Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
File: hGbpF0La0bn0x5ayOzfres2FgWE.cer (raw, json)
Hash identifier: V6MeI2PI1HLtW7h4bfVyOFXsE17c9AoVkEBsy7IITgQ=
Subject key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB7C0630F1CA74901E1D95969342F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.198.70.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:c0:63:0f:1c:a7:49:01:e1:d9:59:69:34:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:b6:5d:10:31:04:2d:5a:c6:b9:7c:91:d3:
86:b3:37:22:13:20:4d:56:6e:bc:8d:78:08:81:0f:
a0:77:3f:3d:f2:d5:27:3b:52:48:21:bb:75:0e:67:
62:09:0c:44:0d:2c:28:32:16:6a:20:c3:6b:0e:fa:
97:5f:55:db:5c:a4:c3:35:cb:78:cc:80:21:de:f0:
ce:4d:86:13:6e:bb:af:ed:03:b6:ec:60:05:a9:f8:
21:c8:b7:e6:4e:73:e3:70:43:73:41:51:1a:ec:64:
89:20:2d:e0:9d:99:aa:fb:f3:46:66:6f:3f:80:60:
ad:26:70:19:ed:8b:61:09:c4:f6:92:cf:65:3b:ac:
39:34:64:8b:30:13:47:d1:9d:ea:4a:2c:ce:3a:90:
95:7e:39:a7:92:0a:b2:33:6a:99:56:a8:a5:08:d1:
e7:8e:c5:0f:bf:ab:5e:dc:67:bb:fe:d7:49:35:e4:
c8:6a:f7:d5:67:0c:6e:4a:27:8c:01:ca:21:92:27:
21:17:8e:41:46:4a:3d:78:25:6c:8f:23:7e:35:0e:
2d:5a:04:c5:a2:fd:7a:a2:ad:73:99:02:06:e6:cb:
ec:14:18:bc:88:64:76:c4:f9:bc:7d:a8:08:69:48:
d5:27:b4:d0:d9:3a:f1:0c:d3:19:6b:4b:8a:af:e2:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.70.0/24
Signature Algorithm: sha256WithRSAEncryption
56:46:a8:ba:65:89:e7:b2:76:51:77:7a:23:a6:81:ea:49:03:
26:57:ee:d9:15:6e:a1:6d:17:f7:e2:57:a3:ab:d4:af:63:9e:
c6:26:64:3f:ef:79:bb:2c:00:80:d6:0e:78:18:6a:b7:5a:65:
94:ed:ac:b0:d2:fa:a0:6a:61:b8:f0:f9:3b:76:b1:0a:e7:f9:
61:b6:cb:70:00:5a:e0:55:96:32:39:94:f7:7c:c4:4f:9e:ce:
cf:5e:cc:72:4f:bc:39:b7:fe:b6:bd:23:87:2d:48:18:0c:fc:
fd:db:54:f1:98:0e:fb:32:e6:43:47:51:9a:3b:c1:63:5e:4f:
62:00:e9:60:a7:84:e9:08:1a:d1:07:c6:68:11:33:2b:26:fc:
72:6f:ff:09:14:f2:bc:d4:1c:68:eb:cb:1a:d6:cb:d5:10:0c:
bd:0f:55:ec:1e:a7:2e:5d:f0:40:6f:0d:75:b0:d1:ab:50:fc:
d5:52:7a:34:c3:e2:eb:6c:f3:f9:44:75:32:b2:a8:dc:9a:50:
da:b1:af:b8:74:6a:0e:f5:3b:50:44:ac:5f:07:c9:34:2f:c4:
98:61:72:4f:0b:83:11:09:5d:f3:a8:e1:11:dd:09:1f:38:e6:
6c:9e:de:14:92:58:6f:75:4a:d0:93:85:37:ea:df:c9:c8:3d:
27:e3:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:03 2025 by rpki-client