Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.cer (raw, json)
Hash identifier: 2Pg3tbzZYr9N2LrMlO5H9mbFtiRczUbb/El3O8HXeac=
Subject key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D6CA1B31A8544211CAE552AA412C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.211.86.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6c:a1:b3:1a:85:44:21:1c:ae:55:2a:a4:12:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:82:7b:e0:d2:6d:4d:bc:bb:0c:3c:1b:7e:
08:a0:fa:82:48:4b:4d:b0:10:c6:65:ac:03:4e:16:
b9:cd:f0:5d:77:85:55:1f:f9:ca:cd:b0:b5:1b:15:
01:c1:d6:ba:d3:21:a4:89:02:82:42:c8:7c:33:f2:
0d:89:23:ad:ab:75:ea:0f:d8:f1:32:84:45:b7:35:
0b:26:82:0b:5d:74:05:c7:13:4a:35:e9:2f:29:10:
19:22:df:d5:a0:38:76:ed:98:43:ee:f2:bd:d8:82:
35:94:01:b9:93:14:99:d8:49:7f:d5:02:81:54:37:
32:25:0d:e4:95:76:ac:41:f5:bf:d2:67:bb:a7:4f:
a3:cd:f7:19:7c:de:52:b6:72:db:de:f2:64:e5:e5:
73:b5:1e:00:dc:d5:5b:2f:f6:03:46:bb:74:52:fd:
5d:25:21:9e:6c:02:f2:ce:41:6e:af:68:8b:ec:e9:
03:8f:68:fe:ae:14:53:58:fa:4a:be:d5:f5:10:e8:
bb:5a:b0:5a:22:91:97:5a:10:eb:5a:c1:18:c7:ac:
17:05:53:d4:ab:60:5d:86:82:1a:03:47:5f:39:15:
b3:25:a3:0b:c2:62:bb:18:c1:98:32:ac:29:3b:c5:
c2:5e:71:a4:bd:6a:4b:02:14:98:ad:09:80:a6:07:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.86.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f0:80:82:13:a6:dc:24:5c:a0:64:73:7b:08:fe:18:61:9d:
ad:3e:31:e4:65:94:19:2d:f9:66:eb:9b:6d:bd:83:81:b6:27:
0b:97:14:25:21:00:e8:bd:f4:fd:7c:47:bf:e3:06:79:ba:ed:
fb:62:e1:7f:a3:05:a6:90:e7:76:7a:84:b5:5b:8b:df:a3:04:
da:0e:73:b0:c3:ea:55:7a:ca:85:a6:fd:16:fe:70:52:71:c3:
a1:07:9f:6a:e6:ef:23:e2:12:e6:47:c5:ff:b3:7c:47:2e:a3:
f7:54:11:9c:c6:c3:3b:22:5d:65:8c:74:70:05:09:88:74:73:
f3:a9:c4:55:e5:c6:ba:07:6e:af:4b:dc:a6:4a:60:71:a2:66:
d0:e3:8f:89:d9:af:68:5e:62:e3:a6:bc:bc:68:5e:12:84:a2:
3d:14:01:d0:77:e9:ba:0a:e6:9d:dc:99:0e:da:b9:e4:0b:45:
f7:03:72:e5:0c:ae:86:55:da:97:75:a9:08:95:bc:03:a4:1e:
a8:e9:23:b7:f9:fd:fb:b5:3d:46:48:8f:b7:95:6f:6f:ac:3f:
7b:96:80:35:f2:eb:7d:7a:da:c8:2e:e8:38:6f:89:9e:9e:0f:
89:35:fd:d8:d2:bb:d1:2a:40:1a:b5:c0:ea:1b:4c:60:b0:64:
e7:b6:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:15 2025 by rpki-client