Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
File: HW2cywJxWEmzoey800toh_ZJlA8.cer (raw, json)
Hash identifier: Yj80kHoxl4V5H8Zp4/wfQr1FmSSK9Q2QxEZV9dSyc/o=
Subject key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067E5A2D9DED5B2187BE1A0FDE9DA7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.141.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e5:a2:d9:de:d5:b2:18:7b:e1:a0:fd:e9:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:5d:55:5b:b7:ae:28:b9:1f:ca:8b:59:67:
48:0e:bc:9e:08:54:f2:3a:77:ff:86:1c:8f:7b:4e:
c7:39:fa:a0:c4:45:7d:06:c4:c7:0c:2f:e7:bb:51:
9c:cd:b4:23:cb:cd:38:fe:e5:db:60:5e:6e:cb:ba:
26:b2:94:8b:08:c9:bf:02:a1:43:6b:6e:0e:62:2b:
8e:61:f1:1a:f7:42:97:47:94:b5:72:5d:9b:1a:08:
65:b3:b7:d1:f3:9c:c6:3c:fe:8f:b5:dc:37:27:cf:
60:df:38:66:19:d7:49:7b:51:c7:32:28:a3:b6:cc:
2b:45:35:84:d3:63:ef:14:bd:05:8c:2c:de:c4:18:
96:cd:99:35:60:94:3c:98:0f:0b:d6:72:44:a9:5a:
83:91:43:63:19:7b:64:e9:88:e5:a3:58:26:b9:60:
37:c1:5d:09:fe:c6:e2:73:b8:65:8c:50:04:0d:31:
81:65:5a:11:ae:73:bb:3c:e6:5a:1a:39:92:ec:a2:
36:6c:22:86:59:d5:1b:6b:3f:30:5e:d0:00:75:ff:
3c:80:c4:26:5f:df:cb:2a:22:5e:33:0d:d5:4a:cb:
84:74:b9:c7:6e:70:b5:f1:93:d2:47:b3:e0:15:c4:
d3:96:69:fe:a7:14:cd:50:bc:04:0f:82:f8:76:8c:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c2:98:b2:a7:8b:6c:0a:11:5f:50:be:ad:03:80:d4:94:ad:
04:f7:c5:74:a9:35:32:cd:5f:6c:68:8a:1e:4f:1a:0e:e2:8b:
5e:4e:d9:7c:e9:73:cc:c9:37:16:9e:a1:fe:e2:ec:19:5a:ea:
a8:d8:d2:bb:87:90:04:9f:1d:c5:73:ff:f0:09:fe:09:c6:9d:
9e:e8:33:af:b6:36:8d:7a:48:fd:13:10:52:c9:ba:5b:96:aa:
93:05:16:91:09:90:1c:0e:14:c6:64:0b:30:8d:cb:e8:c9:e5:
53:d3:e1:d1:0d:fe:26:60:58:b9:43:49:cc:90:ac:b7:a4:a9:
c3:a8:5b:d1:dc:bc:ac:ab:b4:01:11:70:df:f6:3d:af:36:4f:
16:36:05:dd:32:b3:30:ab:db:21:c1:b6:bd:0f:04:99:1e:06:
fd:03:92:47:7c:93:bc:80:2b:e7:10:75:21:a6:91:b5:05:12:
ae:10:24:02:a5:1e:8c:aa:33:48:d2:dc:b2:98:72:43:90:61:
cd:70:14:39:b8:05:b9:e6:29:29:76:f6:85:39:ae:d7:de:39:
95:38:a6:61:e2:56:db:ac:80:23:cc:07:c9:a9:33:c4:f7:32:
3c:6d:dc:2a:dc:d4:29:22:f1:f2:a6:45:c7:66:25:53:d0:57:
b4:6c:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:09 2025 by rpki-client