Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
File: gmkF0cEWiypmBwmtsg80xuTAPX8.cer (raw, json)
Hash identifier: xEDYyq3BfSbFHUyb4bEMjiBhZwymByxkS/qkTV3WA44=
Subject key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB35C60FACC1C663B4CE8DDF6685CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.98.108.0/22
IP: 2a06:b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:35:c6:0f:ac:c1:c6:63:b4:ce:8d:df:66:85:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:9e:cc:01:c9:ed:0a:a3:85:48:24:62:d1:
a1:b7:7d:c7:d7:13:6e:b1:48:3f:71:ba:f0:c4:9c:
71:3c:c6:78:c4:71:9a:c7:4a:b3:8c:3b:ea:3d:01:
af:5e:a9:cd:f8:9d:be:66:47:32:1c:d9:0e:e9:3d:
17:e8:74:c4:47:6b:38:85:ef:16:a5:c7:c6:87:bd:
09:cc:ed:13:cc:0d:4b:ee:31:a6:ea:c6:60:81:1e:
0a:50:e2:bd:f7:e8:a2:f6:c5:37:fd:d0:9d:8d:85:
3d:48:c4:b7:7c:de:d5:cc:8b:5a:87:9c:0e:3b:48:
de:92:41:58:46:5c:aa:2f:07:b8:dd:05:7c:ac:c6:
dd:21:99:3b:6d:fc:1d:68:8d:11:21:77:71:33:f5:
c8:69:c4:d5:be:94:d3:89:ea:61:74:58:52:59:cf:
e5:71:d3:fc:cc:0a:b2:d7:12:02:13:8d:bc:96:84:
98:96:93:ca:5e:8f:71:a9:65:31:4b:ea:58:6c:f1:
08:fd:d7:1e:9a:9b:ec:c5:49:c4:c9:4f:8b:cb:06:
2c:86:c9:ea:9b:d9:01:03:b2:df:2c:70:31:91:c0:
97:ad:9e:bb:4e:47:56:5e:ac:2e:92:02:ac:ff:31:
8d:01:ff:ed:e4:9d:a2:a2:03:a3:14:d9:6a:1b:44:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.108.0/22
IPv6:
2a06:b80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:f9:7a:4a:72:34:13:dd:7a:53:aa:61:85:82:c6:fa:33:02:
6f:5b:73:8a:2c:ad:12:07:41:4f:9e:ca:c2:88:7e:92:19:d1:
11:59:1b:43:b7:fc:3d:0b:79:9d:77:bf:0f:61:6a:ea:c0:8d:
cf:bb:40:22:85:52:fc:dc:38:13:45:38:23:b0:24:8d:a6:6b:
6f:e9:5e:c5:37:b0:c0:8f:de:56:c4:23:86:8e:48:17:38:40:
be:83:24:0f:8b:3c:44:bb:10:3b:4b:7a:a7:74:71:85:bc:5c:
aa:25:70:a6:df:f4:55:cc:df:2c:9e:bb:74:ae:99:04:41:2b:
49:42:1b:62:aa:05:77:8d:70:62:93:4a:bb:b0:ea:26:e0:6f:
32:4d:c3:bf:fa:9a:1c:d1:06:b3:ab:f6:58:74:92:26:a7:50:
7d:e9:31:15:b8:2e:a4:89:c0:c8:40:f5:56:4e:8c:82:80:48:
a9:0c:34:c0:96:ff:44:e3:91:c4:b4:60:53:e6:cc:ab:00:6b:
04:b6:3d:0e:e2:6e:de:e2:41:be:f9:b2:f7:15:79:1d:74:fa:
df:02:db:ef:b6:1f:e0:df:53:e5:9c:0c:64:29:28:7c:89:7b:
f1:b9:be:37:64:f2:56:87:e4:67:87:3b:e9:33:df:56:f1:b4:
a9:f1:dc:4d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzC2zXGD6zBxmO0zo3fZoXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjY5MDVkMWMxMTY4YjJhNjYwNzA5YWRiMjBmMzRjNmU0YzAzZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxmezAHJ7QqjhUgkYtGht33H1xNu
sUg/cbrwxJxxPMZ4xHGax0qzjDvqPQGvXqnN+J2+ZkcyHNkO6T0X6HTER2s4he8W
pcfGh70JzO0TzA1L7jGm6sZggR4KUOK99+ii9sU3/dCdjYU9SMS3fN7VzItah5wO
O0jekkFYRlyqLwe43QV8rMbdIZk7bfwdaI0RIXdxM/XIacTVvpTTiephdFhSWc/l
cdP8zAqy1xICE428loSYlpPKXo9xqWUxS+pYbPEI/dcempvsxUnEyU+LywYshsnq
m9kBA7LfLHAxkcCXrZ67TkdWXqwukgKs/zGNAf/t5J2iogOjFNlqG0QjbQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIJpBdHBFosqZgcJrbIPNMbkwD1/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2ZjMjgy
Yy1jZDdjLTQzNWEtYWFiNC1iMjVlOWRjYjQ2NmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvZmMyODJj
LWNkN2MtNDM1YS1hYWI0LWIyNWU5ZGNiNDY2ZS8xL2dta0YwY0VXaXlwbUJ3bXRz
ZzgweHVUQVBYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWJsMA0EAgACMAcDBQMqBguAMA0GCSqGSIb3
DQEBCwUAA4IBAQCa+XpKcjQT3XpTqmGFgsb6MwJvW3OKLK0SB0FPnsrCiH6SGdER
WRtDt/w9C3mdd78PYWrqwI3Pu0AihVL83DgTRTgjsCSNpmtv6V7FN7DAj95WxCOG
jkgXOEC+gyQPizxEuxA7S3qndHGFvFyqJXCm3/RVzN8snrt0rpkEQStJQhtiqgV3
jXBik0q7sOom4G8yTcO/+poc0Qazq/ZYdJImp1B96TEVuC6kicDIQPVWToyCgEip
DDTAlv9E45HEtGBT5syrAGsEtj0O4m7e4kG++bL3FXkddPrfAtvvth/g31PlnAxk
KSh8iXvxub43ZPJWh+RnhzvpM99W8bSp8dxN
-----END CERTIFICATE-----
Generated at Fri May 3 02:09:33 2024 by rpki-client on console-ams.rpki-client.org