Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
File: rHI58-_bN5H1vlVSmbXYFpfz0BI.cer (raw, json)
Hash identifier: pqlzKeI3+1icz7NWOlQ3nR8aYq/y6N1EoVQ3B3oqSuw=
Subject key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A2F65268415BEF253F9A3A2254E0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39291
AS: 50681
AS: 60991
IP: 185.86.156.0/22
IP: 185.141.148.0/22
IP: 2a05:b940::/29
IP: 2a07:2540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2f:65:26:84:15:be:f2:53:f9:a3:a2:25:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:80:58:ff:49:94:a9:98:6c:d5:1c:d5:e4:
13:9f:de:42:db:84:b5:31:59:2d:43:88:99:92:c3:
31:5f:62:9d:9e:64:08:fa:39:f5:48:3e:e8:7a:d9:
19:49:99:4c:48:00:b4:7c:f0:3e:e7:ce:0c:49:44:
6f:a0:6e:98:58:31:c8:35:38:04:74:d7:21:bc:d9:
74:e8:46:8b:ea:e8:03:1f:97:85:ec:85:86:0a:db:
9f:e9:3a:7c:53:6d:3e:29:ca:26:c2:f4:51:f5:36:
0c:ce:54:86:2a:d6:a1:d8:b9:55:66:cf:5f:d5:aa:
6f:ca:c5:bd:31:e2:0e:fe:dd:76:5c:45:14:c7:a5:
e7:8f:07:a8:81:05:32:bf:d6:6d:43:7d:4d:bf:00:
40:9e:a0:c8:b9:36:bb:b6:1e:b2:c5:2e:64:e5:a1:
56:a0:fc:dc:4a:9c:ab:ee:df:0e:bb:1c:fc:ce:a3:
9e:e3:f7:57:5d:14:b6:c3:b2:4e:4d:6c:d7:63:5b:
cc:44:47:a4:64:51:ea:aa:45:2c:e1:a2:7a:29:6a:
0c:8d:de:6c:46:db:82:bd:2d:a4:b4:be:0e:0c:a5:
d5:c5:b6:36:ad:50:57:a6:ff:c1:0e:98:55:59:93:
06:48:ce:e4:e0:bb:ae:3b:af:73:7d:8a:6a:ed:73:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.156.0/22
185.141.148.0/22
IPv6:
2a05:b940::/29
2a07:2540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39291
50681
60991
Signature Algorithm: sha256WithRSAEncryption
3c:50:e4:0a:53:46:21:2e:be:cf:d8:d4:18:97:17:f0:be:1a:
ad:bd:bf:99:98:b8:8d:38:38:bf:1c:3f:0b:09:19:79:72:2c:
5f:95:b0:e4:9c:3a:21:ba:b4:d7:78:c4:b8:ad:4a:61:29:5e:
8a:9a:85:b8:0b:eb:4c:48:99:59:f3:77:b0:20:2c:41:75:ec:
98:c6:29:df:c8:00:11:02:f6:cf:f6:e6:70:28:5f:2f:4b:2b:
c4:cd:10:b3:fd:bd:3d:ad:7a:cc:a7:72:e3:62:86:02:d3:b6:
39:1c:c3:2a:da:44:3a:75:8a:4b:1c:ad:46:8a:4d:df:0d:09:
25:7e:6c:2f:44:34:25:bd:20:9f:3a:b4:a1:26:9a:62:b5:17:
9b:db:b0:f3:c3:50:d6:ae:0e:82:11:96:8e:ad:9c:75:c7:da:
00:a3:4b:28:6a:73:5e:f5:f9:2d:38:fa:c4:64:f2:10:89:9e:
c2:46:46:1d:f4:b3:e0:5c:b0:68:13:93:73:0a:2a:ac:51:08:
21:c2:91:43:07:a7:06:5a:64:c3:0f:37:05:60:1b:d5:ab:ad:
36:d9:9f:20:9f:4b:d2:86:31:df:22:16:78:55:06:f6:71:3a:
2d:3d:85:af:40:0e:fb:a6:92:e5:bd:30:ae:93:c6:ed:d0:d0:
fe:5a:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:22 2025 by rpki-client