Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer (raw, json)
Hash identifier: nHXtoD67EDhCOC+u2odMn+LrgFgzDobIdndBpPgAorw=
Subject key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D7789C31865D6031B9FE4E4D8AF0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58114
IP: 193.30.28.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:77:89:c3:18:65:d6:03:1b:9f:e4:e4:d8:af:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:d8:c3:56:00:09:0c:ee:9b:c7:39:a2:90:
4d:44:59:1b:bd:31:9a:bb:19:05:5c:6e:71:bc:78:
fd:98:4e:7c:bb:64:ec:b6:97:e3:b3:a3:e4:1e:f1:
f3:6a:50:7f:44:60:2e:6d:4d:1a:66:80:6a:1c:29:
92:cd:30:00:90:d4:34:e9:54:4e:a1:24:01:13:08:
7e:b0:24:e9:58:8c:d7:47:0d:89:7e:a6:22:5e:48:
e5:c4:b4:60:fc:05:e3:e7:46:4d:6c:10:20:32:bd:
05:1d:5d:ca:a9:29:78:9e:f5:a7:04:f3:e5:87:b4:
6e:cd:a5:40:e1:bc:01:aa:d9:44:8d:c0:6f:10:c1:
74:9b:66:d1:49:e8:a0:df:2b:93:80:b4:f5:32:3a:
64:32:e1:4f:44:14:f1:65:84:14:4d:fa:25:4d:fa:
8d:32:e0:26:f5:7d:43:cc:8b:6e:89:69:f1:39:b5:
3c:37:c7:6f:31:dd:f5:8a:81:52:5a:66:ca:01:6d:
7d:fb:dc:7f:99:9e:b4:ec:c8:6d:c9:d9:fd:fb:8b:
48:52:ec:79:33:1e:f6:38:80:fa:45:55:d6:c1:dc:
65:de:8a:be:3e:0c:53:6b:56:34:6c:94:72:3f:ee:
59:61:60:71:0a:05:3c:40:9f:4a:77:a0:d0:c7:53:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.28.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58114
Signature Algorithm: sha256WithRSAEncryption
27:93:dd:8c:3c:23:10:43:a7:71:3c:bd:7b:10:09:c6:2c:0e:
0c:ff:ac:0d:2e:41:e9:7a:c2:41:8e:2d:32:ab:dd:89:f7:92:
07:16:db:29:14:23:3e:dc:a1:e4:28:db:97:e3:38:ca:5e:8a:
a5:aa:aa:85:ab:f9:50:92:21:2d:7c:fd:e3:1a:16:f4:8b:17:
1a:a5:6f:4b:da:46:de:35:b1:e1:57:41:f2:86:5a:b8:e9:02:
e9:4c:05:65:2d:66:9e:00:77:7c:c9:cd:a7:e6:9f:eb:0e:96:
c7:64:f2:71:fb:3a:7c:c2:dc:2a:ae:b8:fa:f2:d4:07:d7:60:
2d:a7:4c:73:04:47:68:5d:e3:d2:c6:c5:75:63:a4:7e:87:eb:
fe:01:39:09:f5:bd:25:34:4c:7e:eb:0f:05:8a:07:d5:b6:5c:
be:c0:f5:e6:bb:46:ff:d7:58:d2:ef:46:65:ca:65:92:2c:6c:
20:1c:4a:85:91:46:19:a5:ea:78:19:a0:40:45:b0:1f:17:da:
5f:d8:5b:e1:3d:6d:65:e1:8f:0e:79:2a:ce:6a:57:72:85:65:
70:37:e4:fb:d9:2d:14:4f:84:70:3c:89:0d:74:ba:79:08:4b:
5f:d1:1b:4b:93:99:01:04:bc:b4:c0:5b:3a:24:7b:75:e1:15:
5d:e5:8b:53
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQijXeJwxhl1gMbn+Tk2K8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzY0NmFiNzA2MjE0OGVkYjhmYTliNjBhODMxYzgyNDBkY2FiODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM7Yw1YACQzum8c5opBNRFkbvTGa
uxkFXG5xvHj9mE58u2Tstpfjs6PkHvHzalB/RGAubU0aZoBqHCmSzTAAkNQ06VRO
oSQBEwh+sCTpWIzXRw2JfqYiXkjlxLRg/AXj50ZNbBAgMr0FHV3KqSl4nvWnBPPl
h7RuzaVA4bwBqtlEjcBvEMF0m2bRSeig3yuTgLT1MjpkMuFPRBTxZYQUTfolTfqN
MuAm9X1DzItuiWnxObU8N8dvMd31ioFSWmbKAW19+9x/mZ607Mhtydn9+4tIUux5
Mx72OID6RVXWwdxl3oq+PgxTa1Y0bJRyP+5ZYWBxCgU8QJ9Kd6DQx1MqfwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFINkarcGIUjtuPqbYKgxyCQNyrgEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2VkM2Vk
Yi1kMjc1LTQ3YzktYmU3Zi1jNDM2NzU5MmFlOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvZWQzZWRi
LWQyNzUtNDdjOS1iZTdmLWM0MzY3NTkyYWU4YS8xL2cyUnF0d1loU08yNC1wdGdx
REhJSkEzS3VBUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwR4cMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDjAjANBgkqhkiG9w0BAQsFAAOCAQEAJ5PdjDwjEEOncTy9exAJxiwODP+sDS5B
6XrCQY4tMqvdifeSBxbbKRQjPtyh5Cjbl+M4yl6Kpaqqhav5UJIhLXz94xoW9IsX
GqVvS9pG3jWx4VdB8oZauOkC6UwFZS1mngB3fMnNp+af6w6Wx2Tycfs6fMLcKq64
+vLUB9dgLadMcwRHaF3j0sbFdWOkfofr/gE5CfW9JTRMfusPBYoH1bZcvsD15rtG
/9dY0u9GZcplkixsIBxKhZFGGaXqeBmgQEWwHxfaX9hb4T1tZeGPDnkqzmpXcoVl
cDfk+9ktFE+EcDyJDXS6eQhLX9EbS5OZAQS8tMBbOiR7deEVXeWLUw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:15 2025 by rpki-client