Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
File: gZkBtk_iJla48tsmC0U_J5NSt9A.cer (raw, json)
Hash identifier: pom3BTvMkmPFsJ3jnAs3Um4sgnmvl1dWcJTU5NXEuFs=
Subject key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B37492BCD7445119FFE4E1C8326E64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.238.51.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:74:92:bc:d7:44:51:19:ff:e4:e1:c8:32:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819901b64fe22656b8f2db260b453f279352b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:50:1f:df:c5:41:c3:62:6e:19:4b:4b:21:
0f:89:2d:e6:d7:85:a4:58:d6:9d:ad:c5:0b:6a:87:
2a:fe:a8:85:80:b3:69:a1:3d:3a:97:48:c4:ce:d3:
d5:8f:7a:22:3d:01:25:36:5b:f1:5a:32:c0:fb:d2:
80:d6:ce:3f:13:43:b3:1e:29:df:0d:b5:e2:9c:88:
5c:f6:67:e3:53:55:88:1b:cb:45:9f:2e:95:90:a6:
63:2c:b3:08:7a:2f:40:e1:39:a2:ec:94:b9:3a:c3:
56:25:01:55:f2:27:93:d0:05:82:1d:22:01:5c:32:
9a:8a:2f:be:b3:7f:25:08:12:b5:b4:a5:b4:9d:80:
fd:37:18:f2:49:b0:39:c9:f5:78:8d:3c:39:65:f3:
b2:c5:d8:29:e6:ba:78:70:d7:97:b9:64:7b:6a:0b:
9b:ad:27:16:a4:fc:43:c0:b7:bb:f7:2e:5c:21:c7:
8b:c3:25:a6:13:9e:f0:b5:1e:c7:09:6c:ea:ba:37:
a6:bb:ed:08:fc:47:c2:d0:41:43:9d:57:23:3a:1e:
ab:ec:74:f6:84:f5:9d:c7:a4:95:62:8b:1d:92:c7:
a1:58:44:7f:81:d2:ef:80:62:b2:cf:a9:49:d2:2c:
3c:b3:c7:2b:50:dd:5e:ff:47:21:75:9b:c0:a5:2a:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ac:3d:10:b2:72:63:6f:75:10:b1:8d:99:b8:f2:51:4a:6c:
cd:ba:55:99:43:da:4e:ac:32:a3:a1:7e:5d:0e:60:f8:fe:db:
e3:8c:a8:5a:af:d7:fb:43:40:be:d8:f9:c4:16:6b:fa:89:e1:
db:cb:fe:e7:38:d5:fb:1c:87:44:fb:61:0e:61:84:43:0d:fd:
f1:8c:3e:16:b4:9c:a3:4c:3a:d2:06:fb:1e:11:e5:d0:5e:3a:
5f:32:66:14:ca:54:79:29:a4:4a:b5:e9:cd:24:33:78:ef:9d:
ea:d7:2b:18:99:60:61:96:b0:6a:93:98:1a:55:aa:8e:ac:4e:
a9:73:bf:36:7a:02:4e:56:1d:06:e0:1d:e0:da:ea:48:5a:6a:
af:1b:c0:a4:cc:90:e1:a9:37:30:80:f6:ef:0a:13:eb:85:7a:
7e:3f:02:ef:a6:4b:ae:a9:d5:89:de:5b:42:ac:3c:9f:8d:9a:
66:91:e9:6c:10:27:ea:6f:2c:13:19:a4:54:bb:4b:12:55:19:
40:27:ba:7a:1a:01:d9:2a:c2:92:22:b5:8f:61:7c:a5:ed:1c:
57:29:76:b3:39:fc:cf:dd:b0:53:65:ce:0f:2a:eb:ba:6d:c1:
4a:db:db:e4:74:70:10:fb:8f:b5:91:0d:23:d8:da:6b:01:f3:
7e:c7:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:43:58 2025 by rpki-client