Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
File: hpY9ADE0zNpW_t_rJ496dop_QC8.cer (raw, json)
Hash identifier: EpHwkLYQ/qI83nWgfpdSXu28tJydkOP6cFkCRFITJ8k=
Subject key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC3162906124BDE7C4DD1E1834045F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48257
IP: 185.187.188.0/22
IP: 195.138.232.0/21
IP: 217.71.224.0/20
IP: 2a0b:ab80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:31:62:90:61:24:bd:e7:c4:dd:1e:18:34:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:fd:35:6c:b7:fe:57:f9:e9:95:8e:78:b8:
18:b5:41:f4:9c:9c:de:a7:e9:83:b4:86:83:ba:2e:
f6:d0:b7:eb:a4:8b:a1:21:a9:1f:77:8e:34:e6:66:
54:8b:b8:cb:a0:85:37:2b:72:06:af:3c:69:22:d8:
b4:50:58:b3:f8:02:92:e0:b0:79:15:30:f6:cf:ff:
54:dd:bc:a2:93:83:a1:94:61:69:5a:ce:e6:95:6d:
d7:28:cb:8e:dc:a5:6b:65:ce:53:6d:f9:2a:d2:05:
77:31:35:40:4e:ac:be:60:e9:71:c1:32:5f:ae:48:
3e:f7:32:0b:47:44:22:3d:d7:c3:7b:b8:1e:2b:8d:
84:e4:3c:b7:98:93:bb:9f:90:67:00:d0:1f:52:fb:
92:5a:11:39:ec:5c:2b:93:aa:49:1d:21:23:b1:da:
d5:70:8f:ca:a0:85:39:e4:7d:92:77:77:25:47:a1:
bf:3c:86:5a:36:04:41:b2:14:23:eb:5c:f4:5c:9e:
91:5e:03:b6:51:c1:1f:f6:f2:8f:bc:93:a8:61:f6:
e7:19:9b:68:ce:dd:cc:61:ff:6a:be:0c:fe:35:87:
7f:83:9a:ae:90:c0:ab:da:a2:fd:af:a2:53:cd:d4:
a4:6d:f5:2e:96:73:a9:ec:8d:4c:ac:9e:bf:40:ce:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.188.0/22
195.138.232.0/21
217.71.224.0/20
IPv6:
2a0b:ab80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48257
Signature Algorithm: sha256WithRSAEncryption
9b:31:41:fe:7c:26:90:0e:b3:79:4c:2e:6d:d1:60:4e:bb:5d:
2c:bb:87:6b:52:68:27:91:01:0a:06:c6:cc:78:df:9f:c6:4b:
14:05:14:c2:d2:96:01:0f:da:fa:58:b7:90:58:d5:d0:d7:97:
89:da:9a:7c:ae:e2:06:a3:c5:ce:13:c3:a8:dd:ad:62:47:05:
e3:3a:5f:4f:7f:7d:7e:9e:67:67:a9:ce:54:5b:c3:f4:34:15:
14:3f:50:67:93:57:86:d0:3d:5e:43:ef:f1:82:1c:e6:1d:0e:
b1:fc:34:cb:6a:98:91:04:95:39:ff:04:bd:c3:ea:df:cf:12:
b6:40:ef:10:a8:ba:dc:86:b8:5d:f4:3c:5b:a0:51:b8:31:5c:
af:b2:09:c8:fd:5f:bd:d8:9b:de:66:a6:fa:eb:96:df:d1:98:
e3:f7:6d:ab:eb:d7:72:3a:7e:77:2a:18:0b:c4:1d:27:fe:93:
e2:2e:69:21:eb:72:a0:6d:30:5c:18:20:9a:1c:2c:d7:34:9f:
b1:38:63:64:c8:64:e3:80:1b:41:ad:4f:d0:70:45:85:0c:6a:
b1:44:9e:55:05:6e:01:da:34:bb:d4:0e:88:9b:3d:2f:6a:11:
4f:b6:46:cc:4b:4e:7d:9e:8b:6e:2e:b7:ed:b0:06:89:99:d3:
f7:66:e7:33
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQi/DFikGEkvefE3R4YNARfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njk2M2QwMDMxMzRjY2RhNTZmZWRmZWIyNzhmN2E3NjhhN2Y0MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w79NWy3/lf56ZWOeLgYtUH0nJze
p+mDtIaDui720LfrpIuhIakfd4405mZUi7jLoIU3K3IGrzxpIti0UFiz+AKS4LB5
FTD2z/9U3byik4OhlGFpWs7mlW3XKMuO3KVrZc5Tbfkq0gV3MTVATqy+YOlxwTJf
rkg+9zILR0QiPdfDe7geK42E5Dy3mJO7n5BnANAfUvuSWhE57Fwrk6pJHSEjsdrV
cI/KoIU55H2Sd3clR6G/PIZaNgRBshQj61z0XJ6RXgO2UcEf9vKPvJOoYfbnGZto
zt3MYf9qvgz+NYd/g5qukMCr2qL9r6JTzdSkbfUulnOp7I1MrJ6/QM4a8QIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFIaWPQAxNMzaVv7f6yePenaKf0AvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzJjMDk3
MS1hZWVmLTQxN2UtOGI1NC0xMjFkMmNiYjIxZDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMmMwOTcx
LWFlZWYtNDE3ZS04YjU0LTEyMWQyY2JiMjFkNi8xL2hwWTlBREUwek5wV190X3JK
NDk2ZG9wX1FDOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCubu8AwQDw4roAwQE2UfgMA0EAgACMAcDBQAq
C6uAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8gTANBgkqhkiG9w0BAQsFAAOC
AQEAmzFB/nwmkA6zeUwubdFgTrtdLLuHa1JoJ5EBCgbGzHjfn8ZLFAUUwtKWAQ/a
+li3kFjV0NeXidqafK7iBqPFzhPDqN2tYkcF4zpfT399fp5nZ6nOVFvD9DQVFD9Q
Z5NXhtA9XkPv8YIc5h0Osfw0y2qYkQSVOf8EvcPq388StkDvEKi63Ia4XfQ8W6BR
uDFcr7IJyP1fvdib3mam+uuW39GY4/dtq+vXcjp+dyoYC8QdJ/6T4i5pIetyoG0w
XBggmhws1zSfsThjZMhk44AbQa1P0HBFhQxqsUSeVQVuAdo0u9QOiJs9L2oRT7ZG
zEtOfZ6Lbi637bAGiZnT92bnMw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:49 2025 by rpki-client