Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8_wuehy-XXMo7I7IJEc9nj_9L4.cer
File: o8_wuehy-XXMo7I7IJEc9nj_9L4.cer (raw, json)
Hash identifier: miRC3cwL7QJK+uboUjEt7CtidXchr/7tCj9al72C4H8=
Subject key identifier: A3:CF:F0:B9:E8:72:F9:75:CC:A3:B2:3B:20:91:1C:F6:78:FF:F4:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942235E96BF8ED3DCC4C7241B66C9772AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 14:12:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.229.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:35:e9:6b:f8:ed:3d:cc:4c:72:41:b6:6c:97:72:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:12:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3cff0b9e872f975cca3b23b20911cf678fff4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:82:51:37:c0:f1:b2:b9:30:84:a7:1f:f1:
d6:dd:e8:03:b7:d4:f8:53:bc:12:31:53:f7:37:d5:
8d:17:74:c8:48:48:b5:b1:4b:3f:73:18:62:8b:13:
80:00:95:9a:8b:12:3e:4c:c1:93:bb:df:7e:30:a4:
80:54:4d:3d:c7:80:54:00:37:3c:28:35:4d:18:3a:
47:c0:58:fc:89:8e:87:6d:c2:24:d0:58:4f:b7:f3:
7c:b4:c6:90:b7:af:52:5e:e4:b8:a8:e8:6a:08:69:
b2:6b:2e:85:02:49:ff:b2:17:1f:07:ec:c3:2e:c5:
ac:d6:71:10:8e:6a:b8:d1:93:db:84:ea:fc:12:1e:
54:7a:90:8e:76:11:80:d0:10:16:50:08:61:7e:1f:
c6:97:40:89:84:dc:e0:01:1b:18:4c:b6:1e:c5:95:
cd:f2:1b:f8:eb:f4:85:29:42:4c:1a:e1:c5:d1:62:
4b:74:ae:01:a7:4c:a1:73:90:0a:98:6c:b3:07:2d:
99:04:07:1f:75:53:c9:07:1d:18:0c:2b:7e:31:86:
ed:60:b3:48:a3:1a:fb:5c:4f:60:89:59:9b:6d:17:
72:51:af:fa:55:9a:e6:cc:d6:77:6a:57:5e:c5:f0:
06:47:64:c0:11:21:a7:6a:5d:85:d2:3b:4b:60:83:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CF:F0:B9:E8:72:F9:75:CC:A3:B2:3B:20:91:1C:F6:78:FF:F4:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:73:1a:5a:9a:ad:40:dc:21:f7:cd:b2:cc:7b:fc:e4:53:89:
d8:56:d1:9d:dc:b8:d1:65:17:65:92:d6:60:cb:07:fa:dd:33:
8a:5a:1f:2f:b1:81:6e:69:05:a0:18:8e:84:97:24:26:1a:74:
42:af:a5:9b:6c:a6:1c:43:ab:5c:22:ac:0e:d5:ac:fb:1e:22:
e8:e8:e6:d6:14:97:3d:97:3a:06:cf:be:f0:84:7a:08:63:18:
c5:9c:47:f7:c4:d4:a4:b6:86:80:15:28:6f:d8:89:b6:bf:18:
0b:93:5d:d7:25:28:38:12:74:0c:ef:f2:35:aa:66:46:50:cb:
20:04:eb:dd:51:98:ee:7d:b6:88:0b:db:12:96:52:c1:2e:54:
22:55:5c:08:66:8d:d4:e4:a9:6d:36:53:9b:64:a5:90:de:a0:
da:40:5a:de:5e:42:14:a9:9b:7a:d7:df:07:f1:24:09:c1:dd:
ea:48:7f:69:98:8a:04:aa:10:3f:c4:e0:ec:f3:ce:1c:e5:b6:
05:09:e1:e6:24:3b:5d:bd:e4:23:1d:ea:4e:a6:5c:d6:0d:a4:
92:4d:9d:4c:8e:7c:9f:55:00:1b:5c:f2:9c:88:03:55:db:32:
9f:d0:b7:7c:0c:62:7e:64:45:1f:9e:de:cf:fb:36:50:46:3a:
a9:ac:99:72
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiNelr+O09zExyQbZsl3KtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTQxMjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2NmZjBiOWU4NzJmOTc1Y2NhM2IyM2IyMDkxMWNmNjc4ZmZmNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupSCUTfA8bK5MISnH/HW3egDt9T4
U7wSMVP3N9WNF3TISEi1sUs/cxhiixOAAJWaixI+TMGTu99+MKSAVE09x4BUADc8
KDVNGDpHwFj8iY6HbcIk0FhPt/N8tMaQt69SXuS4qOhqCGmyay6FAkn/shcfB+zD
LsWs1nEQjmq40ZPbhOr8Eh5UepCOdhGA0BAWUAhhfh/Gl0CJhNzgARsYTLYexZXN
8hv46/SFKUJMGuHF0WJLdK4Bp0yhc5AKmGyzBy2ZBAcfdVPJBx0YDCt+MYbtYLNI
oxr7XE9giVmbbRdyUa/6VZrmzNZ3aldexfAGR2TAESGnal2F0jtLYIOaAwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKPP8Lnocvl1zKOyOyCRHPZ4//S+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2ExYzE1
Zi04OTkzLTQ3OGQtYTY2ZC0xMjgxODIzNDIyZTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYTFjMTVm
LTg5OTMtNDc4ZC1hNjZkLTEyODE4MjM0MjJlOC8xL284X3d1ZWh5LVhYTW83STdJ
SkVjOW5qXzlMNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAueWGMA0GCSqGSIb3DQEBCwUAA4IBAQBccxpa
mq1A3CH3zbLMe/zkU4nYVtGd3LjRZRdlktZgywf63TOKWh8vsYFuaQWgGI6ElyQm
GnRCr6WbbKYcQ6tcIqwO1az7HiLo6ObWFJc9lzoGz77whHoIYxjFnEf3xNSktoaA
FShv2Im2vxgLk13XJSg4EnQM7/I1qmZGUMsgBOvdUZjufbaIC9sSllLBLlQiVVwI
Zo3U5KltNlObZKWQ3qDaQFreXkIUqZt6198H8SQJwd3qSH9pmIoEqhA/xODs884c
5bYFCeHmJDtdveQjHepOplzWDaSSTZ1MjnyfVQAbXPKciANV2zKf0Ld8DGJ+ZEUf
nt7P+zZQRjqprJly
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:25 2025 by rpki-client