Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
File: HlcDhG16g2S-wwMDTbkay_9C2gw.cer (raw, json)
Hash identifier: FaWX0AxA4BHJ83IxsdRQEwqVZaui7y9lHzJhLk2+ZyM=
Subject key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C300D80247D978AEC602C6C7718B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:14b0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:30:0d:80:24:7d:97:8a:ec:60:2c:6c:77:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e5703846d7a8364bec303034db91acbff42da0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:c5:6a:ba:53:27:66:d7:41:bd:86:81:a0:
6f:16:19:57:ec:c1:52:95:0a:7a:a8:2c:16:16:73:
8f:73:8f:47:30:22:28:34:ee:e6:86:ce:53:dd:40:
c8:55:f4:86:f0:79:f9:00:e9:09:c9:b7:a8:bf:bf:
e3:95:d3:45:41:09:a1:62:ac:59:d9:92:5f:26:a8:
01:21:0d:f6:86:26:56:d4:86:47:b4:6a:d2:83:5a:
d4:01:52:38:e5:06:21:51:db:ca:03:bd:eb:22:82:
6a:f2:09:5e:79:8d:6f:3a:cb:ba:c9:76:cc:a5:aa:
f0:24:7d:67:67:3c:3b:3f:6a:42:ae:46:1a:38:6c:
6d:0b:7b:2b:f0:12:6c:41:80:03:9b:e6:d9:66:9c:
e9:2f:f3:06:88:28:8d:ce:df:e8:4d:1d:4a:0d:b0:
3b:a9:86:40:ea:b3:41:33:f6:d3:db:15:34:a8:94:
96:03:e2:11:99:a5:57:ab:14:34:96:79:d2:92:af:
76:c7:c2:c3:f3:6c:bd:76:84:9e:a4:db:c4:99:0f:
d6:33:03:19:5e:b6:a1:2e:c2:41:3a:4d:d7:75:8f:
19:53:52:c9:d7:b3:de:c9:21:aa:7f:97:7e:1e:11:
d3:10:ea:9d:98:84:a4:f1:d6:45:9a:c6:ce:2a:99:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14b0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:d2:cf:c1:d4:da:a6:1f:5f:38:78:cc:dc:98:23:27:39:74:
d5:e8:dd:49:9b:dd:f4:22:cf:48:54:b3:23:d3:d7:e7:96:a2:
50:2c:a0:73:f6:e1:8c:bb:df:62:e8:62:2d:cf:c2:da:86:0d:
de:57:a2:d2:59:af:4f:3b:3f:5f:c1:af:97:6a:75:5d:c6:fb:
f5:53:f3:d5:c6:7d:0b:ca:81:12:c7:44:e9:68:d9:26:06:fd:
fe:97:0d:67:76:ac:2b:44:f6:6a:f4:9a:35:6b:72:e2:41:8c:
d0:4d:09:b2:e2:ba:31:9c:6a:3e:ac:59:a3:57:c1:72:5d:e6:
90:95:9a:a7:e5:21:67:28:35:25:af:1b:ec:9e:42:08:49:d0:
3c:cd:86:fe:55:04:12:27:74:5b:42:2b:8a:88:ed:ca:9f:bd:
b7:47:2c:73:5c:58:b5:4a:17:95:d3:e7:9a:7d:bc:8f:65:a5:
ee:be:2b:51:d6:3f:df:1a:c2:c9:c0:bf:32:07:87:04:e6:f7:
27:fa:42:10:7f:10:57:c2:f9:63:28:4f:e1:da:b4:41:2b:ac:
47:00:f7:eb:d5:a7:4f:01:b0:91:0f:a7:19:47:a2:4b:fa:93:
4f:99:24:4a:b8:f2:cb:2d:e7:bc:b1:eb:60:18:4a:64:8f:c0:
15:88:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:18 2025 by rpki-client