Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.cer (raw, json)
Hash identifier: zl96Ttljj+TAMTAX/qcWCCQSDO/tfNcu3beS6ObhEUQ=
Subject key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274881367A99E0795CFD84E7076BF34C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211974
IP: 185.203.220.0/22
IP: 2a12:9740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:81:36:7a:99:e0:79:5c:fd:84:e7:07:6b:f3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:a5:7e:60:3e:24:62:d2:1a:fb:3d:01:34:
73:7f:e1:e0:2f:69:b6:bf:0a:d2:0f:77:f9:a9:ab:
01:b5:17:0b:31:e9:d8:ab:df:7d:ba:2f:60:02:5b:
d4:1a:90:32:f2:8c:4a:59:23:39:0b:f7:dd:d8:28:
d1:82:3b:c6:61:51:56:07:37:d6:3b:e6:5a:62:ec:
fb:2c:72:b6:2e:81:5d:af:47:55:38:ef:e9:00:77:
ac:9f:85:00:e7:15:9d:61:d2:86:b0:78:51:5d:08:
93:13:b3:e7:aa:dc:2d:30:11:97:4c:32:ec:22:71:
67:55:ac:cb:99:20:1e:63:ab:36:fe:5c:9c:09:67:
3b:3d:7a:07:b6:0f:29:16:0e:0a:94:03:41:d2:3f:
45:e1:e3:3b:36:f1:b7:eb:48:bf:a9:dd:d8:0d:89:
e5:32:a3:89:4b:e4:cc:87:12:c6:8c:7a:ad:42:e4:
41:e8:95:0b:f9:85:0f:70:1a:b6:ca:2f:9f:f0:de:
8c:fd:02:5f:5a:84:d3:4a:53:42:1a:39:82:d1:4a:
14:4a:34:36:14:94:d8:d0:6e:fc:04:c5:20:51:e9:
8f:4b:7d:e0:14:07:aa:19:c6:8d:fe:1b:65:2b:41:
54:60:61:f6:53:97:a7:0a:28:87:88:ea:cb:f3:f0:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.220.0/22
IPv6:
2a12:9740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211974
Signature Algorithm: sha256WithRSAEncryption
1e:14:8c:94:8a:97:41:63:b4:a3:23:d5:b3:ec:8f:0b:21:27:
99:c2:bd:0f:34:97:e0:ae:c9:f4:a5:43:8e:da:8c:9e:1e:88:
27:75:eb:d8:65:e2:0d:c4:b3:11:23:e4:38:fd:72:93:10:4d:
91:5b:0f:fa:c5:8b:37:29:64:d5:3f:ce:88:ca:57:b9:3f:bc:
5e:dc:21:d5:c5:f6:1d:90:7d:3a:e1:10:38:e8:cc:16:23:95:
a8:39:03:d7:9d:70:1c:b3:10:51:5e:44:43:59:7c:2c:97:d8:
4c:b1:7a:c4:2d:51:ae:7e:00:8e:f9:25:42:34:c9:e7:2f:e2:
46:c4:93:1f:9d:93:e1:e1:82:96:35:07:61:62:de:b4:18:57:
ec:bc:b5:20:e6:3b:f8:5f:92:02:85:cb:ab:b3:18:94:cc:40:
8b:2d:26:3b:6f:18:a6:d8:29:e4:bd:59:f0:cc:29:3a:89:27:
60:1e:04:f0:05:b2:55:f2:c4:7b:2d:a5:73:9e:f4:9a:96:4e:
14:4f:03:65:0c:8f:71:c1:aa:f5:07:23:c8:ea:a4:90:9f:39:
df:9a:7a:97:9d:95:c5:47:1d:a6:63:42:d8:6b:d8:1d:9b:b3:
14:53:d1:4e:01:a1:0e:7d:d2:be:e2:03:fe:a3:32:e2:6b:7d:
c3:f2:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:12 2025 by rpki-client