Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer (raw, json)
Hash identifier: qLaKWRvKBMR/lDNoNi3VNUE/lY9GC7pbdiMNmXuqXEQ=
Subject key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823F532643CE009A6212CFC102F7C43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209135
IP: 5.180.196.0/22
IP: 2a0b:2d40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f5:32:64:3c:e0:09:a6:21:2c:fc:10:2f:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:01:dd:2b:f3:95:a6:44:1e:49:59:87:66:
55:61:9b:8b:cd:e0:b9:bf:57:aa:f8:d1:39:13:34:
70:c9:ac:9c:a6:2f:87:9f:94:64:4d:1e:1a:8d:c0:
81:c0:8b:7e:21:c9:62:a4:5a:c4:e6:11:de:4f:5d:
07:12:fe:bf:6a:a1:0a:c2:b0:51:a1:8a:17:1d:b7:
d4:3d:07:a5:64:d7:a3:28:ba:28:cc:77:61:20:f7:
28:21:32:04:11:de:e3:eb:57:52:23:a4:92:38:f8:
2d:c6:b8:3b:0c:30:b7:04:da:ab:03:d5:ae:06:f0:
2c:1f:03:5f:b9:d4:4f:88:dd:21:22:bc:78:c3:24:
7c:3a:9d:e8:83:25:64:3d:0d:7f:78:6b:78:78:43:
52:bc:b7:be:77:64:6e:2c:18:5f:ad:07:9a:bc:8d:
32:84:74:43:af:41:84:e6:bd:c9:1d:5e:7f:c4:fa:
91:b5:cb:66:58:98:5d:89:ec:d8:2d:e6:20:c2:17:
9a:bc:83:96:35:2f:ef:5c:c7:1c:31:97:32:a8:7e:
95:9d:2e:f1:a9:44:4a:81:34:ad:03:92:52:92:04:
99:15:d9:b7:fe:79:31:20:26:d1:2c:f4:08:76:6c:
00:49:d0:d5:df:6b:f2:5f:d4:ff:5e:1b:0c:36:68:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.196.0/22
IPv6:
2a0b:2d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209135
Signature Algorithm: sha256WithRSAEncryption
79:93:ca:0c:e2:3b:5f:31:fe:91:17:e1:11:8e:56:c3:7f:af:
7b:ab:01:6e:05:1c:da:cb:00:e8:b2:3f:75:56:43:08:93:3e:
f8:eb:aa:17:41:e6:dd:1d:d3:4f:1e:fb:87:3e:98:f5:76:d6:
95:8a:84:43:60:4b:f3:cc:03:a7:d2:d0:00:3f:4b:7e:3a:38:
fb:e6:e2:36:c1:cd:0c:c0:e9:a8:10:ca:b1:b3:08:d1:17:b8:
4b:e3:66:d9:f1:5e:f1:0f:08:75:0f:d8:3f:74:e0:ce:0f:f0:
b2:22:b7:bb:4a:2e:ed:79:9c:07:02:db:33:51:9b:63:dd:ee:
66:c0:b3:d2:d5:b6:43:fa:1c:f9:8c:97:c5:c2:24:25:cf:2b:
77:e2:1d:3e:d0:20:16:e2:02:d6:a5:83:29:8c:3f:d7:52:70:
5f:a6:94:3f:16:16:06:cb:06:a3:b4:30:b6:4d:16:ca:d6:d5:
27:5f:5c:7b:b2:3b:24:ef:2d:b5:f1:fc:10:6e:ea:ac:12:40:
22:8a:aa:ad:aa:c7:18:e6:96:ea:3f:c7:50:14:1d:30:93:08:
bf:f5:b7:24:73:c7:f5:11:54:5d:4a:68:ce:e9:6c:f8:b5:b7:
76:cf:51:6f:50:e2:55:ff:21:46:e1:fd:b8:7b:26:74:55:d4:
99:5e:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:20:52 2025 by rpki-client