Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
File: HyLAhI0wWeWuVfaMBwecuaksJ54.cer (raw, json)
Hash identifier: hEttCSSY7E+Y+VRKJeyTA3UwXNXlWuYeSXNliQ9CZVQ=
Subject key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD5309C0CF603FB233804F51B0FD53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.80.40.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:53:09:c0:cf:60:3f:b2:33:80:4f:51:b0:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:84:4f:a4:62:33:fa:1c:89:12:e2:81:aa:
6c:f1:04:61:f0:1b:d3:97:89:6f:3d:95:37:f9:c2:
bd:85:11:0a:0d:cb:f4:8e:c0:40:26:16:f7:d2:37:
59:2b:88:f7:8c:da:13:de:b8:82:42:ec:71:de:93:
7c:01:07:6b:80:f5:09:1c:71:cb:d9:c8:df:14:99:
54:2c:6b:9a:15:bd:6c:48:3d:b0:97:59:ff:b7:46:
51:8e:c5:5a:c1:d1:da:6c:89:5d:7f:82:07:0d:9f:
a6:4a:d8:2f:b7:6f:30:90:cc:50:b3:87:b4:0b:65:
33:56:eb:9a:e0:d8:2b:de:87:a7:98:0c:de:79:5c:
b4:0e:6a:6d:d4:23:df:fa:17:ea:89:88:2e:91:75:
00:ef:84:77:33:d5:31:55:5b:73:e0:53:be:ec:32:
e3:4c:55:c5:c5:27:bc:51:ac:79:2c:77:65:af:51:
cb:be:54:97:bf:22:2f:5c:df:b8:2f:b6:20:e0:0e:
3f:ce:5d:7f:1b:3d:2c:2c:e2:fd:b6:65:19:1a:d7:
c7:fe:b3:b8:92:0a:ad:a8:7d:e7:c8:9f:a7:b0:c0:
71:ab:9a:3a:2d:64:5e:b1:a9:84:a2:c4:6d:73:1b:
af:50:6a:85:de:75:97:02:fe:dc:ce:94:a9:3a:33:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:50:30:72:51:35:71:38:8b:a2:0c:c0:80:29:19:db:d7:ad:
94:cc:ee:30:af:90:01:a4:91:8b:50:bf:64:6b:f8:7d:90:45:
0e:91:81:74:6f:76:92:d7:4c:f1:d3:52:1a:4e:3a:43:4f:16:
dd:04:05:4f:80:77:3a:64:3b:43:63:fc:87:e2:fc:8e:ca:e9:
c4:3f:0e:a1:4f:14:92:ed:16:82:e1:f1:cc:71:f3:13:7c:d9:
e3:d1:f5:a1:d2:5d:fe:54:f7:91:00:a7:be:50:77:d4:5c:e8:
e4:ad:e3:6c:33:18:52:d2:78:45:59:22:99:d6:26:b9:6d:90:
db:3f:81:7e:7b:6c:45:05:04:4e:d4:30:7b:94:56:e5:10:2d:
e2:dc:9c:3f:fa:79:0d:df:6f:95:fc:13:e1:1c:f3:8f:ca:44:
ab:44:c7:ca:e2:76:de:28:44:05:f1:27:6f:e7:40:14:da:29:
3c:37:82:11:dc:15:1f:4c:68:8d:23:60:67:98:6b:01:37:72:
c9:61:7a:b1:c0:b6:4f:d3:df:42:1d:8f:3b:cf:77:fe:60:e8:
f8:af:9c:e0:95:14:33:2a:41:ad:ae:75:a3:69:98:97:83:82:
9d:cc:4c:c1:bf:b6:28:cb:5b:ef:7f:8a:a8:1a:99:cc:59:93:
d3:88:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:32 2025 by rpki-client