Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
File: G02ANz4-NNAKhbhBKNQFOZvPikU.cer (raw, json)
Hash identifier: PjYGS78/+cDhqRYgtqAhoMvJb83zCjX/BdH9GDZqR2I=
Subject key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421437DAD15C409A27B2C0A6452DD28BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.237.93.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:7d:ad:15:c4:09:a2:7b:2c:0a:64:52:dd:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:a1:b4:9e:5b:63:72:9b:03:0e:57:a9:ab:
3f:d7:57:90:88:4f:6c:c8:d0:cf:b6:f3:d9:df:cb:
e3:4a:4f:2e:fb:dd:4f:30:08:75:07:4f:1b:59:c2:
13:61:47:33:1b:60:3a:4f:38:a7:75:7e:fb:4f:bf:
19:8d:29:e5:e0:ec:a7:a1:70:61:80:12:e4:55:5a:
9a:d8:8e:54:3b:35:f8:ed:54:9d:96:50:8b:ea:37:
80:d2:ce:5a:57:e1:91:c2:85:20:ff:f2:2b:bc:c3:
b4:c3:5d:28:6a:1a:17:c5:27:b1:52:8e:ca:95:bb:
b1:30:43:df:0e:1e:fc:71:9b:ef:a8:1a:e5:81:c3:
8e:ad:61:3d:15:28:1c:2c:cc:63:54:6e:02:69:98:
bc:0d:ab:0e:9a:d4:c0:05:6d:d5:78:fb:4d:bc:35:
83:ea:58:f3:a8:fa:ac:49:1f:1b:c3:4f:07:eb:ae:
14:c4:86:c5:75:90:45:02:10:83:15:c5:02:03:8e:
4a:27:ec:ee:87:b5:8e:60:bb:fa:b1:b6:65:8c:41:
d4:cb:1f:c0:41:f2:2a:4b:6a:1e:6b:6f:f4:ce:5e:
af:17:bb:70:ff:a0:ed:99:b5:fe:a7:af:95:13:b2:
25:27:4f:e4:dd:ad:fe:4d:d3:27:a2:c1:55:95:f8:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d0:b5:14:bc:0d:6c:7e:e2:15:2f:07:e2:97:6f:1a:12:bb:
d6:8a:4b:15:e0:9b:34:9b:26:bb:06:6b:ac:ca:2f:b2:7b:67:
f8:f8:08:09:42:4e:a3:5f:da:7e:9e:ca:1b:93:0d:20:df:c8:
c0:53:5f:a0:be:e6:11:e3:9f:e3:f8:5c:e9:d7:4c:05:97:a5:
fa:24:73:8f:3b:ad:2e:ec:ca:d5:7c:8e:85:9e:07:e9:f2:63:
36:04:e0:b5:4c:66:72:d1:27:73:4e:a1:0e:a6:42:03:9e:90:
bb:98:2f:be:7e:f4:85:29:b8:97:cb:6e:56:1a:d0:93:f5:81:
ae:97:24:49:66:a2:75:52:32:28:df:be:e1:fe:16:93:4f:ac:
95:66:75:85:7c:1e:27:79:59:45:24:d7:ec:25:5b:9e:f1:4a:
92:0a:35:ee:2b:64:9d:66:f5:46:8d:9d:dd:e2:31:a5:84:ef:
02:4e:d0:b3:ed:92:bd:04:3d:57:48:e8:49:b4:f9:28:47:61:
6d:de:65:b8:0f:07:c9:73:ff:e6:89:83:c9:f9:48:9a:76:f7:
06:94:34:d7:42:5a:15:d1:c2:35:a5:d8:9d:10:70:54:63:c8:
f1:34:17:08:ad:32:68:20:10:e9:ce:0f:d7:6a:22:25:45:48:
2f:ea:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:11:27 2025 by rpki-client