Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
File: hUYNJS18tlxJNM6stG-pbctrVws.cer (raw, json)
Hash identifier: PJfAIZxH1oJSfbu0E0FVyHRJyBOSIOa5eCUBwRUT1lI=
Subject key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B25C1FC831A685A169173F77AAD819
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216340
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5c:1f:c8:31:a6:85:a1:69:17:3f:77:aa:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:94:60:04:d8:90:6f:68:fd:dd:a4:13:4f:
a5:36:44:6b:06:4d:f5:51:2c:a1:fe:d3:09:58:96:
67:cd:58:54:09:c2:71:f3:88:36:33:3d:1f:26:01:
d8:bc:03:88:42:1b:bc:54:4b:fc:45:b2:2e:04:05:
e3:cf:bb:0c:67:6f:a0:1a:9c:28:ce:f5:1a:c3:7d:
57:37:f2:ec:da:1d:8c:4a:47:7f:b2:0e:1f:29:97:
9f:41:27:eb:76:6d:34:d6:8a:88:c5:f4:41:de:5b:
38:ee:50:f0:ca:e6:64:f8:81:c5:ac:d9:de:95:9e:
00:ac:57:22:b2:1b:55:5c:68:dd:e6:fe:bd:eb:97:
76:b2:d4:12:fa:b2:b3:83:6a:09:e1:8a:7c:3f:f0:
7d:79:29:1b:c0:d4:c1:ef:8e:c3:c1:b6:e3:16:d8:
d7:38:33:46:23:96:d6:89:b4:49:63:83:64:b2:94:
f0:fc:2d:ce:f3:29:bd:64:85:1f:8f:1a:f7:89:c8:
e3:25:4c:3a:00:a4:69:e4:a6:d4:8f:f4:98:95:7a:
c7:6e:ac:7b:10:6b:45:97:41:a0:d9:21:40:85:4b:
63:4b:93:07:fb:e3:b1:e5:3a:8b:e8:41:1c:10:00:
71:2a:5d:15:63:a7:cd:7e:4a:c9:ca:f1:86:43:89:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216340
Signature Algorithm: sha256WithRSAEncryption
6f:42:46:b6:f5:68:b6:ca:11:56:3e:0d:d5:2f:5c:e9:b4:11:
38:b4:75:46:60:2a:62:32:d6:89:fb:2b:b0:bb:b8:da:4e:04:
33:d7:cf:f7:df:fb:fb:f4:39:a0:7b:c3:11:cf:80:ae:30:0b:
11:14:5f:04:f8:e4:b6:71:56:fa:dc:31:ff:db:c2:3d:f5:71:
56:b6:6c:ba:5e:69:d6:f2:98:ef:3b:4d:79:f2:b9:7b:80:8c:
94:9b:2f:73:4e:e7:75:0d:2c:67:2f:d5:0b:c6:fa:5a:cd:47:
ba:af:42:58:9a:04:09:4c:0b:42:f1:09:3c:73:0c:f9:67:49:
1f:ab:cb:4c:ac:d6:da:0c:a7:44:c9:fc:a0:d9:e5:ea:7b:52:
34:b9:13:a9:51:8b:50:1f:9d:fd:e2:ed:2d:81:32:b4:11:0b:
b3:48:ac:86:88:37:dd:f6:3a:e3:e0:f5:c3:b2:30:4e:6a:7e:
9f:8f:9c:d7:3d:86:58:4f:06:ae:5c:73:6d:64:a1:71:c5:ec:
27:18:70:9e:db:da:83:22:10:2e:dc:8d:84:f0:4f:92:61:7c:
6d:17:18:4a:ca:fa:a5:d6:cc:d8:aa:29:dc:28:bc:87:5f:8c:
41:bd:20:26:a9:fd:81:c9:da:57:3e:ee:3a:a8:0f:c0:0e:7f:
1f:6c:7a:db
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQhslwfyDGmhaFpFz93qtgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTQ2MGQyNTJkN2NiNjVjNDkzNGNlYWNiNDZmYTk2ZGNiNmI1NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcuUYATYkG9o/d2kE0+lNkRrBk31
USyh/tMJWJZnzVhUCcJx84g2Mz0fJgHYvAOIQhu8VEv8RbIuBAXjz7sMZ2+gGpwo
zvUaw31XN/Ls2h2MSkd/sg4fKZefQSfrdm001oqIxfRB3ls47lDwyuZk+IHFrNne
lZ4ArFcishtVXGjd5v6965d2stQS+rKzg2oJ4Yp8P/B9eSkbwNTB747DwbbjFtjX
ODNGI5bWibRJY4NkspTw/C3O8ym9ZIUfjxr3icjjJUw6AKRp5KbUj/SYlXrHbqx7
EGtFl0Gg2SFAhUtjS5MH++Ox5TqL6EEcEABxKl0VY6fNfkrJyvGGQ4mtlQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIVGDSUtfLZcSTTOrLRvqW3La1cLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2FjM2I0
Zi00ZmU5LTQ0MmYtOGJjZC05MjZhMGIyZDU3YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvYWMzYjRm
LTRmZTktNDQyZi04YmNkLTkyNmEwYjJkNTdhZC8xL2hVWU5KUzE4dGx4Sk5NNnN0
Ry1wYmN0clZ3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNNFDANBgkqhkiG9w0BAQsFAAOCAQEAb0JGtvVotsoR
Vj4N1S9c6bQROLR1RmAqYjLWifsrsLu42k4EM9fP99/7+/Q5oHvDEc+ArjALERRf
BPjktnFW+twx/9vCPfVxVrZsul5p1vKY7ztNefK5e4CMlJsvc07ndQ0sZy/VC8b6
Ws1Huq9CWJoECUwLQvEJPHMM+WdJH6vLTKzW2gynRMn8oNnl6ntSNLkTqVGLUB+d
/eLtLYEytBELs0ishog33fY64+D1w7IwTmp+n4+c1z2GWE8GrlxzbWShccXsJxhw
ntvagyIQLtyNhPBPkmF8bRcYSsr6pdbM2Kop3Ci8h1+MQb0gJqn9gcnaVz7uOqgP
wA5/H2x62w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:16 2025 by rpki-client