Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
File: hCVmomcjm6WlPmRH7GrdFiM38NM.cer (raw, json)
Hash identifier: SPSyTPSF7kWdjvJ+ItR3AogBPzXmFErfR64exFEXKls=
Subject key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F4698ED69ECE8EC3E2F316E0B43F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51893
IP: 91.220.38.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:46:98:ed:69:ec:e8:ec:3e:2f:31:6e:0b:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=842566a267239ba5a53e6447ec6add162337f0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:99:27:25:f8:94:5e:c4:49:80:76:eb:5c:
f3:4a:b4:2b:79:cb:34:cf:0f:48:3f:b5:c2:5c:99:
a2:85:12:8b:c1:a2:e9:4b:1c:41:cc:b3:2e:53:06:
82:da:e8:19:e0:71:a0:1b:a4:42:4f:00:f5:83:3a:
39:bc:e8:7d:2d:c6:30:77:db:b6:15:d2:d9:eb:0c:
77:d3:a9:a2:ae:45:d0:d6:64:4b:5f:a1:b6:6a:4f:
df:bd:c0:ce:e2:64:9f:b0:bb:14:9f:f1:40:49:3a:
b9:0c:68:37:82:cd:1f:5a:23:65:72:d5:f4:dd:13:
a7:46:0f:8e:b2:e0:fc:c3:9e:6b:37:f3:b6:cf:71:
a2:14:25:06:3c:84:e6:ef:f4:d1:e6:72:07:9c:7a:
a7:7d:fd:35:17:5f:5c:f1:5d:7f:2b:45:f3:00:04:
c7:63:fa:06:b5:a9:58:6b:59:3e:8c:a6:5c:75:3b:
16:02:75:69:cc:6b:40:5c:f4:b6:25:4b:2e:6d:1a:
8b:b7:48:e2:a8:c8:c7:08:d4:58:ae:b7:b5:19:e5:
29:2f:50:94:df:94:a1:c5:c3:d6:9c:20:96:a6:bc:
79:4d:d7:69:da:b5:68:11:3f:9b:08:06:50:9d:2b:
ab:2c:e7:48:40:18:21:f2:10:10:d2:cb:f1:6b:72:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.38.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51893
Signature Algorithm: sha256WithRSAEncryption
62:6b:ce:26:50:be:af:a4:92:45:e8:a9:36:40:00:cb:e2:48:
58:a2:62:23:76:38:f4:d3:9d:57:e3:2e:b6:88:55:24:fd:6d:
e9:e1:98:0b:1a:ec:65:00:4f:0e:69:70:1e:d3:33:1d:7b:8c:
25:b8:cc:41:df:15:2d:25:68:74:83:5c:7f:17:58:f3:37:5d:
35:e0:61:d4:50:e5:b5:1d:95:38:99:75:08:2c:e2:f8:44:4e:
ac:20:98:99:81:8c:79:03:7a:47:42:0e:56:62:24:c1:ed:4f:
37:bf:8c:dc:69:29:45:bb:73:b0:16:51:c0:8f:0f:a9:13:30:
f3:bf:b6:5b:51:42:02:fa:c2:c1:5f:60:b1:ee:df:75:26:2b:
8a:c4:81:8a:eb:95:47:64:6b:d9:c3:24:38:0c:db:ea:85:35:
3c:66:ac:cb:59:e5:94:c5:ae:de:6e:28:01:44:84:66:92:ed:
62:a2:23:1a:45:3b:86:52:9d:96:91:b7:21:18:3d:ea:de:17:
a3:ef:d6:98:d7:70:38:1c:e7:de:85:4d:6c:0b:a5:90:ab:f4:
a7:02:15:5b:41:e9:cb:5a:73:3f:f9:c1:4e:e5:23:fa:f8:47:
0b:e5:ca:e0:77:95:27:f8:0c:12:0e:e6:93:4e:79:bd:20:fa:
38:ce:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:15 2025 by rpki-client