Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.cer (raw, json)
Hash identifier: Fh5gSSKUgHbUlZ4yEFsOkL1WDFTZ+0wEBL7BgmahhfQ=
Subject key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBAACBD75CE65145D789EC71C03FD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206035
IP: 185.148.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:aa:cb:d7:5c:e6:51:45:d7:89:ec:71:c0:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83486841b4f4adc56264c5963085182a220e46d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:c0:f6:50:56:8a:30:10:e8:d2:75:d8:a5:
6a:28:87:a8:a9:0c:d4:36:3c:ea:5a:60:91:81:3f:
7b:dc:e6:7e:28:54:53:fb:d8:85:da:17:7c:9c:fd:
1c:78:38:ca:3c:8e:27:91:12:26:29:11:6a:d6:43:
86:8f:a4:94:56:c8:56:72:3b:8d:27:4d:bf:5d:90:
53:69:46:4d:55:df:12:20:fa:89:e0:f4:d6:80:99:
ca:7f:4a:03:1a:4a:8d:cd:de:c4:a6:2b:05:67:9b:
e2:fb:a8:29:4d:20:99:39:56:43:2b:f0:86:fb:76:
99:84:57:f4:af:67:e3:a2:f1:14:09:94:a7:03:d8:
77:3a:be:57:55:60:c6:47:b0:1e:72:9b:01:f9:dc:
6e:44:94:d6:f1:49:f4:8d:37:84:46:2d:bf:ce:8d:
09:e8:49:41:ef:ee:ed:c1:e2:22:00:04:e3:bc:e6:
42:38:61:a2:93:59:f0:05:fb:c0:cf:51:f9:ea:b9:
bd:1a:ad:2f:96:48:1e:0f:c1:86:11:79:fd:84:3f:
73:20:1c:6b:ff:9d:da:6e:74:62:95:c0:86:ed:cc:
54:37:c9:76:1a:46:54:ab:26:73:48:8e:8b:65:c5:
a7:23:28:46:4c:ca:22:f2:24:99:b8:d7:3c:08:6c:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206035
Signature Algorithm: sha256WithRSAEncryption
1b:66:b3:62:86:7f:ba:98:34:78:bc:fa:7c:70:43:5f:8d:d9:
31:b7:93:ed:76:56:d9:84:cd:a6:c5:b0:6a:48:02:22:c6:cb:
e7:6d:ac:8a:2f:cd:b3:8e:74:3f:99:30:46:b9:d5:f9:48:01:
c2:f6:4e:f7:89:b7:e1:c5:91:b4:42:5e:05:f6:8d:c9:1d:ef:
02:0a:6a:89:74:6f:13:e1:34:d2:8a:f9:c4:46:2a:24:49:7d:
43:6c:2f:6d:e2:9d:a2:2a:df:a7:f3:38:e2:4c:5c:38:e5:86:
45:4b:33:1d:8d:f5:12:4b:f6:69:c9:ac:ae:ee:8d:02:aa:16:
1e:3f:ed:d7:9c:f4:10:61:e2:b8:93:e2:55:1c:e7:2d:c1:0b:
10:78:02:03:88:26:d5:8e:31:1a:e7:a6:b9:42:e4:70:e9:2c:
e1:48:c0:33:ba:2f:48:9c:28:b5:2e:8c:eb:ba:0e:0b:a0:5b:
20:f4:bf:d8:41:7a:d9:e4:91:52:7a:d6:e1:83:ab:6f:ae:9a:
da:36:48:3d:6c:0a:98:51:8e:f9:a7:66:e4:83:04:5e:a4:77:
ea:e9:dd:1c:3b:b4:05:56:1e:82:5f:ba:b9:93:52:a9:41:56:
43:9f:ce:82:f1:c3:45:4b:52:65:52:56:48:44:32:fb:12:90:
57:a4:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:35 2025 by rpki-client