Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.cer (raw, json)
Hash identifier: J1HzpKveDSp0jUmkZsLTk/kZnYcCXAyOT4m1QMlWQbs=
Subject key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B5002CF8077BD31BF18DE3CF8E5F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12666
AS: 20710
AS: 197629
IP: 80.65.0.0/20
IP: 91.223.172.0/24
IP: 185.194.16.0/22
IP: 194.153.74.0/24
IP: 2a02:2948::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:50:02:cf:80:77:bd:31:bf:18:de:3c:f8:e5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d20b08e607668e06050084ee37928a1c0b035492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:9e:91:cb:f2:e1:2a:5c:ec:5c:e6:bc:d0:
c1:69:45:bf:36:9a:1d:87:97:60:47:37:34:88:c9:
cb:fe:9a:8e:b0:ee:f0:8b:94:02:dd:7f:1d:34:39:
d3:e4:42:2c:3c:96:ea:8a:75:a1:32:b3:cf:c9:d8:
c3:3b:07:9b:1e:ea:5c:47:a8:67:9d:a2:c6:52:0a:
d3:f0:6e:40:b0:53:57:b8:75:12:d6:99:7e:c7:c9:
2a:06:89:a5:eb:50:29:91:5a:d4:e5:6f:29:de:61:
c6:e8:ae:56:15:d6:3a:4c:c7:e1:b0:cd:9b:1b:f1:
02:d6:c4:ad:3c:0a:a6:1c:66:1b:69:37:5b:eb:50:
dc:96:64:ad:a6:9c:29:6b:4c:dc:9d:3d:d9:c2:ae:
20:33:7e:1b:11:68:01:68:42:1d:11:ba:ad:77:9e:
ea:da:3b:ed:37:0c:22:53:2a:45:a9:d2:2a:9b:4e:
eb:b5:fd:e1:be:a2:d2:ff:c6:21:fe:c8:4c:c8:8e:
95:fe:e3:f3:b3:55:11:34:f5:77:e5:59:2f:45:82:
c8:31:ed:18:f7:14:b5:3d:e6:96:7b:df:87:49:50:
d4:c9:d8:7f:f8:c3:2c:55:a4:43:c8:ff:e4:7a:d8:
47:51:f9:51:18:35:5b:04:70:b2:25:6a:e0:cd:6d:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.0.0/20
91.223.172.0/24
185.194.16.0/22
194.153.74.0/24
IPv6:
2a02:2948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12666
20710
197629
Signature Algorithm: sha256WithRSAEncryption
35:18:5d:c0:c4:5a:e9:61:91:c9:45:7c:09:c2:28:d2:b0:03:
f6:85:28:86:53:88:e9:b6:a7:19:98:39:7b:6e:6d:ea:e0:41:
4b:17:12:57:13:52:1c:b6:6f:bd:8b:d4:41:c9:4b:12:ca:ba:
82:04:84:b5:97:85:b8:60:aa:23:39:66:92:53:9e:9b:51:82:
af:97:03:f5:ea:aa:5f:8b:f6:a4:d7:2c:7c:b7:02:bf:c4:9d:
e3:04:6b:fc:1f:fe:00:51:f6:cb:00:b3:21:95:bc:13:a7:de:
fe:5c:34:36:b7:c4:34:fb:1e:15:77:3b:dd:3b:6c:7b:00:2d:
43:8f:90:b1:36:ef:16:81:b4:71:bb:42:d0:8d:cd:80:63:1d:
01:ce:cd:1c:c7:96:84:e1:7e:fe:34:19:49:a0:1e:c8:e1:24:
c3:99:03:95:45:24:a8:70:f2:9a:43:b2:54:6d:b7:12:d1:a8:
16:b7:ee:00:ac:17:8c:5d:a4:99:af:5e:ad:1c:0d:52:c5:b5:
98:5c:df:b5:43:0d:ce:cf:61:3f:2e:a2:ab:20:7b:de:18:e7:
2b:27:e3:c1:45:49:85:1c:aa:1c:7c:68:89:43:29:8e:ae:3c:
bd:32:c2:bc:8f:ed:85:8b:df:d6:ce:e8:3d:b4:34:e7:b9:8d:
aa:41:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:57:31 2025 by rpki-client