Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
File: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer (raw, json)
Hash identifier: /PG11tP2ZOGwUzWdjcs18bS2RVM4ZFkydkVWn95luyc=
Subject key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194A1A64E4A8FC09C97E4C14978D74D8DE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 26 Jan 2025 08:06:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52048
AS: 60567
AS: 202920
AS: 203557
AS: 215626
IP: 46.183.216.0/21
IP: 84.38.129.0 -- 84.38.135.255
IP: 185.29.8.0/22
IP: 2a02:4840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:a6:4e:4a:8f:c0:9c:97:e4:c1:49:78:d7:4d:8d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 08:06:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:6f:13:0a:93:ea:40:b8:7f:3a:e8:a3:a1:
0a:bd:3b:c9:57:e8:49:78:4a:84:38:e4:51:5d:23:
d1:ba:2d:35:83:ce:3d:29:02:8e:3e:b6:a4:e8:94:
c3:fd:a7:9c:ab:24:b7:da:7c:22:c2:38:e8:67:86:
e2:ee:67:83:d2:87:b7:c7:46:a0:ed:5b:c4:9d:3e:
4f:26:7f:07:14:73:ec:79:e3:c4:47:2f:77:39:87:
31:fa:11:c5:0a:30:6c:8d:e3:60:c2:7e:c0:7c:7a:
fe:ce:50:4c:75:8f:65:37:07:57:9d:e1:cd:99:75:
ab:df:f4:c6:d7:fc:ba:3c:3a:9a:14:d8:c8:f2:14:
9d:fc:c2:bc:41:e0:b6:e5:7d:bb:48:84:f5:ae:22:
85:81:f5:53:76:8d:5c:7d:ff:c8:66:b0:c4:60:80:
77:3b:db:19:22:08:bb:bd:1f:de:f6:ff:ef:3e:2b:
1b:f2:c3:b0:b1:6a:c1:5a:cc:75:2e:df:df:c2:2b:
9e:7b:e3:93:01:87:bd:57:e3:56:7a:de:fa:84:b9:
4c:bb:84:d8:d8:28:39:09:e4:e7:1b:4d:07:7f:7e:
c2:dc:28:d9:46:4c:79:26:17:f3:2c:54:d6:74:23:
1b:86:62:97:60:0c:20:aa:9a:d6:de:be:9a:1e:de:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.216.0/21
84.38.129.0-84.38.135.255
185.29.8.0/22
IPv6:
2a02:4840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52048
60567
202920
203557
215626
Signature Algorithm: sha256WithRSAEncryption
29:95:ee:6c:01:2b:a8:ce:56:1a:13:c4:e9:50:1e:de:3c:06:
e5:01:d4:aa:41:4c:ef:1d:c4:5e:db:8e:30:65:91:4e:d2:d7:
3a:ea:c4:47:55:87:60:f4:de:1b:85:87:66:fb:53:a7:53:cc:
eb:68:ad:99:c9:15:97:a2:00:d8:08:b6:4e:d2:5d:35:c5:57:
fa:6b:ba:c2:2a:e8:8d:e1:42:a9:3e:35:76:29:82:2b:4e:a2:
d7:37:20:45:72:6c:f0:93:3a:3e:33:a5:40:3b:92:45:48:84:
5d:c8:f9:ec:86:4d:fb:86:5d:d6:23:e2:a2:bf:e7:5b:e6:b4:
04:4a:bf:d7:f8:71:09:c9:bc:e4:87:eb:7e:71:21:ae:c0:c9:
6e:76:6b:a6:b4:23:c9:4a:9e:b0:aa:7e:cd:9f:45:41:19:8b:
3a:4d:ea:a8:85:61:b9:e9:07:1a:a6:12:d3:7e:c4:3b:c7:73:
fa:e6:f6:13:6d:c7:c6:0b:e0:99:ff:23:45:fd:15:ef:32:7f:
10:b3:52:9f:a5:ae:58:cb:20:09:0d:50:84:18:3c:93:ec:8a:
e5:a1:4c:9f:c1:ec:f2:67:bb:29:2c:6f:98:1f:3a:11:80:81:
c6:e3:27:88:3a:05:0b:8b:ce:6a:c8:5c:c1:3b:58:86:d8:88:
e4:a3:cc:b2
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgISAZShpk5Kj8Ccl+TBSXjXTY3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTI2MDgwNjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjE5MzgzYTNlM2YxMTZhOWJjYzQ3NjljODUxN2NkY2U0MDc2NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWxvEwqT6kC4fzroo6EKvTvJV+hJ
eEqEOORRXSPRui01g849KQKOPrak6JTD/aecqyS32nwiwjjoZ4bi7meD0oe3x0ag
7VvEnT5PJn8HFHPseePERy93OYcx+hHFCjBsjeNgwn7AfHr+zlBMdY9lNwdXneHN
mXWr3/TG1/y6PDqaFNjI8hSd/MK8QeC25X27SIT1riKFgfVTdo1cff/IZrDEYIB3
O9sZIgi7vR/e9v/vPisb8sOwsWrBWsx1Lt/fwiuee+OTAYe9V+NWet76hLlMu4TY
2Cg5CeTnG00Hf37C3CjZRkx5JhfzLFTWdCMbhmKXYAwgqprW3r6aHt7/RQIDAQAB
o4IC1zCCAtMwHQYDVR0OBBYEFPIZODo+PxFqm8xHachRfNzkB2XHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzdjZjBi
MS0yMjk4LTQ0ODQtYmQ4MC02Y2M5ZjZjYmFhYzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvN2NmMGIx
LTIyOTgtNDQ4NC1iZDgwLTZjYzlmNmNiYWFjNC8xLzhoazRPajRfRVdxYnpFZHB5
RkY4M09RSFpjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaAwQDLrfYMAwDBABUJoEDBANUJoADBAK5HQgwDQQC
AAIwBwMFAyoCSEAwLgYIKwYBBQUHAQgBAf8EHzAdoBswGQIDAMtQAgMA7JcCAwMY
qAIDAxslAgMDSkowDQYJKoZIhvcNAQELBQADggEBACmV7mwBK6jOVhoTxOlQHt48
BuUB1KpBTO8dxF7bjjBlkU7S1zrqxEdVh2D03huFh2b7U6dTzOtorZnJFZeiANgI
tk7SXTXFV/prusIq6I3hQqk+NXYpgitOotc3IEVybPCTOj4zpUA7kkVIhF3I+eyG
TfuGXdYj4qK/51vmtARKv9f4cQnJvOSH635xIa7AyW52a6a0I8lKnrCqfs2fRUEZ
izpN6qiFYbnpBxqmEtN+xDvHc/rm9hNtx8YL4Jn/I0X9Fe8yfxCzUp+lrljLIAkN
UIQYPJPsiuWhTJ/B7PJnuyksb5gfOhGAgcbjJ4g6BQuLzmrIXME7WIbYiOSjzLI=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:16 2025 by rpki-client