Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.cer (raw, json)
Hash identifier: qxa19PBtK4h/KlCHI9pB82yUnmvVjQpH8yueedfD+No=
Subject key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423697BD79BE71FED3412E7AD645194DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204358
IP: 185.251.60.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7b:d7:9b:e7:1f:ed:34:12:e7:ad:64:51:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:d0:24:01:5f:f4:7c:aa:1b:e3:7b:73:ba:
46:09:e1:7a:7b:92:9b:7c:0d:99:4b:65:98:e9:03:
be:8b:31:a4:04:82:27:3c:bb:02:3f:97:c5:a8:28:
90:f0:23:a1:ac:6f:c5:15:51:53:09:1b:34:3b:bd:
76:4d:10:10:1a:ac:fb:f5:a1:c6:d7:6d:63:74:bb:
71:af:54:7b:bb:b7:85:45:42:ba:3c:68:3a:87:1b:
f6:18:4f:d3:43:f7:cc:27:e3:3c:3f:47:05:5c:94:
3d:73:5e:38:0a:fb:e9:3c:28:1d:91:a5:9d:17:cd:
a8:3d:fd:5d:1a:d9:d2:fd:59:c5:31:63:87:aa:1c:
91:7e:be:8a:bc:a3:75:f7:a8:ce:70:a9:f7:22:76:
4b:98:fd:b8:72:ea:18:1d:13:88:18:5e:84:79:3a:
f4:c1:c6:1e:0d:e1:56:7a:66:a6:3f:e1:5c:f7:42:
03:1e:28:4d:68:bd:3e:0e:e3:3b:27:a1:67:21:38:
5b:22:80:6e:e4:44:12:e0:5a:d1:91:54:ad:d2:68:
54:7b:21:70:1f:66:8a:0c:93:0e:b2:c8:d6:a3:78:
04:12:8a:0d:b8:87:77:39:b1:26:69:11:b3:f6:f8:
80:d4:f1:8f:c5:e4:5d:94:01:24:18:51:58:97:a5:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204358
Signature Algorithm: sha256WithRSAEncryption
18:3a:d2:b9:18:64:3e:b4:36:c0:f3:b9:58:9d:e8:1c:e7:a7:
91:07:24:b7:5b:56:e8:6e:f2:9c:b8:92:05:8b:45:af:45:97:
8d:e8:f3:d9:eb:3e:ef:84:2e:14:20:4f:37:09:bc:d3:5e:3e:
01:07:91:c8:22:3d:a1:50:38:cd:1c:3b:8f:30:52:61:b1:84:
ab:ac:54:8d:9a:02:c2:a5:06:ea:40:fc:20:86:95:15:b4:8e:
a9:a7:48:93:c9:89:1d:a3:85:f8:78:8f:08:99:08:dd:96:37:
c0:08:e7:95:51:19:5a:22:61:f7:5b:0c:5a:04:d9:8d:04:04:
05:6e:9b:12:77:56:92:c3:9f:9b:e6:54:3b:c5:8e:9b:23:9c:
2d:d8:bd:c6:72:fd:cf:67:12:5c:b1:c6:16:59:e3:63:8a:17:
ec:55:15:58:55:66:64:b0:79:8c:6e:1d:30:cb:a1:da:8d:03:
70:cb:95:89:8e:60:b2:29:4b:19:2f:3c:a7:63:2b:73:d5:90:
dd:f4:20:0a:af:6e:8f:ea:2d:b1:bd:3a:8e:98:0a:5b:e0:0b:
1a:e2:d2:be:2a:59:a8:45:3c:e7:e5:7a:3b:31:83:8b:23:27:
78:c4:bf:a3:80:49:f0:03:cf:e7:e7:15:05:6d:90:74:0a:60:
d6:ad:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:54 2025 by rpki-client