Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
File: HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer (raw, json)
Hash identifier: AJ7VQFjZlKWhP4wNVFU+wC7NLItsR6Rw6Q55dYl51JE=
Subject key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01945FB45FB7A90033856F77B48AF3AA33A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Jan 2025 12:47:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62138
IP: 185.45.20.0/22
IP: 2a01:79a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b4:5f:b7:a9:00:33:85:6f:77:b4:8a:f3:aa:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 13 12:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:85:a0:ce:c3:18:99:25:16:02:2b:48:90:
f3:80:1e:ec:65:69:33:f5:e3:02:82:fe:a5:e2:01:
9f:4b:ba:bc:dc:07:8b:12:d0:b4:d6:f7:53:c1:75:
d0:ea:df:e8:1c:9d:cf:2a:a5:e0:8e:8b:ee:65:de:
a5:e3:00:cc:60:8b:37:9a:3b:bc:79:69:01:36:3a:
1a:ea:be:b5:57:cd:89:3e:6d:6d:cd:60:cc:1b:00:
d7:de:88:2f:43:ee:c6:e9:cd:9e:37:89:4d:f8:0a:
2b:11:39:c0:da:28:57:ef:32:f7:3e:00:c9:bb:0b:
c2:67:30:18:b9:0a:58:43:64:8f:23:f4:43:7d:0d:
ed:28:5d:d5:c9:9e:ac:3c:6d:14:2b:c3:67:e7:ce:
65:d1:1e:60:2d:fd:65:2d:bc:ff:15:91:f6:f2:3a:
73:c9:3f:c3:05:05:a7:99:dd:c9:c4:c1:40:5d:a1:
83:db:98:b9:2b:00:35:03:c3:9b:b0:61:0c:48:e5:
de:7d:bc:42:9b:53:8e:02:34:e7:55:75:11:d9:c2:
30:6c:d6:14:8b:9a:d6:1b:c7:86:44:ae:9c:c9:ad:
0d:82:4a:b3:76:73:1b:d9:4a:7f:ef:83:de:52:07:
7a:b5:72:cd:82:2d:61:61:b5:af:a3:c6:98:89:bf:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.20.0/22
IPv6:
2a01:79a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62138
Signature Algorithm: sha256WithRSAEncryption
0b:09:0d:b2:d3:02:7a:c4:80:66:99:11:be:59:00:b5:79:8c:
30:c2:9d:70:6e:ae:5e:c7:4b:3e:a0:22:09:ff:d8:1d:94:96:
b5:d0:db:63:e6:56:f1:b8:2c:99:dc:f1:dc:a0:00:53:ce:c4:
1c:15:56:ea:3a:6f:cd:90:70:4a:56:d5:24:e6:47:ae:85:8d:
46:b2:5d:96:18:8b:1d:90:ed:2f:27:6b:cf:59:dc:9f:b7:18:
f2:8e:7a:ab:19:ec:da:ab:f4:3e:07:e6:44:0f:85:d2:aa:7a:
e2:4d:13:44:04:5c:c9:21:11:bb:da:04:32:e7:55:9f:5d:05:
ec:24:04:b6:3b:fe:e5:08:de:7d:b9:4e:06:d8:1f:26:81:27:
26:1f:0e:73:66:d9:fc:69:55:f0:90:2d:ae:83:d6:4d:6a:31:
36:ee:ac:c3:d3:09:c5:f1:19:68:a4:54:6e:55:08:33:40:08:
80:56:09:ca:19:b6:d1:d9:d4:41:7c:63:0c:f4:54:61:46:94:
23:72:45:75:f2:e3:fd:6b:21:be:dc:eb:c0:06:92:56:0b:e7:
ad:e7:7d:f9:08:75:4c:e5:16:f8:19:bc:77:22:c5:16:87:ea:
42:28:8a:20:91:65:23:1c:0b:3a:b7:56:04:ea:ed:ee:a1:84:
1c:33:de:34
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZRftF+3qQAzhW93tIrzqjOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTEzMTI0NzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2ZiNmRmOTMzNzVhMDZjNTY4MmMwNTdjMGZkMmE3MzA2MjE4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaqFoM7DGJklFgIrSJDzgB7sZWkz
9eMCgv6l4gGfS7q83AeLEtC01vdTwXXQ6t/oHJ3PKqXgjovuZd6l4wDMYIs3mju8
eWkBNjoa6r61V82JPm1tzWDMGwDX3ogvQ+7G6c2eN4lN+AorETnA2ihX7zL3PgDJ
uwvCZzAYuQpYQ2SPI/RDfQ3tKF3VyZ6sPG0UK8Nn585l0R5gLf1lLbz/FZH28jpz
yT/DBQWnmd3JxMFAXaGD25i5KwA1A8ObsGEMSOXefbxCm1OOAjTnVXUR2cIwbNYU
i5rWG8eGRK6cya0NgkqzdnMb2Up/74PeUgd6tXLNgi1hYbWvo8aYib8cVQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBz7bfkzdaBsVoLAV8D9KnMGIYpUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2ZiYWRm
Zi03NWQ3LTRjYmEtOTczNS02NmVjMmVhZjY0NmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZmJhZGZm
LTc1ZDctNGNiYS05NzM1LTY2ZWMyZWFmNjQ2Zi8xL0hQdHQtVE4xb0d4V2dzQlh3
UDBxY3dZaGlsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuS0UMA0EAgACMAcDBQAqAXmgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDyujANBgkqhkiG9w0BAQsFAAOCAQEACwkNstMCesSA
ZpkRvlkAtXmMMMKdcG6uXsdLPqAiCf/YHZSWtdDbY+ZW8bgsmdzx3KAAU87EHBVW
6jpvzZBwSlbVJOZHroWNRrJdlhiLHZDtLydrz1ncn7cY8o56qxns2qv0PgfmRA+F
0qp64k0TRARcySERu9oEMudVn10F7CQEtjv+5QjefblOBtgfJoEnJh8Oc2bZ/GlV
8JAtroPWTWoxNu6sw9MJxfEZaKRUblUIM0AIgFYJyhm20dnUQXxjDPRUYUaUI3JF
dfLj/WshvtzrwAaSVgvnred9+Qh1TOUW+Bm8dyLFFofqQiiKIJFlIxwLOrdWBOrt
7qGEHDPeNA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:00 2025 by rpki-client