Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.cer (raw, json)
Hash identifier: veeGtThVIQs2k/o/V5FAE38/S4AZp0rBSTUUbCxLE6M=
Subject key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3E20BC84EDC0E1805EA0E3FFFDD32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39809
IP: 195.170.161.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e2:0b:c8:4e:dc:0e:18:05:ea:0e:3f:ff:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:3d:9d:af:ec:26:3f:59:8f:1f:3a:5f:2f:
f8:67:f8:49:8d:30:ab:7f:cb:fc:00:69:7c:2f:99:
d6:e2:af:1f:ef:a5:3b:3e:27:e2:79:d1:e7:97:72:
cc:bc:ce:00:79:f5:14:7e:31:89:d9:cb:1f:40:e3:
73:78:5b:cc:8e:85:87:cd:37:88:e0:7a:dd:23:0f:
cf:0d:9e:7f:52:6b:e8:5c:31:c2:de:67:86:ff:a3:
80:b6:81:66:53:93:55:5a:43:a7:73:a6:9e:99:95:
d1:1e:c4:ae:3c:96:dd:b1:ca:8b:82:18:39:ad:80:
ec:19:83:c7:0c:b6:0f:12:6d:d8:3b:b5:3d:e2:b5:
77:f8:1a:93:84:d7:7e:30:26:2a:5e:f6:09:02:33:
ea:d9:f3:4f:71:f3:22:b0:72:09:a9:10:4e:91:3b:
91:d1:b5:0d:ce:2d:e4:c2:9f:bd:10:29:17:53:a9:
e5:b6:15:6e:d3:c7:c4:77:4e:84:43:5f:2f:aa:f3:
82:e7:4f:73:2c:c7:35:72:2e:a9:36:60:10:9b:48:
d5:a9:cf:af:60:f3:65:30:c5:09:86:02:59:1b:73:
f9:f3:b0:e4:56:13:6a:4a:2f:e1:c6:7c:6a:39:ac:
96:60:c2:e5:b2:0e:8d:9f:38:51:98:ca:c0:a3:a1:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.161.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39809
Signature Algorithm: sha256WithRSAEncryption
75:15:49:b8:c2:99:8e:c6:f1:a2:db:aa:36:9b:10:4d:5b:01:
ee:48:c1:21:f0:7b:4f:f7:1f:35:f1:7c:ee:4d:88:d8:9c:90:
70:f8:e8:96:bf:8b:a8:68:c1:4f:c4:0b:50:05:f3:34:c2:96:
7d:73:e0:5a:36:fb:b1:ca:88:e2:cb:a7:00:17:d5:0e:f8:2b:
7a:36:86:35:03:65:b0:c6:5f:72:37:ad:9b:25:53:7e:66:a3:
e0:83:2d:70:40:25:c7:a5:95:04:e3:b8:c3:35:09:c4:7e:7f:
b4:6e:a1:b8:5a:98:c1:b8:0a:1c:3b:21:9b:d7:dc:0b:32:3e:
72:b0:62:c4:52:7e:78:ce:b0:1a:23:fd:9c:5d:98:f6:72:dd:
be:a5:7f:eb:5e:55:88:d2:41:a6:92:7b:b1:e9:a0:09:56:e7:
fc:53:01:fb:58:f4:e4:5e:81:77:81:c5:a0:5e:10:9a:d5:89:
13:f8:96:ec:94:34:04:29:d6:57:48:39:7f:e4:51:71:c7:79:
50:f2:76:3c:6f:f7:20:5a:35:fc:34:38:6f:98:09:6e:88:32:
f0:4b:94:74:bb:d7:19:6e:42:99:66:d9:1d:1d:5d:d8:9d:e5:
94:55:a9:c4:fe:9c:b6:c9:37:64:11:00:e9:5d:98:e1:e1:24:
8e:40:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:03 2025 by rpki-client