Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer (raw, json)
Hash identifier: 8EN3Ev+tm0DLPAx6MthkmIg5KEZNiqunjIoOr8HWTrI=
Subject key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5DFCA7ADAB32D466552B88D4ACD82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.18.148.0 -- 185.18.150.255
IP: 2a04:b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:df:ca:7a:da:b3:2d:46:65:52:b8:8d:4a:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80043f23936622824111e8865a50002067d95a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:b5:29:ca:67:2b:b0:f8:bc:c7:d0:79:76:
0b:91:17:3e:25:6d:b7:df:f2:08:27:27:c9:2c:59:
f7:4c:c7:0c:a7:99:85:7b:30:2c:88:06:70:5f:10:
8a:b1:25:21:dc:89:f9:40:38:ca:6e:26:e9:6c:ee:
6e:df:3b:be:87:16:10:b3:d2:a0:1d:26:46:39:c6:
5c:62:30:9f:aa:ca:98:c0:82:a9:5c:6b:af:07:6c:
93:a3:c3:8d:b1:94:ad:c9:74:e1:10:26:93:c4:40:
8b:ce:58:9a:87:51:75:cc:60:f9:12:70:8b:c6:11:
b3:56:5e:45:b0:2b:69:3e:99:07:c6:38:f1:30:03:
f8:fb:d7:2b:92:ab:01:ea:70:f1:49:74:7a:a3:66:
07:97:91:fa:37:38:55:e1:c6:be:ea:68:22:82:bd:
bd:16:9c:48:e0:90:89:99:7a:1d:cd:dd:20:d5:cc:
09:d3:a2:4f:d1:34:7e:8c:99:f9:91:3a:5f:f1:6c:
88:64:89:bf:f7:33:a7:37:ca:f7:2d:47:e2:2f:9e:
3b:05:07:f6:8e:15:a0:e3:16:53:b0:22:c3:de:59:
6c:04:d1:8e:73:ba:aa:98:25:a8:38:c3:4b:9a:4e:
ac:5f:f4:34:67:fe:d0:e2:b0:d6:4c:ef:3a:84:43:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.148.0-185.18.150.255
IPv6:
2a04:b80::/29
Signature Algorithm: sha256WithRSAEncryption
82:80:4c:91:ef:73:ee:d7:e0:c9:2c:a1:c4:1e:11:a4:1b:0c:
9d:d6:1c:a5:81:8f:de:ad:f3:fd:69:75:2f:5e:7f:34:4a:07:
38:a6:79:e8:bf:a5:bf:37:78:62:3d:f4:60:05:84:df:bc:6c:
10:b1:28:0b:43:f9:12:ca:c6:da:66:b4:d8:7d:f6:ca:f0:88:
09:3f:9c:f5:22:d4:34:de:8c:ca:69:98:7b:4e:f2:4a:30:82:
67:f7:29:ff:22:96:25:68:84:82:bf:cd:ce:cb:be:90:fc:0b:
d7:02:ad:4a:2d:cf:72:89:95:c5:46:38:9b:11:e9:e7:c3:b9:
6e:3d:53:56:76:bc:14:6b:4c:3a:e9:79:d8:5c:f1:87:49:47:
e8:5d:87:b4:98:a8:f4:d0:6f:94:ad:07:c5:e6:a4:c9:7c:9c:
bb:b8:f1:ff:fe:e3:cb:8b:42:98:cd:cc:f9:a6:60:80:c8:2c:
bc:06:42:92:f4:31:93:62:41:87:d9:49:60:f7:24:1a:87:6e:
86:bc:36:f2:51:58:2a:9f:38:3e:7f:7e:c9:fa:24:d5:a5:ee:
81:36:be:fc:1e:37:5c:8f:ab:cb:c1:02:61:98:4c:1e:04:20:
76:6c:51:ae:45:5b:08:6f:fc:21:8f:59:d9:6c:08:0e:20:3b:
e1:85:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:48:17 2025 by rpki-client