Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
File: jHr3naXytomGyDVkYKQ_pC0386Y.cer (raw, json)
Hash identifier: dxPQs0BKImgGEpSAxLV5wmwIL3FTSjLgAH/vu+CCODA=
Subject key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B19FBE5401E4FFF0F1D25250ADA276
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48824
IP: 185.44.32.0/22
IP: 2a04:9880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9f:be:54:01:e4:ff:f0:f1:d2:52:50:ad:a2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:45:4e:c1:38:6b:ac:fe:d1:9d:c6:f6:2e:
2c:09:19:3f:0b:7e:ff:2f:46:91:b9:31:e2:77:44:
eb:83:f3:3d:ef:86:8e:a1:b2:24:d4:09:31:a3:65:
f3:8f:d5:2c:81:c8:d2:46:24:94:77:54:c3:08:14:
22:e0:60:2b:19:c6:77:47:7a:aa:e0:83:c8:8d:75:
52:16:2c:7f:96:f1:b7:34:a7:a0:1a:d8:73:35:be:
d3:ba:2c:a1:18:9d:bb:c1:d2:d2:54:cc:e4:a4:fb:
dc:aa:99:65:5d:55:d8:7f:fa:83:e2:a1:70:08:6c:
0e:7c:0e:4e:b1:59:0e:e6:69:7a:78:88:72:d4:bc:
f7:ae:01:3f:69:04:a6:86:60:ec:ce:85:fe:a3:64:
25:f4:a6:a0:e7:90:c2:bf:d1:97:1c:50:a6:a9:03:
79:9f:be:de:5c:16:07:1b:7e:fa:66:30:15:7d:5d:
9f:1d:9c:80:f7:13:dd:e4:75:e4:db:3f:bd:b5:41:
1f:6c:c1:a9:63:81:f5:b2:c3:a1:98:69:45:21:05:
71:a8:4f:c8:67:bf:1e:60:db:70:25:ff:90:ad:e7:
90:6c:6e:e3:1c:84:1a:e1:81:08:e4:34:03:81:4c:
59:36:d9:76:2a:bc:ee:3f:37:70:eb:c6:96:37:ba:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.32.0/22
IPv6:
2a04:9880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48824
Signature Algorithm: sha256WithRSAEncryption
6f:24:56:1b:df:ae:38:f6:3c:6e:5d:a1:c9:6f:61:5e:f5:5a:
58:b5:1d:42:57:24:e5:d4:10:f0:11:6c:51:b1:91:ab:ac:4a:
f6:cd:cd:a2:90:03:b7:2f:81:cb:de:d0:2b:63:aa:06:3e:0a:
03:a4:8f:01:e7:74:a4:af:9c:a9:26:fc:e9:cb:26:3b:e1:b3:
2e:b3:7d:be:6f:3b:02:8f:52:01:40:ed:4b:e6:57:af:8f:1b:
bb:41:e3:f7:35:7c:74:39:ba:d1:5a:e7:a9:aa:82:81:c1:cb:
5c:49:fd:91:39:0b:49:6b:8b:98:81:cb:4f:dd:06:03:9f:47:
36:cf:e7:10:d7:29:04:6d:de:72:18:bc:8e:e9:85:46:ec:d8:
a1:37:a6:93:b6:3a:b9:91:be:0c:8f:d4:e4:e1:11:d1:be:7a:
da:b3:41:26:64:02:df:dd:a6:51:1a:39:c5:42:24:0c:d3:36:
bc:65:8f:35:43:49:ce:20:74:a5:36:a4:93:25:ea:4c:fb:2c:
83:51:13:66:5a:75:bb:a3:17:33:c8:b8:b2:40:66:09:89:23:
d9:d4:9b:e5:fe:11:81:4f:7b:ac:a5:9d:8d:fb:7c:5e:4d:35:
b4:66:d2:41:61:12:13:57:bd:b5:49:cb:09:9d:8c:b0:33:72:
4b:da:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:08:20 2025 by rpki-client