Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer (raw, json)
Hash identifier: DJ7kxb8XiE/F1Fmd5zJNyJ+8pVmd1blz80iDEHKhbQQ=
Subject key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E0B1496EC9887A33EEF4F558D6E9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.110.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0b:14:96:ec:98:87:a3:3e:ef:4f:55:8d:6e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:79:10:29:3c:f2:97:0a:a2:01:a3:13:8c:
f4:0c:6d:75:52:09:32:0b:c1:9a:f0:2b:69:42:69:
9a:06:37:2c:7b:f1:44:08:ab:97:8a:06:c3:fb:c1:
7f:82:83:5c:7a:e8:50:4e:e0:fd:14:86:45:96:4a:
5a:72:9c:6b:3c:3f:ac:6d:5c:f7:7e:87:50:55:fe:
d4:0d:cf:13:95:ae:2a:b8:91:f7:81:e5:54:06:08:
33:49:27:b7:2c:fa:ba:28:12:90:dc:3c:50:9a:35:
fa:7f:b7:0f:54:42:87:ce:fd:e9:ac:46:d8:38:59:
c4:0e:f6:3b:62:e4:f8:fb:8d:1f:a9:d4:bf:ee:00:
60:a6:94:5a:c5:82:13:1e:58:52:3a:4c:00:c9:d3:
6d:13:9a:a2:21:d5:95:a1:a8:7e:13:98:d1:57:55:
37:52:e5:5c:3e:4d:4b:ca:0c:25:12:37:28:53:75:
06:15:32:32:37:3a:0e:6a:c2:46:7f:f8:f4:0c:c9:
14:44:00:ba:a4:c2:12:c8:88:71:56:d6:9c:7d:38:
ab:d4:4d:09:47:08:6f:18:4a:12:37:aa:df:4e:bc:
58:33:2f:a5:8c:45:c2:de:66:df:c0:06:25:33:d3:
cc:93:fe:76:bc:63:f2:12:ec:0f:d9:1e:5f:ce:61:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.196.0/22
Signature Algorithm: sha256WithRSAEncryption
41:60:80:33:ac:f9:d5:3f:19:db:0a:b0:3a:70:63:8b:d6:1f:
2c:78:8c:82:04:bc:f6:01:28:8e:ad:c2:5d:fa:85:e4:55:33:
0c:3b:0a:6f:4f:58:a2:43:5e:e2:03:7a:80:1b:73:06:42:4e:
f7:7c:3b:71:1e:b2:e1:97:37:d8:57:0f:e1:d3:89:fa:36:ba:
0e:84:4e:30:ef:ed:03:9a:35:f2:45:5c:d7:a9:e5:5c:22:3d:
af:ff:82:45:c3:10:20:01:0d:44:3f:c4:9f:50:dc:4f:3a:97:
7e:fa:38:c6:73:12:8d:02:0d:bc:57:de:e4:22:d7:69:05:fd:
e8:b8:ed:04:d1:22:06:96:f5:cd:16:83:94:1a:92:a5:83:f5:
ad:0f:aa:e5:e1:42:62:c9:ed:a6:3a:11:e7:8a:5f:2b:4d:db:
cc:0c:80:f7:6a:79:d7:c8:92:9b:ba:00:ee:ee:92:12:4f:ba:
34:fd:e2:6d:ea:89:12:6a:68:0e:96:35:5a:9d:24:cd:f0:86:
6c:60:48:be:cc:b7:7a:88:67:52:02:02:64:ec:2d:cd:55:57:
2d:f3:7f:3c:6c:1a:65:39:87:91:fd:41:89:a0:79:57:0b:07:
9b:6a:43:01:d4:10:bf:f6:95:fc:2c:c4:9e:1b:eb:68:9d:a4:
4b:cc:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:48 2025 by rpki-client