Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
File: GnTydwKmLGtifF6nC5b9KYI2RSI.cer (raw, json)
Hash identifier: 3hkp3nYDmCACv7lbOZ3iJBa6OPr1MJYwdpF9X2VLWxA=
Subject key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194BD79CDC6017CD02114C23CEF70C8AF60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Jan 2025 17:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.227.244.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:79:cd:c6:01:7c:d0:21:14:c2:3c:ef:70:c8:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:6b:69:96:27:de:75:fc:a5:50:28:a4:97:
29:2d:bc:9d:29:c4:e2:1a:cc:3a:72:3a:bb:00:d0:
2b:fc:39:82:28:34:2d:a3:eb:84:c8:a2:5c:6c:e7:
b1:79:d8:53:1a:70:f8:ac:a5:b3:33:e6:19:e4:2c:
a3:a2:c4:a4:62:8e:e4:0a:c7:2f:f1:1f:49:95:b4:
56:03:df:d0:3d:a9:c8:50:6e:de:5b:ee:ba:50:ff:
25:6f:bd:34:03:6f:00:1b:e1:7a:94:70:9c:b1:30:
e4:02:bb:5a:e9:3d:4b:74:dd:e1:cd:a4:7d:83:25:
84:94:3a:30:aa:00:ec:23:a7:0d:06:18:08:6a:67:
db:86:47:e1:27:8d:89:cf:27:aa:a5:60:3f:df:96:
83:07:81:a2:cc:cb:29:d6:f1:fd:0e:53:69:58:b6:
7f:56:5b:39:fa:cf:09:1a:cd:e7:58:ab:ac:f5:48:
1c:1c:83:93:10:1c:cd:c0:f9:54:b7:77:c7:b5:d8:
c2:84:d0:38:22:b2:49:22:59:74:e1:90:33:d5:a1:
18:1b:35:19:49:72:a1:ac:bf:1e:62:95:08:bc:e5:
15:83:3c:13:2b:c0:70:93:e3:f2:8f:2a:1b:81:a6:
ce:23:9c:b1:e7:1b:3d:81:60:7b:b1:a8:a9:aa:14:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.244.0/23
Signature Algorithm: sha256WithRSAEncryption
75:49:a9:5f:62:3d:1a:d8:98:04:6d:3f:2c:69:4a:c9:e5:24:
f5:f7:af:aa:7a:73:4d:3a:67:b4:d7:df:a6:d8:41:c5:8c:16:
f5:d0:18:79:a5:b8:bf:20:4f:6f:88:52:13:2c:57:e0:94:64:
66:86:f4:5e:42:c0:e5:e5:c4:1f:3b:f8:b7:6d:6f:31:07:a7:
34:3a:85:bb:47:37:98:7b:6b:b9:69:0d:68:d6:1b:71:a1:21:
67:21:57:31:05:14:7b:df:59:8c:0e:4a:ac:c0:2b:a6:4f:77:
7e:8f:75:9c:87:10:d8:6a:5f:f7:04:02:a1:a5:dd:95:4b:1e:
2d:e7:0e:c4:b7:b8:5e:67:5d:de:75:67:9c:bf:01:1d:dd:7d:
5a:2e:3b:88:cd:8c:70:73:04:2a:21:f0:57:55:4e:e1:0d:f5:
6f:b0:c5:01:8c:56:ed:af:b5:3a:db:f3:d4:57:17:a0:40:af:
e9:a8:a8:39:04:0c:ac:69:07:b2:63:1b:51:57:04:8e:93:01:
1e:80:8a:9f:5c:b5:bc:8d:37:20:f7:23:7a:4f:4a:55:82:b5:
49:9c:70:31:8d:6a:0b:9c:ee:90:b1:f3:56:b9:12:bc:4d:63:
02:b1:0a:53:11:2a:62:5a:7f:de:e3:d3:45:e1:12:c9:a6:d3:
0f:04:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:35 2025 by rpki-client