Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
File: gijzXzqHKY2z0GmVqcbARXIRIrI.cer (raw, json)
Hash identifier: 9xH5JY6LgNAwMqzV6LexgtAeP2k0ARIGMGOYlHR3PEg=
Subject key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA9247A65CFF0E3545E6D9C0F6257
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
caRepository: rsync://0.sb/repo/sb/34/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.46.68.0/24
IP: 2a0d:a040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a9:24:7a:65:cf:f0:e3:54:5e:6d:9c:0f:62:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8228f35f3a87298db3d06995a9c6c045721122b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:5d:bc:19:50:18:0f:4b:7d:d1:c5:f9:50:
96:8e:b9:a9:fb:d6:17:7f:ba:cc:b9:99:4a:49:52:
ec:1f:96:c3:4d:9a:f1:7c:ea:4e:d1:d7:cc:f3:3b:
71:01:0b:73:42:a4:1f:e3:03:88:85:69:12:9f:10:
b3:02:0b:db:cd:f4:1f:e5:d3:0d:89:8d:68:5d:bc:
5b:40:77:1a:1f:64:39:f1:4d:36:6e:b2:cc:76:d3:
06:36:2c:cd:59:1b:43:b1:5c:30:33:5a:92:01:b9:
07:f2:c7:2e:4b:53:3a:86:28:f2:08:61:65:1c:b8:
71:ca:c8:3c:18:bc:81:0e:93:08:56:9a:1a:63:60:
9e:86:c6:8d:88:d7:3c:03:d1:7f:27:5f:48:fc:69:
f4:9b:2f:9c:8d:0b:1a:03:7a:0a:8d:40:8e:06:ea:
47:f0:9c:8d:3b:ae:78:a9:6c:a5:43:8e:a2:f2:0b:
5a:f7:ff:0c:d7:1f:12:3c:37:14:9e:e9:91:62:fd:
fd:a9:31:75:d0:b4:6e:a3:19:1c:2f:76:18:4c:0f:
88:2f:22:f6:e4:12:31:73:94:9c:c6:c6:5c:bf:26:
89:15:9c:be:9e:87:e7:86:07:d3:d6:96:95:43:c1:
4f:43:65:1c:02:1f:5b:54:a6:59:9f:d9:3d:9d:e6:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/34/
RPKI Manifest - URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.68.0/24
IPv6:
2a0d:a040::/29
Signature Algorithm: sha256WithRSAEncryption
91:61:b5:06:2a:2f:1f:43:e9:f8:27:13:45:35:2d:4a:0f:cb:
05:aa:a9:1c:b3:47:41:5d:a1:da:a5:5d:82:a9:de:12:7a:db:
bb:e7:6c:92:e2:57:85:b8:16:76:e8:14:d0:89:a2:46:f2:96:
85:c1:1c:2c:0d:90:6a:da:35:3d:df:34:64:60:99:e8:a8:f9:
b1:55:94:09:23:fd:a3:96:7e:b3:66:9e:95:19:59:81:b6:ec:
4c:f5:31:29:4e:a2:69:92:01:e0:01:19:5e:f3:26:a3:ff:7a:
d0:36:ae:7f:20:67:e4:31:e5:4e:d3:e0:4d:b1:23:99:9e:e6:
d5:ca:b3:dd:ca:aa:da:02:72:c6:1b:d1:ed:53:6c:9f:a2:a6:
e6:dd:68:c3:d0:99:b3:75:0d:b8:55:9e:49:b8:8e:de:39:91:
40:75:14:a2:1b:13:5f:db:93:d5:ca:4d:fa:d1:8b:1e:24:7f:
4c:05:0c:08:12:47:08:52:c5:23:d6:b1:8d:bb:5b:d5:68:5d:
15:88:dd:c5:d3:ae:64:23:5a:3d:aa:55:b2:60:ac:86:eb:28:
02:f6:1f:7f:02:cc:86:c6:c3:99:52:f9:66:f5:d5:17:5e:6a:
e7:8a:d9:9e:9e:97:58:a9:28:6d:6a:b1:e5:e8:ab:6a:c7:82:
c2:df:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:38:22 2025 by rpki-client