Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer (raw, json)
Hash identifier: ZGloC2imByD/NG4brT5DP1Xiyhl6IbQGMwwUkX2WAKg=
Subject key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068572444F69D84B9158FCCC0732726
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.253.8.0/24
IP: 2a12:85c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:57:24:44:f6:9d:84:b9:15:8f:cc:c0:73:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:95:e4:a6:0b:1a:fe:51:ac:db:79:a2:a9:
8a:80:42:bd:d2:a8:d3:cc:c3:bd:a6:66:52:4a:fb:
dd:f7:7f:60:3c:b8:47:e7:e2:95:38:82:05:b5:57:
e7:99:c5:35:a5:61:e4:d7:a7:7b:a3:78:bb:33:ba:
60:fb:c6:7b:62:63:c5:a0:8a:3c:3a:47:5c:62:95:
9b:c6:68:9e:1f:28:14:11:cd:8f:c2:06:c1:89:53:
82:e3:52:40:28:ad:af:f8:f3:87:92:c8:20:68:df:
89:85:68:f8:64:98:17:63:33:36:26:a8:1d:8a:8e:
d6:a3:12:26:3a:79:68:d8:24:c1:fe:e3:ed:e6:70:
26:ae:25:56:a4:da:78:15:08:ce:2b:02:2f:2e:c9:
b2:dc:fc:a8:a3:b3:a7:8f:67:72:56:03:86:57:b1:
22:c7:d4:2a:6f:57:23:51:f3:ad:c1:ab:18:38:75:
99:e6:6a:9b:90:e9:54:42:fb:20:ec:45:ad:38:9d:
28:1a:09:2b:ba:8c:a1:c8:6f:a7:45:48:77:3f:50:
bf:5a:b4:af:0d:62:21:af:df:ef:fd:35:8e:1b:1e:
e6:8d:c8:54:4e:59:cb:97:b3:51:98:5a:19:a6:58:
61:4a:15:69:b9:d5:9f:0a:03:6a:33:49:62:25:8a:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.8.0/24
IPv6:
2a12:85c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:52:bb:8c:1f:21:5e:6d:0f:76:bc:bc:b1:78:15:7c:54:e5:
e7:09:01:3d:b2:1a:73:ae:b7:ce:c7:18:ef:9c:5d:3f:ec:e6:
d6:b8:b0:aa:93:32:06:c3:0e:74:40:ac:35:32:2d:96:ca:68:
d7:92:9e:a9:c3:30:2c:e8:d2:0a:af:d4:0b:bb:1f:58:2e:6d:
63:50:11:05:ba:fc:8a:a2:57:00:19:a0:57:01:9a:48:15:d7:
0b:c0:e3:0f:84:33:21:ae:c4:11:7f:fd:fe:27:7b:af:30:97:
30:af:50:ee:23:d1:68:97:bf:41:27:f0:db:98:4c:53:c4:c2:
11:35:c6:8e:45:6f:dc:61:62:1d:5a:cd:aa:26:e5:1b:cd:4d:
89:72:fb:91:bb:2c:d1:7f:ae:fb:7c:4b:93:d5:91:27:c5:8a:
4d:ab:80:b1:00:ee:66:13:90:29:c9:81:68:63:19:26:a5:f8:
86:f7:12:1a:5b:7f:9c:2d:7e:d3:88:4d:5f:de:bf:0f:7f:54:
87:e6:a9:05:91:70:34:4a:3b:c5:f0:72:d8:43:f7:91:59:ec:
bc:da:9b:90:55:ce:a4:30:d2:94:e4:be:b3:ec:5e:6c:6b:5a:
f5:ad:fc:cd:8b:d9:36:af:a7:1c:a3:03:9c:cb:51:41:e3:5d:
2d:cc:99:4d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQgaFckRPadhLkVj8zAcycmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2ZiMDg3ZmZiN2Y2MWNlMTEzZjY5MzQ1ZTRkNTBhMTEzODA4ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77CV5KYLGv5RrNt5oqmKgEK90qjT
zMO9pmZSSvvd939gPLhH5+KVOIIFtVfnmcU1pWHk16d7o3i7M7pg+8Z7YmPFoIo8
OkdcYpWbxmieHygUEc2PwgbBiVOC41JAKK2v+POHksggaN+JhWj4ZJgXYzM2Jqgd
io7WoxImOnlo2CTB/uPt5nAmriVWpNp4FQjOKwIvLsmy3Pyoo7Onj2dyVgOGV7Ei
x9Qqb1cjUfOtwasYOHWZ5mqbkOlUQvsg7EWtOJ0oGgkruoyhyG+nRUh3P1C/WrSv
DWIhr9/v/TWOGx7mjchUTlnLl7NRmFoZplhhShVpudWfCgNqM0liJYrSEwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBz7CH/7f2HOET9pNF5NUKETgI/qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2ZkZDUx
ZS1iY2ExLTQ4OTItYjk3YS02OWFhNTNjNjlkNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZmRkNTFl
LWJjYTEtNDg5Mi1iOTdhLTY5YWE1M2M2OWQ1NC8xL0hQc0lmX3RfWWM0UlAyazBY
azFRb1JPQWotby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuf0IMA0EAgACMAcDBQMqEoXAMA0GCSqGSIb3
DQEBCwUAA4IBAQAJUruMHyFebQ92vLyxeBV8VOXnCQE9shpzrrfOxxjvnF0/7ObW
uLCqkzIGww50QKw1Mi2WymjXkp6pwzAs6NIKr9QLux9YLm1jUBEFuvyKolcAGaBX
AZpIFdcLwOMPhDMhrsQRf/3+J3uvMJcwr1DuI9Fol79BJ/DbmExTxMIRNcaORW/c
YWIdWs2qJuUbzU2JcvuRuyzRf677fEuT1ZEnxYpNq4CxAO5mE5ApyYFoYxkmpfiG
9xIaW3+cLX7TiE1f3r8Pf1SH5qkFkXA0SjvF8HLYQ/eRWey82puQVc6kMNKU5L6z
7F5sa1r1rfzNi9k2r6ccowOcy1FB410tzJlN
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:27:41 2025 by rpki-client