Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
File: jgo5Gq64_HyDP4JX16nnSlWzOv4.cer (raw, json)
Hash identifier: 59OsipS5gvx7TLGDzyimnxdPJ4QnWtsHsc44hJsAec0=
Subject key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C8856EB2BAB205C47E62927D1CDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.187.132.0/22
IP: 2a0b:a580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c8:85:6e:b2:ba:b2:05:c4:7e:62:92:7d:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:1d:74:e0:c0:06:92:3a:22:a0:a7:a5:05:
55:7a:9c:97:ae:ca:87:c2:ee:ab:4e:9b:d6:ec:b7:
9a:dd:43:db:6a:6b:86:10:a2:f7:96:10:5a:66:3d:
24:08:df:e3:17:48:1f:28:e0:b0:f1:6d:0a:2c:f2:
e3:a7:7c:92:06:19:32:a4:26:ea:c0:e9:04:ba:1a:
30:45:27:fb:f3:3e:6f:86:56:de:80:30:ad:20:18:
40:43:00:70:88:75:73:96:41:6f:83:20:42:c5:4e:
b8:1c:42:02:a3:06:80:a2:f4:25:97:0a:d6:01:3b:
fd:f3:4e:0e:7d:c0:b7:c6:41:a8:a7:f1:83:fc:61:
82:fd:c7:dc:89:1d:d1:4f:e2:36:0a:c9:37:25:54:
ea:e8:46:b7:24:5e:39:d5:17:28:c6:96:a5:3e:db:
60:b5:47:71:c5:3c:dd:2d:8a:57:35:c1:1e:68:32:
84:68:f8:3f:5c:5e:20:26:dd:40:ed:ea:fd:44:16:
72:6b:ad:bf:a4:0b:4d:5a:83:c0:92:20:79:48:03:
21:11:66:df:05:d8:62:a5:1e:62:1e:78:01:3e:65:
69:86:21:2d:fe:12:ac:a1:86:5f:98:84:5a:bc:a3:
9e:b4:53:0b:2f:21:4c:b2:21:84:7d:7a:e7:3e:26:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.132.0/22
IPv6:
2a0b:a580::/29
Signature Algorithm: sha256WithRSAEncryption
9d:22:e4:98:fd:b8:3b:53:0e:e1:f6:74:31:7d:46:c9:51:79:
89:16:63:12:1d:63:f4:71:76:2d:31:36:2a:36:f5:bd:2e:21:
17:2c:7a:94:10:a9:47:83:40:f3:60:6f:9f:91:7d:c5:61:bd:
8e:54:8a:de:6c:d8:a3:8f:0a:e8:a3:54:cf:13:ac:ba:42:c5:
9c:56:2f:de:6c:83:38:22:a2:a0:a2:c5:b9:cd:28:d1:4f:31:
11:d9:db:7d:30:66:71:90:0c:cf:41:b5:23:45:c9:ed:3c:c9:
19:4b:b9:a7:3b:79:80:27:95:28:44:c5:4e:b8:c2:a4:49:de:
f2:80:ad:01:0b:c9:40:88:4f:44:54:c4:72:c0:00:e4:0f:78:
1e:b7:d5:fd:62:85:37:14:07:1b:9c:6e:26:56:f0:9a:eb:5b:
15:27:47:81:8d:0e:f3:7e:1d:d4:f3:e7:2f:b7:53:a1:15:23:
39:8e:0a:a6:24:c5:92:85:df:af:58:2d:b3:7a:55:7b:f2:3b:
b9:db:97:fe:79:f9:df:bf:38:a2:2f:e8:6f:8f:b6:50:7e:2a:
18:49:60:a8:ba:f4:cb:3b:e8:33:22:73:7d:63:12:77:a2:82:
8e:ec:75:23:ae:09:d0:a4:2d:0f:9d:32:76:54:48:c7:36:e8:
f8:e4:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:39:30 2025 by rpki-client