Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
File: gcAMyMc9EUHIklTtVWqNASypAiY.cer (raw, json)
Hash identifier: 9al/eJY3x7XrVPoeL9Nbl9D9AxGOCdaEShc+sGDcra4=
Subject key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143EC4B5258CE07CC74A9ABA6C8F34E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41644
IP: 185.144.212.0/22
IP: 193.219.102.0/24
IP: 2001:3e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ec:4b:52:58:ce:07:cc:74:a9:ab:a6:c8:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:19:a0:a8:c3:58:09:ee:c8:14:c5:a6:d4:
fc:09:0a:8a:69:13:13:ff:56:ca:ac:ad:72:d3:38:
c5:23:49:54:ed:9d:68:01:e6:65:99:e9:68:8e:63:
4a:c3:ba:5c:f1:a5:5a:f1:a7:92:1a:e7:70:5f:41:
bc:9f:b6:97:02:f1:bb:a9:46:a2:4d:eb:ce:74:25:
0d:39:a8:72:91:19:79:7d:c5:47:a7:87:98:36:6d:
eb:43:fd:bc:da:e5:73:f3:e6:71:6a:61:9d:38:f2:
b8:73:1c:a1:8f:07:ee:58:72:82:51:ae:2e:75:4d:
ff:50:f2:3b:c1:de:e4:c9:d5:cc:79:0d:fc:de:54:
eb:b5:15:38:57:ae:8f:43:91:c6:b8:dd:9a:8d:34:
1c:bf:5a:cb:06:42:56:7a:af:c4:64:ef:c0:45:6b:
ac:ce:67:b6:eb:87:0b:25:ee:11:54:a5:a6:ee:07:
76:86:00:60:19:10:00:bb:80:1f:a3:25:4a:b0:4f:
3b:ec:1c:3d:7c:35:9f:13:28:83:66:4f:cd:1a:98:
00:e8:68:7e:96:8a:39:b8:bb:f0:e5:d1:6e:7e:f4:
44:d0:eb:59:5f:b5:a6:c6:bc:5b:b2:b1:43:29:59:
cd:7b:c5:30:de:6c:04:75:65:72:70:99:21:8f:92:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.212.0/22
193.219.102.0/24
IPv6:
2001:3e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41644
Signature Algorithm: sha256WithRSAEncryption
3c:3c:7e:9f:9f:83:42:2d:b8:75:76:44:18:01:8e:18:c9:0d:
03:bc:7e:29:5a:e7:9f:82:3c:c8:2b:5f:70:8f:46:5a:0f:28:
0e:7b:94:32:60:9e:79:d2:98:26:2f:48:ea:85:dd:e6:e9:7f:
0e:a0:6f:d5:7b:c9:84:02:64:f1:d1:c1:99:af:99:2e:64:e8:
19:28:e5:4a:88:31:db:54:a0:f7:c5:7e:ec:38:48:1c:90:1d:
e4:61:40:58:fe:dc:a2:0e:78:14:e0:16:e0:49:21:1f:07:58:
fc:b0:08:0a:8f:dc:27:d0:1a:fb:b0:75:2e:1a:09:97:83:6b:
19:b5:fb:0e:74:3b:71:fe:de:47:67:19:52:fc:86:83:40:28:
70:9a:51:4f:11:3e:f6:df:b1:ff:b7:99:45:ee:ba:75:22:39:
f5:a9:e4:3b:0f:18:88:a7:53:4a:9c:e9:6d:d2:cb:91:f3:06:
5a:dc:ba:7e:bf:3c:18:ea:ed:78:fd:f9:f3:2b:61:c9:94:23:
ae:82:8b:76:95:c6:7c:66:fd:1b:f9:c1:68:d5:69:aa:bd:08:
3f:6a:21:2d:79:f3:a3:a4:29:a0:69:47:56:ff:26:a8:1a:9e:
db:fd:22:0e:69:eb:f4:e4:91:3b:c7:8b:18:9b:00:c6:a9:5c:
cc:9c:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:52 2025 by rpki-client