Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
File: h-2cuDQKwglaTLBSjl6i9zjOpnI.cer (raw, json)
Hash identifier: Iyv0yJkEl+Aa15BeZ9NfgR+YZVUdsI0oKNsuqAabFAk=
Subject key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D62C52FA85826823158931B9DB2E7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205925
IP: 185.197.212.0/22
IP: 2a0a:7c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2c:52:fa:85:82:68:23:15:89:31:b9:db:2e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:9a:5e:bd:92:0e:2f:0e:0c:52:50:4e:e4:
59:77:3e:84:7f:b8:b6:f5:c5:3a:30:79:6a:5c:cb:
36:97:f6:dc:f2:cc:8b:6d:76:51:f7:b2:4e:58:89:
31:8c:a0:c7:33:43:48:81:7c:be:a2:7f:b4:29:47:
37:eb:5e:a5:eb:92:ac:98:c5:9c:52:90:85:33:94:
17:f9:df:38:89:a8:57:b7:5a:f9:4c:c9:61:99:54:
4b:67:2e:95:0f:76:dd:e0:f1:40:ae:78:cb:5a:f2:
fd:65:8c:47:f5:95:69:ac:6f:b5:50:cb:ce:14:6e:
3e:a8:84:29:ad:36:bc:f3:7f:31:15:aa:9d:fc:15:
9f:81:9e:8c:38:17:84:5a:c3:07:b2:88:41:ec:69:
c2:b6:9d:c4:86:ab:d3:b8:82:6e:be:3c:08:ea:98:
57:aa:1d:38:36:a6:9e:82:e3:a1:25:8a:c3:a7:a7:
fa:59:cb:a6:17:e9:26:9b:b1:c4:98:27:97:d7:e1:
ca:ac:da:97:4e:8d:1d:db:93:94:1b:2b:6f:e8:03:
66:41:c6:ec:06:76:09:3a:1e:09:5c:33:85:92:40:
a3:ac:36:db:9d:4c:d9:ba:de:89:78:ae:89:43:c0:
c8:77:e0:8a:31:8f:32:c7:c6:b5:05:e1:48:a8:c1:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.212.0/22
IPv6:
2a0a:7c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205925
Signature Algorithm: sha256WithRSAEncryption
6b:c4:13:54:6c:25:29:88:3a:98:75:10:30:80:80:c8:b9:30:
33:03:81:32:cf:a6:14:be:73:e7:13:fb:00:50:f2:a8:1b:e8:
18:26:c2:95:2b:85:7a:78:8b:19:1d:3c:c8:aa:cf:f1:e9:77:
49:54:48:5c:30:ad:e6:ba:19:39:39:7b:23:a1:fd:4a:8c:1d:
65:23:53:75:64:25:87:c7:4c:fb:d5:94:d7:53:53:54:90:14:
53:58:87:5c:f1:10:8f:e9:a6:78:60:88:7f:4f:4b:fd:09:e0:
ce:cc:ec:8f:bc:8e:5d:37:9d:3b:63:13:9b:74:5a:59:1a:78:
9a:8d:77:e1:59:56:76:88:65:2f:f7:60:fb:70:58:1f:f1:6d:
13:75:15:54:ef:07:a0:9d:be:67:02:11:73:85:32:20:ed:e1:
1e:ca:ba:c2:a7:a2:88:62:3e:88:f2:f2:6f:aa:91:0c:e1:74:
94:fd:2f:09:92:d5:69:09:57:59:89:ab:b9:77:b7:34:de:ad:
74:84:d7:5a:80:84:a8:3f:5a:6f:1e:34:2c:0e:c1:45:44:13:
d2:6c:55:d8:67:21:74:b4:2e:ca:80:15:2c:29:34:97:4e:ba:
34:13:3d:37:61:ea:82:a3:36:32:4a:ed:6e:f6:e1:2b:ba:eb:
8e:16:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:31 2025 by rpki-client