Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.cer (raw, json)
Hash identifier: IT9jSAiH69TVY27o53WUzJ2MWlrjAkgYxDgHLrBtUb0=
Subject key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7FBBC3A2B1E1A145C21E229A533BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58204
IP: 91.239.194.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fb:bc:3a:2b:1e:1a:14:5c:21:e2:29:a5:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:c7:44:b0:78:3c:53:2a:b4:09:71:1d:42:
2e:6f:b7:a5:48:37:c2:ee:76:f5:48:c5:2b:66:68:
0d:8d:44:c6:21:48:be:97:a0:d3:35:30:ed:4b:3a:
d5:14:7f:ea:5c:06:df:b0:8f:10:d7:17:16:2d:bd:
12:55:48:06:b3:78:1f:9b:2a:fe:46:aa:9c:11:3c:
44:32:91:50:a3:fb:1e:e7:d1:5b:d3:44:5e:2a:84:
e7:b5:0e:90:03:c8:d2:06:4d:39:25:55:0d:f2:ce:
7f:3f:1e:a1:aa:35:82:59:69:87:9f:23:72:e6:a8:
5f:95:53:5f:f4:cc:7d:67:ee:7d:e2:55:cb:a2:51:
3a:19:d3:1d:77:25:52:7f:9d:21:51:86:bf:ca:47:
75:15:be:2a:91:ce:24:22:e3:53:33:f0:43:b2:e2:
07:bf:a8:ed:83:c6:75:0a:d5:c5:42:ca:d3:57:aa:
d1:c1:0b:ea:97:54:c2:fd:67:60:e2:8a:8c:e8:80:
08:00:ae:da:76:cf:fa:c5:1b:63:28:e5:ed:b4:3c:
26:8f:b9:62:2f:17:fa:c1:ae:ea:26:92:32:22:d5:
f5:a2:22:b7:28:7e:b5:90:e2:5c:36:0c:8e:e5:e7:
bd:0b:0c:7d:e3:7d:30:a8:76:c7:44:19:e1:fd:e7:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.194.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58204
Signature Algorithm: sha256WithRSAEncryption
8a:5f:aa:77:02:f1:f6:3f:59:ff:0a:66:fe:16:52:04:c8:c6:
2f:1c:68:08:91:5e:5a:46:1c:a0:20:87:91:8c:6b:0c:db:3f:
74:e4:92:48:65:32:e3:fa:aa:5b:af:a4:11:57:ab:89:0d:ce:
1a:c3:fc:a9:4e:aa:77:66:75:a5:ce:e5:bd:46:cb:d0:0a:b5:
e2:c4:9b:13:99:a1:a5:57:0c:a0:3c:75:b2:27:e0:27:de:be:
ff:05:f8:52:d5:5e:9f:e0:22:11:16:64:71:ce:c8:34:2f:76:
95:b0:60:ed:46:81:ec:61:cf:d9:16:a3:8e:a7:ec:78:25:cf:
9b:a8:ee:58:6d:d1:b1:74:9b:d4:80:1d:c3:12:c1:a9:c6:46:
49:89:b2:09:49:3d:cd:3e:46:b5:51:4d:83:a2:6a:31:c0:b9:
8c:8a:a1:2e:96:9b:bc:ac:b3:ac:b0:58:92:78:70:ec:d1:c6:
3e:75:9f:aa:56:f7:49:3a:5a:3d:ad:8c:57:19:54:7e:e2:b7:
ec:da:1c:b0:61:ff:67:38:20:9e:97:f4:6c:d5:90:2c:d1:8a:
20:52:b1:b8:09:25:35:94:26:47:bb:64:85:2e:ac:2d:93:84:
a6:d6:7c:0b:45:ba:3f:ef:ef:5b:6c:80:37:1d:da:2c:67:ce:
9e:60:b2:12
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQj1/u8OiseGhRcIeIppTO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGY5OGJiMWE4YzdmMWQ2Njc0MjQ4YzQ3ZTBmMDRhZTA0OWFmYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6THRLB4PFMqtAlxHUIub7elSDfC
7nb1SMUrZmgNjUTGIUi+l6DTNTDtSzrVFH/qXAbfsI8Q1xcWLb0SVUgGs3gfmyr+
RqqcETxEMpFQo/se59Fb00ReKoTntQ6QA8jSBk05JVUN8s5/Px6hqjWCWWmHnyNy
5qhflVNf9Mx9Z+594lXLolE6GdMddyVSf50hUYa/ykd1Fb4qkc4kIuNTM/BDsuIH
v6jtg8Z1CtXFQsrTV6rRwQvql1TC/Wdg4oqM6IAIAK7ads/6xRtjKOXttDwmj7li
Lxf6wa7qJpIyItX1oiK3KH61kOJcNgyO5ee9Cwx9430wqHbHRBnh/eeZSQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIT5i7Gox/HWZ0JIxH4PBK4EmvpRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2M2ODU5
ZC02ZTQ2LTRhNjYtYTdiMC00ZTM1OTRiMmRhN2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYzY4NTlk
LTZlNDYtNGE2Ni1hN2IwLTRlMzU5NGIyZGE3Zi8xL2hQbUxzYWpIOGRablFrakVm
ZzhFcmdTYS1sRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+/CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDjXDANBgkqhkiG9w0BAQsFAAOCAQEAil+qdwLx9j9Z/wpm/hZSBMjGLxxoCJFe
WkYcoCCHkYxrDNs/dOSSSGUy4/qqW6+kEVeriQ3OGsP8qU6qd2Z1pc7lvUbL0Aq1
4sSbE5mhpVcMoDx1sifgJ96+/wX4UtVen+AiERZkcc7INC92lbBg7UaB7GHP2Raj
jqfseCXPm6juWG3RsXSb1IAdwxLBqcZGSYmyCUk9zT5GtVFNg6JqMcC5jIqhLpab
vKyzrLBYknhw7NHGPnWfqlb3STpaPa2MVxlUfuK37NocsGH/Zzggnpf0bNWQLNGK
IFKxuAklNZQmR7tkhS6sLZOEptZ8C0W6P+/vW2yANx3aLGfOnmCyEg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:48 2025 by rpki-client