Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.cer (raw, json)
Hash identifier: iwq1SZ2PMuQuXCXdpJQtxnSfOE1vi1J9NJcTAAOBtPY=
Subject key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FC5EC34280A8AFAD16031DD41F6CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49229
IP: 89.39.166.0/24
IP: 91.226.181.0/24
IP: 185.12.192.0/22
IP: 185.29.172.0/22
IP: 185.34.232.0/22
IP: 195.24.230.0/23
IP: 195.88.236.0/23
IP: 2a03:72c0::/32
IP: 2a04:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c5:ec:34:28:0a:8a:fa:d1:60:31:dd:41:f6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:a7:c1:b1:e4:69:0b:72:66:cb:8d:87:7f:
a5:c9:53:3a:b6:87:8a:20:09:49:5c:9f:ed:0c:dc:
bb:b3:d1:10:3e:6f:15:15:f9:a2:13:d4:a2:44:ab:
8a:80:2f:32:21:34:79:63:fc:e7:af:9b:23:0e:8d:
f5:3f:35:36:6d:fc:be:19:f5:44:af:c9:15:ec:53:
03:29:02:29:ca:f2:42:52:e0:b9:7e:ca:92:eb:60:
34:c9:af:76:0e:50:43:b1:dc:26:b0:90:0e:bc:f3:
37:b0:bb:99:db:01:66:37:3f:39:af:f8:f0:b1:a6:
13:1c:ec:06:32:9a:48:99:5c:60:f3:ea:bf:17:f2:
78:82:68:41:48:0b:5a:a6:6c:75:1f:54:b7:6d:49:
bd:7e:ed:bd:ac:2e:32:e6:2b:48:f9:10:db:18:16:
0f:27:99:0c:34:51:ab:c5:e9:83:ca:39:64:1d:2d:
2a:9f:68:95:fd:e8:7f:82:6b:0c:9f:62:2f:a6:c8:
e1:01:16:d2:c9:7a:be:91:02:ca:66:1d:cc:fd:bb:
16:b0:83:b3:fe:b6:22:3f:55:a0:4a:c6:88:ad:2c:
08:75:94:8a:40:f3:7a:fa:55:57:66:77:6e:d6:46:
97:a0:0f:ae:a5:0b:79:f4:dc:b1:6d:2e:4c:83:66:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.166.0/24
91.226.181.0/24
185.12.192.0/22
185.29.172.0/22
185.34.232.0/22
195.24.230.0/23
195.88.236.0/23
IPv6:
2a03:72c0::/32
2a04:6040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49229
Signature Algorithm: sha256WithRSAEncryption
80:3c:c2:d8:3f:27:18:fa:17:3c:c6:6a:75:b5:e1:22:99:0d:
8c:a0:25:b5:9a:86:c7:b3:47:e7:6d:aa:a8:dc:fb:5c:3f:4f:
42:a9:b0:ad:61:59:b9:59:bf:13:0a:9e:cd:4a:4e:af:26:08:
a0:98:16:39:2f:89:c5:7e:60:62:81:74:02:38:a4:bb:41:7c:
5f:70:64:94:1b:54:db:77:f9:4b:e6:f6:c9:4d:39:46:d3:e1:
f1:8f:7e:fe:24:be:9b:61:19:a8:4e:15:f6:4a:b4:8d:c6:17:
ac:b4:fc:e6:c5:cc:22:38:e0:a0:1e:41:e6:9f:95:e1:da:c4:
53:e4:5c:1e:8c:ad:f2:35:59:86:a9:71:2c:a7:51:c5:75:c5:
c6:c0:08:a7:d4:82:be:36:11:25:d1:5e:2e:9e:26:50:70:4e:
7c:ff:b6:ec:f3:67:29:3d:2b:65:9d:0a:47:33:7d:d1:fc:1f:
28:1d:3c:d0:7e:fb:b7:8b:90:68:41:99:58:c8:ac:3a:65:ae:
9a:d5:a9:bc:af:a3:b5:1d:35:73:11:08:29:25:36:36:81:78:
db:4b:d5:ba:e7:f4:2d:52:c2:6b:25:85:d9:29:2d:0c:06:6e:
a9:ae:61:c6:a0:76:df:8d:7d:d2:b5:7d:7e:5d:7e:19:d0:16:
d1:87:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:19 2025 by rpki-client