Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer (raw, json)
Hash identifier: 1Z3x6B+vxZTmK8riUq2/1xzz4KWdA+vuYxf+I4imPQ4=
Subject key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D80292BD9FE6839E619D712CCF4E2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199510
IP: 193.34.138.0/23
IP: 193.108.220.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:02:92:bd:9f:e6:83:9e:61:9d:71:2c:cf:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:15:d6:94:62:0d:ff:12:48:2c:f2:2e:a0:
ff:c2:7f:e3:a4:8c:d7:bd:64:9a:e2:bc:41:42:c5:
c7:2e:ae:e6:19:69:2b:6b:7c:f1:8a:b0:7b:88:bb:
36:14:ba:3e:47:84:f3:8f:f1:77:8c:46:cc:f5:9e:
fc:c0:a6:e1:03:56:e7:4e:a7:7c:7b:c7:2f:6a:2a:
7e:5f:63:9a:95:18:1d:86:10:4d:cd:91:a4:33:6c:
d6:20:1e:98:2d:3a:60:a9:ba:22:09:29:b0:d0:62:
cd:d2:06:f4:4d:8c:fa:d7:60:6b:43:ac:19:91:59:
94:e2:1f:76:b2:e7:65:e4:b4:30:b5:de:b3:bd:81:
ac:5b:ad:66:ca:6d:79:6c:38:56:e3:2a:aa:71:4a:
f8:25:94:9e:8d:46:f6:e2:bf:6f:29:7d:e2:fb:a2:
ad:09:44:d7:60:45:5b:17:06:c8:46:08:7f:52:9d:
e4:e4:2c:88:31:89:5c:ff:97:bb:7d:84:2a:37:6d:
90:96:fc:b1:99:b0:c5:81:8a:83:66:1d:29:b5:2d:
da:ee:59:0f:d6:3f:95:c7:6c:57:e3:af:4b:e9:15:
27:64:df:2e:6d:9d:97:ed:14:86:a2:25:8c:a6:37:
7e:d1:2b:20:76:44:0b:44:b3:d5:86:59:6f:7b:3f:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.138.0/23
193.108.220.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199510
Signature Algorithm: sha256WithRSAEncryption
2f:0e:71:8a:40:29:e9:79:6f:6e:80:d0:a5:fb:12:22:34:aa:
55:a8:3f:ee:68:ff:71:3e:61:55:98:ab:3f:aa:79:c0:67:08:
1a:09:2c:4c:e5:56:b0:db:ae:87:58:11:6c:10:31:bd:31:dd:
71:1a:d1:29:5a:e0:28:de:9a:76:aa:6b:93:47:00:fa:a9:33:
e6:98:d0:a2:ed:07:72:f6:82:41:9b:44:50:8d:f4:b7:34:bc:
be:9f:95:05:f2:89:54:34:da:82:ac:52:cb:6d:b1:75:62:79:
1f:a2:ea:16:00:fc:cc:83:8a:0a:6a:82:17:ce:d9:ce:ba:e6:
ff:37:aa:c5:5f:91:53:a1:46:34:3c:f0:70:47:f2:30:d1:26:
21:03:d0:0a:54:13:9b:26:cb:e0:ab:e1:76:fe:58:dd:a1:b3:
f4:10:8f:6a:62:16:7d:4c:b4:26:3b:ad:40:e5:e9:a5:a4:19:
0a:4f:5d:ff:0f:b2:28:0a:2e:ce:d6:36:d7:d0:72:e4:4e:ed:
7d:70:2e:ac:a4:fb:ec:04:26:12:80:59:af:b0:26:a2:ce:42:
d7:5d:38:83:d4:a2:ec:65:ee:6f:ee:e4:92:27:a3:14:81:31:
a2:e9:c3:0d:30:bd:26:35:8e:fe:32:19:e2:30:b2:d7:53:03:
05:67:43:6d
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQj2AKSvZ/mg55hnXEsz04uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzdmNGEzMzg3ZGI4MzhjZGE4MzdhYjkyYTZjZThmNmZmYzNjOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YAV1pRiDf8SSCzyLqD/wn/jpIzX
vWSa4rxBQsXHLq7mGWkra3zxirB7iLs2FLo+R4Tzj/F3jEbM9Z78wKbhA1bnTqd8
e8cvaip+X2OalRgdhhBNzZGkM2zWIB6YLTpgqboiCSmw0GLN0gb0TYz612BrQ6wZ
kVmU4h92sudl5LQwtd6zvYGsW61mym15bDhW4yqqcUr4JZSejUb24r9vKX3i+6Kt
CUTXYEVbFwbIRgh/Up3k5CyIMYlc/5e7fYQqN22QlvyxmbDFgYqDZh0ptS3a7lkP
1j+Vx2xX469L6RUnZN8ubZ2X7RSGoiWMpjd+0SsgdkQLRLPVhllvez/4swIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFOx/SjOH24OM2oN6uSps6Pb/w8mQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzIyZjcy
OS05N2E4LTQwOGItYjNlNS04YTg2NWZkNjIxYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvMjJmNzI5
LTk3YTgtNDA4Yi1iM2U1LThhODY1ZmQ2MjFjOC8xLzdIOUtNNGZiZzR6YWczcTVL
bXpvOXZfRHlaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwSKKAwQAwWzcMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMLVjANBgkqhkiG9w0BAQsFAAOCAQEALw5xikAp6XlvboDQpfsSIjSq
Vag/7mj/cT5hVZirP6p5wGcIGgksTOVWsNuuh1gRbBAxvTHdcRrRKVrgKN6adqpr
k0cA+qkz5pjQou0HcvaCQZtEUI30tzS8vp+VBfKJVDTagqxSy22xdWJ5H6LqFgD8
zIOKCmqCF87Zzrrm/zeqxV+RU6FGNDzwcEfyMNEmIQPQClQTmybL4Kvhdv5Y3aGz
9BCPamIWfUy0JjutQOXppaQZCk9d/w+yKAouztY219By5E7tfXAurKT77AQmEoBZ
r7Amos5C1104g9Si7GXub+7kkiejFIExounDDTC9JjWO/jIZ4jCy11MDBWdDbQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:12 2025 by rpki-client