Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.cer (raw, json)
Hash identifier: 9Br2yLsB6sr7jKaCXWJSz1PVIWv+SkElNUvM3KQoueI=
Subject key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE1B2429999956895B16E3718A61D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208010
IP: 193.168.132.0/22
IP: 2a09:6180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e1:b2:42:99:99:95:68:95:b1:6e:37:18:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:ce:f8:cf:8d:98:70:49:de:08:bd:7a:54:
d2:d0:e7:9e:70:f3:ea:5a:90:9a:b4:5f:dd:d2:ed:
3e:11:4d:ee:8c:7d:34:59:ac:37:e3:4b:90:e5:f1:
3b:cd:b4:6e:f8:77:80:e9:50:03:57:92:a7:a5:a2:
f3:09:5c:89:4b:c1:bc:9f:64:e5:7f:02:01:ab:98:
2e:ff:c9:78:81:53:7b:0a:4e:66:14:4d:3a:35:a8:
60:b9:23:d5:bc:09:e9:28:d4:a1:37:56:2c:bc:de:
c4:58:4e:8d:d2:23:99:68:aa:24:72:04:18:1d:31:
83:90:d2:c4:78:de:73:5a:d9:81:90:de:d5:24:c4:
72:29:64:c9:73:0c:92:f4:21:e0:2d:f5:9a:c9:d7:
07:4f:43:24:44:1c:3d:61:0c:79:ce:a1:1e:56:40:
91:78:24:69:f4:34:2f:4a:85:6e:01:80:26:5f:c1:
e7:8c:15:8f:7f:71:d0:76:be:ee:20:df:5f:b3:29:
e4:74:fa:07:5a:52:93:21:bb:22:c7:a1:01:46:d7:
2b:b9:a4:4a:9c:a8:13:48:0a:f0:ad:2c:f1:75:7c:
22:c4:ba:3d:75:05:90:11:06:85:86:93:5c:d5:e4:
d7:28:53:5c:64:e5:42:a9:e0:4c:25:da:71:e9:5e:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.132.0/22
IPv6:
2a09:6180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208010
Signature Algorithm: sha256WithRSAEncryption
43:6b:f8:b6:3c:a8:8f:d3:33:be:9f:ed:38:43:13:3b:80:c5:
9d:0e:f0:67:f3:ec:cb:33:4f:6a:5f:a6:38:c8:f5:96:35:4c:
64:60:42:45:b4:10:68:22:a5:5e:c7:6b:c3:19:90:9e:b5:55:
56:f4:1e:71:18:90:1d:ff:11:88:5f:c6:50:aa:41:62:13:0d:
22:28:b8:44:83:d6:0b:67:c2:6a:ad:99:a6:2a:8e:d3:8d:9b:
10:86:8e:9a:68:e3:9c:cc:2b:a3:d3:e2:b0:50:36:d4:15:ae:
c7:ee:f4:96:be:ee:da:69:86:8b:b5:68:13:22:f2:3f:b3:18:
f4:2a:c2:ad:5d:93:0f:87:28:e2:d5:37:63:81:91:96:ba:29:
90:33:f1:eb:76:d5:57:97:04:b9:60:d7:f1:2e:54:d6:9a:ba:
bc:2e:6b:65:c0:ed:b2:2d:f3:fe:cb:e8:1a:8f:38:5f:7d:38:
60:3d:a3:a8:f4:87:79:de:bd:a4:09:5b:1a:c4:4a:a7:bc:8b:
da:49:d7:12:cf:e0:08:b5:8d:2a:3b:ab:04:f6:4a:8d:8c:4e:
fd:5d:41:2d:66:1e:b3:e9:5d:50:16:79:35:e4:6b:7a:ef:5e:
84:b3:31:81:12:5f:a1:4c:e6:ee:56:6f:b9:46:ca:72:6a:a9:
4b:74:f8:ee
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQiH+GyQpmZlWiVsW43GKYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTc2Nzk0MzU3M2Q2YjM1ZWJhY2UxYTJmMzQ4Y2EzZjAwNTZjMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYTO+M+NmHBJ3gi9elTS0OeecPPq
WpCatF/d0u0+EU3ujH00Waw340uQ5fE7zbRu+HeA6VADV5KnpaLzCVyJS8G8n2Tl
fwIBq5gu/8l4gVN7Ck5mFE06NahguSPVvAnpKNShN1YsvN7EWE6N0iOZaKokcgQY
HTGDkNLEeN5zWtmBkN7VJMRyKWTJcwyS9CHgLfWaydcHT0MkRBw9YQx5zqEeVkCR
eCRp9DQvSoVuAYAmX8HnjBWPf3HQdr7uIN9fsynkdPoHWlKTIbsix6EBRtcruaRK
nKgTSArwrSzxdXwixLo9dQWQEQaFhpNc1eTXKFNcZOVCqeBMJdpx6V5ISQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB52eUNXPWs166zhovNIyj8AVsGrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzdlMDk1
Ny1jOTUxLTQ1MDItOWZlNy1hNDA4ZDY3YmZmMzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvN2UwOTU3
LWM5NTEtNDUwMi05ZmU3LWE0MDhkNjdiZmYzNy8xL0huWjVRMWM5YXpYcnJPR2k4
MGpLUHdCV3dhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwaiEMA0EAgACMAcDBQMqCWGAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMsijANBgkqhkiG9w0BAQsFAAOCAQEAQ2v4tjyoj9Mz
vp/tOEMTO4DFnQ7wZ/PsyzNPal+mOMj1ljVMZGBCRbQQaCKlXsdrwxmQnrVVVvQe
cRiQHf8RiF/GUKpBYhMNIii4RIPWC2fCaq2ZpiqO042bEIaOmmjjnMwro9PisFA2
1BWux+70lr7u2mmGi7VoEyLyP7MY9CrCrV2TD4co4tU3Y4GRlropkDPx63bVV5cE
uWDX8S5U1pq6vC5rZcDtsi3z/svoGo84X304YD2jqPSHed69pAlbGsRKp7yL2knX
Es/gCLWNKjurBPZKjYxO/V1BLWYes+ldUBZ5NeRreu9ehLMxgRJfoUzm7lZvuUbK
cmqpS3T47g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:30 2025 by rpki-client