Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
File: _GpMWV8LLdBaH-Zyh8E84OvICts.cer (raw, json)
Hash identifier: wvgYMYlpEuTEv3N7QF302L2SKIR/1KtIKTVN4L0pAWA=
Subject key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97E5376267BA388C48290173399B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203602
IP: 185.255.244.0/22
IP: 2a0c:61c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7e:53:76:26:7b:a3:88:c4:82:90:17:33:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:e7:08:62:9d:a0:f5:eb:22:7d:f4:51:4c:
47:08:02:2c:52:e3:5e:16:c5:16:2d:2c:af:8d:e6:
dd:40:77:7e:53:57:a5:9a:c1:d9:03:17:18:c5:68:
b4:df:99:f0:2e:4f:30:53:0c:9f:a3:90:51:96:74:
d4:f4:4c:fc:ad:51:d6:68:6f:23:08:4e:b1:90:c4:
b1:ab:12:7a:f7:19:61:33:b0:20:e4:af:ff:83:bb:
5a:c3:9a:3d:fa:74:1d:6f:94:8e:ee:1a:40:82:55:
bd:1f:a2:5c:68:c9:0c:bc:79:cd:17:e8:ae:1d:6e:
e5:9c:cb:19:65:d8:5d:c2:c9:bb:f9:7d:78:09:a9:
25:12:6f:e6:f1:30:c8:3e:86:7c:bf:13:c7:da:13:
7b:e4:f3:0e:94:0e:e3:ee:60:23:4d:7b:d7:6a:d1:
40:77:c9:f3:b6:44:e9:ba:ae:cf:fe:56:42:31:4c:
96:80:a0:78:36:ce:84:29:ff:ac:06:07:b3:94:28:
b9:49:ee:08:31:3e:f8:dd:ea:3a:fb:32:0c:26:8d:
49:34:b1:97:73:ed:e9:fd:c3:36:09:34:24:6d:94:
e4:2c:52:a3:50:b3:44:66:51:8d:a6:31:0c:e1:62:
18:b1:e9:e1:c2:9d:71:b9:7e:ac:2b:d6:cd:79:fe:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.244.0/22
IPv6:
2a0c:61c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203602
Signature Algorithm: sha256WithRSAEncryption
30:a1:1c:dc:81:40:55:34:71:c3:1a:bd:7a:ca:c4:d7:cd:ac:
d3:9b:cf:a7:04:95:a4:e6:a2:56:a0:a8:8d:f3:0a:83:78:14:
52:ea:57:92:e9:2c:51:90:e1:5c:a8:ea:b9:eb:52:13:3f:af:
21:f1:bd:d3:ab:f3:fc:64:19:de:74:d7:d1:97:8a:f9:e5:87:
01:3c:e7:18:52:26:31:04:33:07:67:82:d5:4a:0b:78:95:bc:
39:4a:3d:da:43:28:0e:4f:dd:f9:ae:60:3b:f2:f5:d5:cf:fa:
1f:66:3d:f5:20:9a:30:ad:1a:0d:f8:46:48:fc:5c:33:c1:2a:
fc:2d:62:a7:80:86:ae:bc:97:c3:47:90:3f:b7:28:1a:17:f0:
fe:39:2e:b3:df:5e:62:21:35:c5:b3:53:45:5f:b8:0a:ea:6c:
fd:0d:93:97:28:f8:eb:24:64:7e:95:33:10:3e:eb:dc:c8:ec:
eb:87:98:29:42:90:8d:84:46:99:92:c3:37:14:46:6f:bc:04:
42:06:0b:99:12:73:62:e2:e7:18:31:f2:27:d5:9d:f7:74:d3:
16:cc:4d:51:46:4a:0f:b6:db:e5:b6:2f:ef:58:14:09:07:b8:
5a:28:64:0e:b0:42:c6:56:e0:4f:d3:39:40:cc:6e:33:ae:fd:
ee:49:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:41 2025 by rpki-client