Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.cer (raw, json)
Hash identifier: QSh7oOgwEBniWm4cATWW9AcryOsKCpDVrkzmOGXiBbU=
Subject key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9C245FE686A6E261BD6902C09826B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201879
IP: 91.199.116.0/24
IP: 2a0a:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c2:45:fe:68:6a:6e:26:1b:d6:90:2c:09:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:37:55:5a:96:84:8d:95:0c:6b:f8:f2:5d:
ac:86:87:e2:88:7c:20:28:a7:00:0e:5c:d2:d3:2b:
fd:7e:b9:0d:32:0f:93:a8:19:f8:cf:97:bb:65:e9:
18:cc:7c:de:70:0f:60:97:67:ed:4a:73:64:01:55:
fc:22:24:45:6f:cd:69:3e:1e:7a:3c:7e:ce:aa:73:
65:36:45:7b:e2:27:88:4e:a9:b1:ba:5b:07:bd:78:
ab:40:74:0e:bd:ac:f6:5d:47:96:f6:ff:19:8c:3d:
41:09:e0:db:31:e5:a6:77:01:26:52:5a:b3:df:96:
83:2b:74:cc:ce:1f:37:31:7a:cf:5c:9e:bb:1a:4a:
0e:a1:19:2a:4c:38:38:d4:2b:0e:39:86:d3:ad:ab:
af:59:04:c9:be:4f:ae:79:ee:9f:76:79:21:39:1b:
7a:42:49:ee:64:db:f5:13:ef:72:39:2e:92:75:5f:
d7:18:8e:1a:ab:dd:4d:d6:c3:35:bb:f2:16:79:49:
c0:06:d1:79:14:32:26:54:b5:84:d3:ad:35:fd:37:
4d:60:05:80:dc:40:0f:a2:2a:47:16:54:8c:ad:1d:
e1:57:d8:4b:19:a6:49:0e:38:51:ae:40:23:50:ac:
f5:3d:69:a9:37:22:d3:5d:72:0d:1b:42:db:a0:56:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.116.0/24
IPv6:
2a0a:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201879
Signature Algorithm: sha256WithRSAEncryption
72:c7:f8:ca:6f:1b:e9:71:ac:a4:fe:3f:6a:c4:b5:f2:dd:aa:
d7:f4:d3:e0:2c:df:1b:c7:d0:bb:60:81:28:69:74:f1:c0:0d:
a5:69:ca:67:c7:bd:11:5f:ce:0e:53:3b:a5:e2:69:cc:22:a2:
a6:ff:f0:f3:0a:8d:6c:49:d8:87:86:04:d2:56:30:9f:53:d2:
67:61:d4:d6:9b:a6:8d:42:22:5e:d0:9d:6a:27:f8:ea:86:c5:
e3:ed:a6:25:5f:2f:f5:99:31:e7:84:7e:37:da:35:51:45:e2:
c5:72:d7:9c:73:ab:a7:79:70:eb:67:08:f2:12:12:95:70:19:
10:29:6d:06:ff:b6:98:0c:a8:c3:5f:57:bf:3b:d0:ff:4d:a2:
99:2d:9c:25:5e:48:31:89:14:17:ec:1a:6e:d5:c9:b0:b5:94:
ab:4c:ce:24:4a:0f:cf:db:e4:3b:32:07:59:04:ba:ea:4e:10:
88:bc:b3:13:e4:bc:e4:8b:be:3a:81:e9:51:24:0e:77:d3:88:
ee:de:00:71:01:b7:01:7a:c1:18:52:e1:60:81:73:c2:92:01:
ee:4c:35:21:ce:dd:91:3e:67:39:54:6f:da:b0:cf:62:27:7a:
62:4f:5b:45:57:2a:c8:19:24:e7:d8:95:a0:15:ec:af:af:2e:
c7:56:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:57:22 2025 by rpki-client