Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.cer (raw, json)
Hash identifier: JAlR7yOeGXskNKojMqYBcq1gNkXO+c2l+O21nhjAkDk=
Subject key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206844490E864C86DDF53B2A396F72B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.203.188.0/22
IP: 2a0a:ecc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:44:49:0e:86:4c:86:dd:f5:3b:2a:39:6f:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:fc:ce:e4:87:25:4e:47:ac:8d:9d:79:ef:
03:b2:21:1a:41:d6:c5:91:02:a6:92:92:7f:54:56:
b5:38:81:e3:4d:01:b6:53:64:17:76:9e:52:9b:d0:
31:21:df:fe:e0:36:ae:db:e1:07:ac:12:57:57:77:
7a:99:58:1f:c6:66:e3:aa:69:f7:01:42:5b:81:05:
15:6f:a8:94:fc:49:6b:d6:fb:ef:7e:3c:da:eb:f5:
b7:19:10:ca:e6:6e:fb:e0:4c:b7:cb:11:a0:50:aa:
28:e0:99:e1:5d:34:76:41:d5:55:23:ab:7e:c4:da:
33:c9:d9:e5:2b:23:7e:58:10:2d:fe:10:1e:ae:b3:
29:28:60:4c:fe:21:e2:59:10:04:61:16:54:d9:a3:
b0:5e:16:04:1f:f9:bd:db:cb:36:3e:0b:84:65:7c:
a6:ca:2a:9e:49:8b:1b:b0:50:4c:ad:5d:96:d0:15:
43:7d:fa:58:2d:d3:10:b6:7a:7e:6f:2f:dd:37:c8:
56:ed:92:8f:90:bb:cb:71:ce:9c:37:90:2e:cb:be:
6f:97:4f:c8:bc:c4:a6:c0:d5:69:b3:5a:bd:64:95:
9f:10:2b:a8:15:e2:76:d3:eb:95:aa:9f:20:ac:95:
fd:37:98:05:d3:85:56:ff:d2:c3:f6:38:ef:c8:c7:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.188.0/22
IPv6:
2a0a:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:a4:57:e7:bf:f8:c6:69:2f:c3:36:05:91:89:ad:17:cf:a6:
74:57:52:35:b9:f3:0f:b3:15:51:7d:ff:69:bc:41:09:3f:a8:
de:3e:8a:bd:9c:35:fd:1b:eb:74:73:c7:37:e8:dc:5c:73:9d:
4a:3d:4d:51:1f:d2:f6:3a:ee:64:a3:26:2b:d4:e8:85:68:be:
4e:97:35:b7:20:1a:25:96:1e:5f:8f:05:4a:2d:bb:e0:40:59:
aa:0f:23:08:1c:de:46:a0:ff:40:71:ca:f7:ac:0f:3e:ba:d2:
c6:83:04:6c:c0:88:1c:af:cb:c0:c9:32:e0:28:a7:5b:6a:7f:
eb:86:ac:b8:92:92:5f:8f:44:e5:52:6f:43:5c:99:cc:97:46:
08:ac:4b:bb:84:12:77:87:3f:f7:70:3e:a5:1f:6c:a7:6f:9d:
d6:59:63:65:79:40:6c:8b:93:75:d0:5f:d7:56:ee:fb:45:38:
32:48:3f:61:c7:4d:70:c0:27:16:9e:3e:c0:54:3c:d5:c3:c2:
f2:83:79:0b:14:e3:35:3c:07:68:52:9c:af:55:42:a1:1e:b8:
e0:1b:fa:d2:2e:e9:98:14:f0:26:0a:73:b8:83:f6:f4:48:dc:
91:11:53:df:2e:e4:db:4d:8b:fc:50:05:26:d1:a2:fe:69:40:
4b:ff:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:29 2025 by rpki-client