Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
File: hyd386vnZf-Is-jm24PSfDxiYTg.cer (raw, json)
Hash identifier: ml5jGkoEq3mbrlkmBB3MFbTHRbdkRddw35A5HXqCCow=
Subject key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942C1770E244F05B4B0B55FB3B57A17D69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jan 2025 12:15:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.201.66.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:17:70:e2:44:f0:5b:4b:0b:55:fb:3b:57:a1:7d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 12:15:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:ba:7e:a0:af:1a:e3:28:5f:6e:bd:b5:6a:
58:1c:e9:8a:59:a7:d8:96:70:45:89:81:82:a4:4a:
cc:2f:f7:f5:80:5a:65:da:e6:9f:1c:f6:23:ee:fd:
aa:8e:70:c2:c5:21:b3:06:60:5b:08:d7:19:6c:e5:
db:5a:6b:75:5b:67:08:a6:b3:8b:0a:39:96:86:61:
78:38:68:c6:98:74:d0:8c:a1:3b:1b:e5:55:6e:c7:
dd:da:3b:46:b1:cc:70:a0:08:03:e0:33:6e:5e:cd:
7b:e5:b4:75:26:cf:1d:e5:9e:f2:ec:39:e2:fd:e4:
5b:71:cd:77:0f:c0:ea:56:07:2f:37:c8:f4:db:3a:
79:97:b0:b3:d2:62:fb:09:61:db:30:da:bf:4f:9a:
ea:53:14:9f:d5:d2:31:e9:47:ca:5d:58:33:b5:31:
00:85:fe:75:1c:7d:e6:d6:87:d6:37:82:8f:d5:12:
a1:33:fb:62:e0:52:0a:c3:23:63:ed:fd:af:ac:d8:
05:2c:f7:a2:c4:d8:76:1f:e6:b2:a5:55:25:d4:fd:
4c:6a:b1:43:a6:3d:48:53:bc:6b:b6:f9:c5:79:fa:
a0:0d:9e:66:07:19:8b:83:9b:5a:a8:01:f8:7e:36:
44:1f:ce:97:0a:a4:1f:78:ee:16:ed:0b:35:5b:8a:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c6:cc:e7:3d:f2:ec:a7:64:00:fb:62:8b:72:f9:e0:72:81:
c4:b0:27:92:06:78:b0:f5:e8:2a:0d:05:77:36:95:83:df:26:
68:5b:da:71:3b:bb:e2:92:1a:b3:8d:38:19:5e:c5:e5:22:6f:
27:a7:95:f3:98:86:39:70:f8:9e:f3:58:5f:1e:ee:75:4d:b2:
89:64:08:a9:b2:95:22:a8:74:5b:a6:68:42:6b:15:e7:ac:3c:
00:82:c0:e5:79:50:45:ca:c9:66:a6:3b:76:e4:e5:d7:bf:b6:
bd:01:8c:72:5f:7c:db:c3:71:30:b4:71:23:8b:76:9c:bf:a6:
c0:1b:b2:26:d2:fe:ae:9b:c8:77:55:48:76:a6:c0:54:b6:dd:
05:e0:6e:c8:a6:4e:ff:e3:6e:9b:1c:0b:96:28:2a:e3:38:a2:
01:22:91:63:dc:8d:42:e0:c0:ef:c3:b5:9d:45:49:05:dc:ab:
15:c7:66:41:85:f7:af:6e:12:b6:45:c2:ac:d7:e2:69:33:eb:
2b:6e:89:ac:fa:db:c8:7b:01:70:0c:3a:4f:6f:f5:63:e5:9c:
a3:1f:10:d3:3b:c7:61:de:fa:62:d9:12:80:af:98:a3:2e:96:
b1:c4:e2:09:34:81:39:f9:32:89:63:4a:4f:d1:51:4d:89:a2:
f9:8c:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:43 2025 by rpki-client