Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
File: hcNSXWi2ERZWThbh3U5WywNcnIU.cer (raw, json)
Hash identifier: rQ7lHcX8lLuMOIPscyExzfwTfpVIr/QWmWFD0087pR4=
Subject key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421446875DD008A985F584C36DE51A1C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204119
IP: 84.38.64.0/21
IP: 84.38.78.0/23
IP: 2a00:5080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:68:75:dd:00:8a:98:5f:58:4c:36:de:51:a1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:9c:df:7d:9f:69:1c:cb:f6:1d:eb:a8:4e:
45:79:a6:fc:45:b9:fd:8d:c4:39:58:78:46:b7:42:
7b:e0:ed:b0:45:99:44:d8:9d:4c:72:18:ff:f8:52:
c6:f3:2f:93:4e:1f:84:60:4d:40:4e:9d:73:1e:28:
d2:09:30:f9:58:29:f6:f9:12:cd:c0:61:5c:9e:39:
fc:97:0b:d2:a0:fb:bb:4a:68:39:31:b5:a4:da:2d:
82:47:ee:86:08:6c:89:33:15:91:a6:ab:77:a9:38:
2d:14:3e:d7:c9:be:1e:f7:62:5e:48:c9:46:73:29:
92:ec:77:5c:ab:52:31:a3:d4:6d:8a:aa:2f:b1:be:
02:eb:ae:63:28:22:8a:36:49:9f:ca:20:cd:a1:1d:
32:12:86:96:ad:7a:85:0a:ed:4e:ff:8b:e0:5f:49:
9b:40:02:dc:6f:3a:a4:df:b9:66:7c:bf:77:f1:cd:
f3:3b:aa:82:20:62:e9:0a:f4:8b:1e:56:9d:d1:7f:
9a:a0:d8:f3:9e:65:b2:27:02:d3:ca:fa:59:a7:84:
14:09:8b:09:7c:aa:54:70:99:2d:d3:41:a4:a6:9c:
a9:5e:0f:74:bc:de:d8:a8:f6:4e:de:0b:31:a0:9b:
35:2e:c7:af:1a:37:f0:0f:f9:73:9d:d3:e5:bb:6d:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.64.0/21
84.38.78.0/23
IPv6:
2a00:5080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204119
Signature Algorithm: sha256WithRSAEncryption
0b:e1:90:fb:58:84:40:cf:b3:21:14:3d:6d:74:34:66:39:a0:
f7:59:90:19:12:a5:27:06:82:b3:1d:d4:52:81:a3:a0:b2:f6:
e4:42:f5:86:b1:b9:43:7e:7a:91:bd:8a:46:7a:dc:b1:d1:7e:
45:2c:3b:b4:33:e5:fe:07:b8:64:08:fa:ee:aa:57:f1:30:fe:
ac:ff:fd:5d:c6:3d:1e:c9:0d:50:06:e7:83:ad:58:42:b6:28:
1d:69:01:e7:0b:03:14:5b:7b:74:e0:6f:8b:b0:2c:99:ab:14:
5f:f9:a7:e6:6f:82:26:0f:8e:da:8b:50:b2:d9:7a:e6:d9:ff:
35:4c:00:2e:15:7e:00:b1:ee:ca:2b:d6:a8:3d:bc:31:11:28:
ea:ba:b3:49:7d:7d:9a:30:1f:a0:c4:95:aa:a4:46:be:cc:ae:
f4:5e:08:9b:17:3e:5a:51:f1:08:06:d2:24:30:dc:9f:52:35:
ab:e1:37:0c:a6:78:74:8a:cb:32:fb:8f:29:b3:fd:57:f2:49:
c1:16:2a:30:83:b2:75:42:6d:ef:4c:ff:34:32:2b:11:ef:4f:
e5:03:2e:ca:12:10:4f:4b:7c:9f:eb:94:ce:5a:68:ed:64:77:
04:6f:57:c5:70:08:b1:e8:a2:38:09:9d:4e:4c:44:24:fc:82:
b9:1b:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:08 2025 by rpki-client