Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
File: 0mHPvAfsMGN33LFql6EWDHptgsw.cer (raw, json)
Hash identifier: Cm8iBCJhil6aPpYiqJSwkEkpiprzshQGkh8CWuzWx7M=
Subject key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444CA8633C3A8DC9F6906B97C67C8C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43495
IP: 91.197.88.0/22
IP: 194.4.60.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ca:86:33:c3:a8:dc:9f:69:06:b9:7c:67:c8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:f5:76:30:90:b2:14:01:fd:58:d8:db:23:
61:98:47:8b:36:74:13:a9:5f:ac:de:97:c8:fc:22:
f3:7c:c5:da:b5:95:5e:f1:a9:b0:ee:cd:c4:39:0f:
1c:6a:ff:54:a7:ec:48:af:22:8c:41:d2:15:30:35:
40:7e:40:41:bc:91:af:e8:77:99:9a:73:4e:31:1f:
32:01:ea:92:9d:da:a6:9e:56:e7:0b:2b:17:66:0e:
5d:10:59:a6:48:e9:8b:52:86:4f:74:49:a3:ed:65:
21:ce:2a:33:14:0f:f3:0c:94:a0:6f:4c:15:21:c8:
55:f8:cc:7e:89:a5:6d:a9:39:9a:f0:19:13:03:a6:
9d:cf:ad:73:91:38:1c:6b:f2:54:69:13:66:79:65:
a9:4f:24:e8:2e:09:f0:92:f2:5a:f1:07:ad:f7:20:
e6:4a:f4:7d:06:e1:db:47:f7:21:a6:ec:34:c5:df:
27:fc:19:c3:d6:0b:b7:16:88:68:75:57:d3:86:4b:
2e:4d:d5:24:6e:f1:6a:42:10:6f:3b:55:56:8b:c2:
6c:70:02:a7:5f:95:58:8b:07:e1:47:24:51:7d:d0:
5f:cf:c3:cc:8b:fb:a5:93:8a:d2:cb:a3:5e:ad:74:
22:e6:fb:f2:9f:c7:75:4f:71:43:a6:44:86:20:5d:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.88.0/22
194.4.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43495
Signature Algorithm: sha256WithRSAEncryption
54:7f:bb:2c:b6:a0:74:37:ed:2a:58:92:23:3f:32:43:7f:05:
49:d8:85:12:be:71:31:eb:e5:37:b7:af:c0:48:e2:00:26:7c:
4d:02:d7:bb:0d:9c:76:00:e7:d2:92:af:02:ca:36:0b:51:86:
a5:7b:b5:e4:68:88:b0:a5:4f:24:9c:83:03:60:82:f8:57:5a:
03:ef:8a:28:e3:65:b1:de:0a:aa:c3:86:99:63:b2:fd:4b:41:
33:f4:87:7b:7f:51:a0:70:ac:f8:01:da:02:cc:e8:0e:49:6d:
97:05:66:d0:d4:b3:cf:75:ae:20:0f:cd:bc:e7:81:4a:40:85:
a4:50:5d:10:95:42:3b:9c:a7:0d:d1:f1:3b:38:b1:9c:f8:a0:
58:ab:e1:8c:28:11:77:e2:d4:90:b3:bf:33:5c:7e:59:11:0f:
2a:e6:2c:c2:7b:6b:41:80:e7:02:59:90:07:e4:bb:96:c3:17:
06:07:c4:b2:08:7b:d7:3a:50:a3:03:6e:2c:bf:26:0b:f5:db:
68:99:10:51:71:15:34:70:cc:a3:da:cd:e8:7b:35:fe:03:75:
7f:4a:79:f9:91:64:42:6e:f5:40:18:5e:74:f7:e9:de:df:27:
b2:cd:26:2d:3b:e1:03:6a:56:09:21:8e:6e:b8:0b:48:90:4a:
88:76:89:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:23 2025 by rpki-client