Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.cer (raw, json)
Hash identifier: Jd4kGVV8/2jBZ6XUd4dOrFKpIWp+2J8IAL3zvWK1dHI=
Subject key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FAB401BE1A52B03748AE02FA39FF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.137.165.0/24
IP: 185.226.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ab:40:1b:e1:a5:2b:03:74:8a:e0:2f:a3:9f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:ea:2a:e9:a4:66:be:b5:f3:0f:19:03:78:
d0:5b:e5:ec:47:62:23:14:b2:64:6d:d6:5e:83:22:
bb:e9:5d:ea:19:3e:ad:8e:d0:e2:c1:03:89:20:a1:
86:22:58:6d:2c:9d:79:16:be:e1:7c:82:31:9c:a5:
3d:95:6b:17:fa:46:25:c1:17:be:1b:3f:50:bf:d5:
90:c4:e4:f8:a6:83:05:ec:4f:3a:73:b7:5e:85:f3:
fb:9e:6b:58:3b:1c:d5:02:db:56:2d:dd:7a:7d:c0:
b0:0b:b7:61:44:b2:be:ff:52:da:42:fc:e1:39:88:
4f:13:85:7a:29:c2:41:fb:6e:9b:f4:58:2b:c4:dc:
4a:9f:60:a6:cd:51:8a:96:d8:8e:e2:9e:84:05:d2:
e8:92:cf:39:44:47:9c:c3:52:4c:30:6d:0e:4a:ae:
ee:26:64:4a:64:78:de:e9:8c:4a:51:10:83:08:11:
2d:50:9c:c4:27:24:96:14:05:76:0e:da:f7:c6:95:
03:22:cd:84:5d:26:f2:5a:c9:8d:70:28:fb:2b:f3:
57:f4:e9:ba:fa:87:b6:d1:de:38:c1:84:d8:9b:ee:
2d:ac:4e:0d:55:79:a3:e2:a6:05:b1:ee:5e:46:fb:
55:8f:0e:47:e6:df:53:fd:bd:90:03:61:30:cc:3c:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.165.0/24
185.226.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:70:4c:04:6f:43:87:47:a0:4f:4b:78:a5:0b:82:f7:b3:e7:
2e:96:23:7f:04:b9:78:35:34:0b:6e:4d:4a:b9:9b:8e:e4:da:
50:71:df:1a:03:65:75:b6:5c:6b:5c:d4:c0:28:31:58:14:b8:
1e:eb:03:f1:a0:5e:77:00:48:19:c8:c7:81:2f:d6:cc:4d:d6:
03:62:f1:e9:85:8d:44:9e:50:2a:f5:20:34:b6:a1:1d:1f:56:
e8:05:63:26:29:01:bd:6a:3d:87:38:ab:9e:5d:a6:7e:ee:2a:
df:92:fe:92:a1:dc:ad:66:a8:b5:1a:93:27:f5:d4:cc:f5:b7:
bb:04:fa:0c:f9:eb:a4:88:24:84:f3:24:a1:62:db:0a:ec:4e:
98:61:e6:18:29:a9:cf:39:ba:8b:7b:c1:7e:92:c0:52:52:e6:
d5:23:c0:7f:ea:86:c3:97:b9:95:6a:b8:a1:b7:16:7f:98:dc:
0d:7e:89:5b:3c:ac:73:85:d8:e0:f4:d4:c9:86:65:24:8b:45:
1f:56:5a:14:29:fd:32:44:fd:9a:b4:45:f3:bd:fc:ac:e6:39:
ef:c4:01:94:38:34:3d:f2:02:c2:ad:82:63:13:88:bb:61:a7:
96:29:22:57:85:46:87:56:7b:99:b8:db:54:15:50:a9:32:a6:
8e:bf:92:81
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZQiH6tAG+GlKwN0iuAvo5/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzIxYTExM2QxYmEwMWQxMDdmZGY3OTEzMDhjMGE1MWYzZDA2ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcfqKumkZr618w8ZA3jQW+XsR2Ij
FLJkbdZegyK76V3qGT6tjtDiwQOJIKGGIlhtLJ15Fr7hfIIxnKU9lWsX+kYlwRe+
Gz9Qv9WQxOT4poMF7E86c7dehfP7nmtYOxzVAttWLd16fcCwC7dhRLK+/1LaQvzh
OYhPE4V6KcJB+26b9FgrxNxKn2CmzVGKltiO4p6EBdLoks85REecw1JMMG0OSq7u
JmRKZHje6YxKURCDCBEtUJzEJySWFAV2Dtr3xpUDIs2EXSbyWsmNcCj7K/NX9Om6
+oe20d44wYTYm+4trE4NVXmj4qYFse5eRvtVjw5H5t9T/b2QA2EwzDxqzQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFKwhoRPRugHRB/33kTCMClHz0G3aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzU4OTNm
Ny1iNGYxLTQ5NjEtOTQyNi1mZDczYjgwODMzYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNTg5M2Y3
LWI0ZjEtNDk2MS05NDI2LWZkNzNiODA4MzNiNy8xL3JDR2hFOUc2QWRFSF9mZVJN
SXdLVWZQUWJkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAuYmlAwQCueK8MA0GCSqGSIb3DQEBCwUAA4IB
AQCdcEwEb0OHR6BPS3ilC4L3s+culiN/BLl4NTQLbk1KuZuO5NpQcd8aA2V1tlxr
XNTAKDFYFLge6wPxoF53AEgZyMeBL9bMTdYDYvHphY1EnlAq9SA0tqEdH1boBWMm
KQG9aj2HOKueXaZ+7irfkv6SodytZqi1GpMn9dTM9be7BPoM+eukiCSE8yShYtsK
7E6YYeYYKanPObqLe8F+ksBSUubVI8B/6obDl7mVarihtxZ/mNwNfolbPKxzhdjg
9NTJhmUki0UfVloUKf0yRP2atEXzvfys5jnvxAGUODQ98gLCrYJjE4i7YaeWKSJX
hUaHVnuZuNtUFVCpMqaOv5KB
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:55 2025 by rpki-client