Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer (raw, json)
Hash identifier: p9czs+WBflZbz0rq8uCNRjcPcQ3xjgIti7rqT7lHJNI=
Subject key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E34D74CB270807FBC3DBD69AAF18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49692
IP: 91.213.180.0/24
IP: 2001:67c:20f0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e3:4d:74:cb:27:08:07:fb:c3:db:d6:9a:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:dc:10:13:e5:22:46:b3:e7:76:46:9d:3a:
5f:72:ec:b5:c6:a7:eb:99:63:32:fa:62:52:b0:c3:
78:5a:c6:21:ac:55:23:e1:6e:23:53:d0:94:f9:e5:
f2:4a:18:52:e7:b9:03:9d:9c:3b:de:37:c5:7d:6b:
6e:f1:f8:6b:04:3b:2f:17:12:d4:1a:fa:da:c9:68:
28:c5:54:d4:ec:8a:2d:7f:fc:47:91:d0:3c:9f:d9:
d9:20:cf:45:f2:04:e1:90:e2:d3:55:5b:ed:0e:0a:
07:c3:b7:3d:5f:87:f5:5b:2c:9b:1e:ce:45:c3:3b:
75:8a:5d:01:42:73:99:86:39:e7:5e:c1:76:21:f7:
42:36:38:a9:de:34:6b:ce:30:e1:6d:a5:5c:a3:aa:
d8:74:45:55:49:e2:13:8c:89:37:a0:0c:64:9c:c5:
18:31:58:d5:e2:c8:66:3e:b9:37:52:88:ea:55:29:
0e:42:df:6d:3e:3a:da:b2:44:92:92:c1:d3:f1:b0:
3a:cc:74:2a:5f:cc:b7:bc:e6:35:44:78:e7:37:02:
75:b4:ce:ce:52:54:c4:cf:33:88:90:9d:88:ec:a8:
34:b2:c4:05:78:fd:47:08:e5:eb:fe:94:56:dd:70:
16:75:5e:8b:bc:75:47:8a:ca:91:8f:13:14:33:83:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.180.0/24
IPv6:
2001:67c:20f0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49692
Signature Algorithm: sha256WithRSAEncryption
81:e1:17:3e:a6:fd:a7:a5:3e:b2:cf:b8:76:ac:ca:a6:fb:14:
53:c1:0f:73:c7:23:4d:50:c6:c3:c6:3f:b0:a1:ca:e1:5b:00:
34:63:bc:cb:68:22:cb:48:5c:f0:45:a8:69:e0:6b:07:be:10:
d6:65:8a:3e:e6:d2:3c:b2:8c:1f:49:9c:14:4e:5d:a0:7e:ae:
fc:5e:c8:a4:a3:d6:76:a4:9d:69:60:71:44:c3:fc:24:ad:ae:
a2:4c:8c:aa:bd:63:11:53:94:b3:51:07:31:88:cd:d5:1a:66:
b9:68:8b:35:1f:5c:9f:29:f1:00:b2:18:9d:4c:db:29:41:26:
bc:d8:4e:13:dc:43:6b:dd:16:ab:3a:74:1a:f3:39:fd:b1:7e:
b7:b9:ef:2d:5f:42:49:2e:6f:30:f1:8b:90:6a:83:4b:f2:99:
96:38:b2:8d:37:69:c8:cc:ab:d4:72:8c:a3:96:0e:06:17:ce:
d2:0c:2b:0d:27:a3:4b:5f:87:03:77:65:c3:e5:e0:63:35:9d:
8d:c4:d2:e5:78:4a:c1:71:21:2a:62:38:a2:65:88:1e:e3:db:
a9:46:5b:3f:d4:93:47:56:cd:a9:3b:d0:61:48:c9:82:db:6f:
e1:bb:a4:3f:85:e4:07:44:d8:fa:be:a4:ae:7e:b4:e5:9e:12:
25:9a:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:23 2025 by rpki-client