Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer (raw, json)
Hash identifier: eZzRpWBhvp0xuq3YvStB+PAHmAV3zNEL70OOhvLH+GM=
Subject key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E10C14CB9F5B19C5608EB0CB6A961
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200286
IP: 185.59.52.0/22
IP: 2a04:e300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:10:c1:4c:b9:f5:b1:9c:56:08:eb:0c:b6:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:b1:0d:29:46:08:02:10:76:9c:b3:51:e9:
87:37:bd:4d:70:6d:0a:be:02:25:b5:d3:7c:23:b4:
ff:5e:98:36:ce:3d:2b:4d:e1:3f:ec:89:db:dc:f7:
7f:bb:48:55:cc:22:4d:10:fd:b4:98:67:22:e3:c0:
d0:2e:ab:87:0b:dc:b9:88:3e:56:f7:90:47:a4:99:
d0:2a:24:f6:ec:c5:e8:b4:cb:98:14:2d:37:c7:0f:
b2:5f:0f:f8:3b:5e:d2:cc:60:de:20:90:ed:8c:3d:
ef:06:07:2a:33:b2:00:fd:a9:fa:a5:65:9a:17:42:
56:00:3a:fb:d5:e5:98:d0:89:c0:9d:2e:8d:48:e1:
c5:49:24:81:13:21:9a:f0:aa:c3:11:46:ff:dc:21:
d5:4e:d8:87:a5:df:8b:db:03:04:91:d6:ab:5b:2a:
49:ff:9b:95:62:3c:91:94:cd:44:55:8a:04:5d:4a:
22:b9:e4:85:24:29:ba:2a:b4:ed:6f:74:d7:01:ad:
f6:8a:b2:2b:c9:c6:b1:8f:8a:cf:35:23:04:cf:a9:
91:12:6a:1d:ab:5f:85:13:7b:81:f3:f5:d4:44:ce:
07:45:41:d7:c1:7e:9f:f3:7e:3d:92:45:3e:e0:a7:
0f:57:87:9d:cf:4c:c4:a4:e5:a7:33:d1:07:60:08:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.52.0/22
IPv6:
2a04:e300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200286
Signature Algorithm: sha256WithRSAEncryption
89:53:64:1b:09:92:4d:29:45:5f:7b:8a:ef:30:f3:2b:d0:27:
a4:3b:a9:a0:d3:f3:df:a8:ee:9b:f6:21:eb:96:e9:05:15:af:
3f:15:19:99:6e:1f:e1:88:72:2f:37:55:d8:4a:41:22:74:7b:
8e:91:29:bf:94:34:f3:f5:0e:af:74:13:33:73:e8:f0:8b:33:
3a:87:bc:20:7d:1a:2c:a9:19:74:ee:73:83:ac:a3:ea:9b:51:
00:86:2e:2d:a7:42:db:40:10:14:18:b7:e9:55:2f:57:e1:83:
8d:2b:dc:d4:34:7b:27:15:c8:f1:85:d2:c1:90:e5:87:17:65:
9e:12:a4:a8:a3:d4:8b:04:82:08:ef:91:3e:65:47:98:45:97:
a2:09:e0:fa:d9:9a:07:bb:cf:be:01:c1:a2:15:11:aa:70:e8:
85:9a:d2:43:8f:de:1b:33:e4:eb:b5:9b:f8:e5:ad:3e:55:7b:
27:ed:1e:30:b6:1d:13:b6:af:3d:d3:93:b2:01:6b:c8:b8:f1:
6d:3e:64:9e:49:d2:ba:36:13:61:cc:e9:35:7c:c6:94:b6:36:
fc:8c:19:05:be:66:9d:0c:15:4f:e9:7f:01:fe:b3:b7:3d:ca:
4d:ac:d5:93:1a:f1:46:43:4b:82:48:ed:00:76:72:43:0c:19:
24:a2:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:41:49 2025 by rpki-client