Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer (raw, json)
Hash identifier: TpMB0eO/WkMvTxo37irqEZCh0hCft/B+A2ldDeK9bX4=
Subject key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421446EEDF42035523BC1E4E05B7FE033
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.95.162.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6e:ed:f4:20:35:52:3b:c1:e4:e0:5b:7f:e0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:38:dd:28:20:4e:61:ac:8c:79:05:b3:ab:
e5:be:ef:da:ab:86:4f:51:ee:b7:34:5c:3b:ed:98:
d6:f5:0b:59:54:f8:c3:58:61:13:61:c2:d6:20:90:
31:83:4a:78:04:77:e8:02:df:0b:80:f0:22:5a:d0:
50:79:e4:ae:f3:42:58:22:70:4f:57:ae:32:e2:96:
42:1e:5f:77:98:a7:ff:4e:10:97:1d:6d:d0:e9:4a:
89:ad:82:4a:c9:42:38:28:dc:f4:84:4d:55:f2:79:
32:8e:6c:d1:1a:cd:33:cb:05:8b:3a:19:f1:4d:85:
3a:bb:de:94:87:f3:12:e0:67:15:07:6f:ed:44:3a:
f5:6a:b4:7f:ec:1e:86:7d:32:e6:b9:2f:a4:a2:56:
bd:a0:aa:86:e7:fc:55:0c:59:56:b6:2d:93:e3:cc:
d8:c8:29:85:24:8f:d4:34:0f:ae:6f:b4:26:bf:2a:
29:c6:2e:08:67:f6:13:68:19:38:81:6e:11:dd:5c:
91:e5:c8:99:66:43:e2:1c:ec:a1:bf:b6:90:87:c9:
12:53:1c:79:82:89:81:98:9c:6a:20:8c:8b:d2:f0:
54:b6:75:96:e6:80:ff:3c:51:39:4a:77:26:68:bd:
19:57:18:ad:97:65:5b:cd:eb:a1:a1:a3:e7:fd:c4:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7d:74:d0:b7:84:a0:08:b0:d1:9a:29:a3:f2:26:83:11:00:
6f:3e:e8:9e:15:81:38:55:20:ea:4e:dd:d3:6c:f0:03:72:bb:
e0:ef:80:29:06:ff:9f:d0:45:15:a0:89:03:af:f6:0d:97:15:
99:05:5b:d1:6e:e7:b7:8b:07:13:da:57:80:5b:ce:e9:b6:e2:
cf:b0:e7:16:2a:29:28:6a:89:cf:a0:26:4b:54:40:fa:ce:c0:
60:2f:79:8e:21:29:bc:cf:0d:d3:3a:d1:73:f0:89:55:c0:f6:
78:f2:d6:39:f9:50:d0:54:40:01:96:31:9d:36:c3:30:16:b5:
eb:1c:4f:6d:e1:d3:fd:e2:83:61:d0:9a:ac:e2:50:12:35:fe:
11:02:8e:e2:d2:4e:b8:18:ed:3b:64:a0:a3:ad:16:15:12:7e:
8c:3a:06:bf:02:06:ca:6a:ae:b0:c9:77:c6:73:9a:a0:6f:c2:
8b:81:f6:26:6c:91:97:9b:f3:9f:31:86:77:80:cd:da:ce:ed:
3d:79:d2:b6:eb:78:7d:b5:24:df:12:b3:df:ff:b6:54:6d:c7:
95:f1:42:d0:f3:31:33:75:f9:64:f9:3b:07:12:ef:7b:66:51:
46:c7:ca:15:fa:7f:1b:30:c5:b0:1e:1a:65:b8:5d:41:ab:8f:
22:e3:0a:8e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhRG7t9CA1UjvB5OBbf+AzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzRhYTE2ZmQyYTJjOTM2YzBhYTRmYjU2MjRmNjJiYzU2YTU0ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9o43SggTmGsjHkFs6vlvu/aq4ZP
Ue63NFw77ZjW9QtZVPjDWGETYcLWIJAxg0p4BHfoAt8LgPAiWtBQeeSu80JYInBP
V64y4pZCHl93mKf/ThCXHW3Q6UqJrYJKyUI4KNz0hE1V8nkyjmzRGs0zywWLOhnx
TYU6u96Uh/MS4GcVB2/tRDr1arR/7B6GfTLmuS+kola9oKqG5/xVDFlWti2T48zY
yCmFJI/UNA+ub7Qmvyopxi4IZ/YTaBk4gW4R3VyR5ciZZkPiHOyhv7aQh8kSUxx5
gomBmJxqIIyL0vBUtnWW5oD/PFE5SncmaL0ZVxitl2VbzeuhoaPn/cQ19QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIdKoW/Sosk2wKpPtWJPYrxWpU34MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzdmZWE1
YS1lZDc4LTRiYTktOWExNy1mZGJjN2M0Y2Y0OWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvN2ZlYTVh
LWVkNzgtNGJhOS05YTE3LWZkYmM3YzRjZjQ5ZS8xL2gwcWhiOUtpeVRiQXFrLTFZ
azlpdkZhbFRmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw1+iMA0GCSqGSIb3DQEBCwUAA4IBAQAsfXTQ
t4SgCLDRmimj8iaDEQBvPuieFYE4VSDqTt3TbPADcrvg74ApBv+f0EUVoIkDr/YN
lxWZBVvRbue3iwcT2leAW87ptuLPsOcWKikoaonPoCZLVED6zsBgL3mOISm8zw3T
OtFz8IlVwPZ48tY5+VDQVEABljGdNsMwFrXrHE9t4dP94oNh0Jqs4lASNf4RAo7i
0k64GO07ZKCjrRYVEn6MOga/AgbKaq6wyXfGc5qgb8KLgfYmbJGXm/OfMYZ3gM3a
zu09edK263h9tSTfErPf/7ZUbceV8ULQ8zEzdflk+TsHEu97ZlFGx8oV+n8bMMWw
HhpluF1Bq48i4wqO
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:31 2025 by rpki-client