Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
File: Gk-AAcMMrFRuP5IQO0sScy38v1I.cer (raw, json)
Hash identifier: kJD9k7YT2C/IQcjYgRY4BwRQZZURzjNgUyGpHCzvEMg=
Subject key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD93C77FC8E1F690FD4A548DD5D2AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62158
IP: 195.49.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:93:c7:7f:c8:e1:f6:90:fd:4a:54:8d:d5:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:02:90:6a:30:cf:25:01:04:96:37:ad:d6:
cb:5a:18:a9:ee:fb:c2:3f:4d:30:92:cb:22:d6:59:
b7:37:52:3f:58:a4:38:d0:9a:b8:1a:35:ad:33:41:
7f:5b:df:31:24:d4:ec:65:88:88:4a:63:1d:f1:df:
04:98:ef:5b:d7:cf:3e:21:59:ca:af:33:06:e8:9b:
ce:58:ac:56:c8:83:d5:8d:d0:e8:b3:bf:72:4a:00:
97:bf:35:bd:6b:58:0f:33:82:6c:ce:ed:e3:8d:86:
84:a2:a0:78:74:e5:75:b0:ca:0d:44:76:82:49:83:
4e:28:1e:ec:e7:d6:13:a6:c9:15:1e:79:7b:77:98:
4f:1d:61:03:66:d4:6b:ea:91:de:af:ae:1c:08:df:
d3:75:a8:ee:98:f6:90:46:cc:41:58:6d:42:bd:8e:
81:0c:39:4b:6f:20:e5:0d:8f:74:87:c0:63:1e:85:
da:8a:8e:f9:6b:b7:47:89:95:2f:b4:3d:6f:41:90:
c0:df:8d:0f:c8:62:06:48:fb:19:61:da:a0:d5:df:
0b:46:79:8f:51:76:4b:60:87:c8:e4:72:3f:2e:87:
20:fa:50:28:7e:c5:24:45:b1:ba:ee:30:ad:bf:d1:
1a:fe:29:97:17:4a:aa:d4:2b:a2:c4:fd:7b:cb:0e:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62158
Signature Algorithm: sha256WithRSAEncryption
49:30:51:4a:60:22:5d:1c:e1:2f:b9:ef:5b:d4:78:7f:40:8e:
a9:d2:90:25:95:9e:87:d6:ae:d0:90:fa:0c:ff:18:52:42:64:
5b:93:fd:82:14:b9:03:ff:3e:e0:4a:09:95:92:fb:bf:59:59:
4d:f7:6f:d9:08:cd:07:52:39:2e:b5:29:b6:e1:14:80:7a:a5:
b3:98:9a:7c:5f:04:86:56:a0:f7:79:dc:3d:e2:94:69:a0:65:
07:b9:1b:f8:bd:d6:c7:56:7a:5d:9a:5d:cb:3e:67:45:f4:c2:
5c:f8:c3:89:d1:cd:cd:15:14:5e:6f:78:78:2c:90:fc:4d:45:
9d:9b:17:4c:22:df:e8:4e:1f:57:0d:bc:16:ed:8a:06:64:1d:
c5:aa:da:6a:de:4b:b6:9c:da:a5:11:39:7a:1a:cc:f3:3c:71:
cd:7f:25:d7:24:55:a2:a0:08:98:1e:1f:88:be:38:ed:58:b6:
90:78:0d:ba:64:a6:8e:63:d4:b5:e2:3c:0c:9a:69:1d:e9:a6:
cd:56:a5:cd:83:41:7e:50:c8:e7:95:e3:1e:a5:f1:a3:78:fd:
71:0e:b8:26:0c:95:a5:19:18:fb:2b:bb:40:f6:f8:db:e4:b3:
7c:34:18:1b:68:2e:b7:b2:7d:67:fa:97:b9:d4:6b:a5:9b:d4:
87:6e:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:56 2025 by rpki-client