:42:5c:7c:92:ab:a4:9e:92:d0:e4:21:65:f3:77:
da:42:6b:e9:32:3e:48:a8:d9:c0:da:0b:00:b6:f3:
7b:2f:67:7e:f9:9b:26:52:54:b6:85:e4:f0:b4:9d:
04:f2:08:2f:5d:b5:d0:9a:19:de:67:47:33:f3:f0:
45:9f:0b:e2:6e:7e:7b:26:b3:7e:bc:c2:e3:47:1c:
24:92:b8:37:df:9d:2e:f5:56:93:d0:b6:91:36:31:
c3:b7:72:4d:14:01:d3:a7:5c:c5:e1:09:73:3a:6d:
03:6a:4f:1d:f5:a6:d2:f8:ec:8c:d5:df:69:35:f9:
73:21:94:8d:cb:55:34:87:6d:94:3c:4d:46:cf:36:
59:3e:7b:3d:cb:9b:36:cd:ad:5a:01:8e:64:6b:82:
70:5b:c7:09:5b:64:26:81:82:54:90:35:4a:6e:63:
d8:c5:f8:f6:18:83:d3:96:23:37:1a:88:85:c9:1d:
2c:c2:3f:19:e1:da:b2:8d:dc:2a:17:3d:0c:b9:36:
b7:54:0f:8c:61:fb:d0:a3:32:e0:c9:07:c1:df:78:
17:14:97:2d:b8:75:b2:c7:37:19:3c:34:55:cd:80:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.246.0.0/16
81.91.112.0/20
81.162.128.0/18
217.17.144.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29060
57598
Signature Algorithm: sha256WithRSAEncryption
40:d4:57:e1:3d:27:a7:85:f3:19:b3:20:c5:b5:4d:42:bf:e6:
88:fb:70:44:b0:72:90:1e:e3:12:47:ce:b2:a9:e7:e5:9f:9f:
5f:d5:7b:1f:13:b4:27:30:fa:b2:1b:57:58:3e:21:92:c2:16:
51:87:8e:fc:ce:d4:b6:1c:b8:26:9d:34:5a:5e:8f:4b:e8:c8:
f7:5c:b3:79:91:7b:df:87:f0:41:d2:04:65:2b:d2:2b:34:bc:
b8:c1:2b:13:68:87:9e:c3:b2:10:21:82:ba:96:d0:ed:43:bd:
7e:c6:27:ab:91:9d:1b:5f:1b:b4:59:a3:4e:5f:f4:30:56:72:
4b:42:45:b8:7f:6e:72:d4:5d:4f:3a:49:06:c2:0d:97:86:b9:
72:58:3c:3c:48:ea:1f:86:5b:14:aa:7f:ed:b1:13:cf:4a:56:
fb:c3:85:b9:66:02:91:bb:4e:69:43:4f:18:4b:f1:19:e9:0f:
2f:12:2a:b3:c1:f4:5b:c3:48:7f:dd:e9:d0:32:38:83:ae:ae:
0c:29:9d:e4:8c:d2:ee:b2:b3:b4:54:d7:cf:b7:48:c4:b9:b2:
93:8d:09:b6:e0:1a:16:12:e3:74:98:d5:79:84:e7:21:a8:96:
11:d9:8a:3c:cc:e6:66:ec:4e:87:15:3a:ef:ce:73:a0:62:e4:
ff:db:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:40 2025 by rpki-client