Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer (raw, json)
Hash identifier: RhD6PRaCZ9u2k7NnNRB+vY6i8EdVrXb42DxMUxSNU/8=
Subject key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252074B322F288AE4F10DE613C89CC05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198248
IP: 176.102.72.0/21
IP: 2001:67c:25c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:74:b3:22:f2:88:ae:4f:10:de:61:3c:89:cc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:4d:36:0f:0b:81:d2:75:01:3c:9a:01:ce:
70:c6:65:0a:40:6d:a3:a4:26:ed:c8:ac:c2:d1:2c:
8c:33:69:83:3a:4a:8a:db:1a:21:50:29:a3:8d:53:
33:43:f1:e7:f2:b5:ac:37:91:ef:e2:d1:62:16:14:
87:be:37:89:e9:9a:3c:f7:21:51:53:6b:7f:0a:9c:
b5:12:3f:29:b4:2a:25:08:da:81:1a:cf:87:00:81:
30:cb:c8:91:f7:64:17:17:e5:1a:8d:8c:be:4c:27:
0d:1f:7d:30:81:75:f6:52:e3:82:fc:98:5a:28:93:
9b:3f:c6:15:9a:77:4d:8a:ad:bb:f0:ba:5b:49:0a:
24:49:a8:b0:da:b3:53:de:d1:10:ee:1c:26:cb:e6:
8a:98:7d:30:07:a7:ed:85:23:8f:db:fb:2c:53:fc:
03:84:6a:98:63:91:62:1a:78:27:ee:da:0b:93:f2:
e8:32:d4:bc:e8:b2:26:68:9f:94:66:71:d0:82:6d:
f2:af:47:d1:62:14:04:f7:72:dc:21:96:af:28:65:
c6:1b:d8:b2:e3:67:c1:21:0a:58:6f:53:e9:66:13:
88:a4:a3:09:37:93:7c:f3:15:8c:72:17:e7:c4:6d:
9b:17:aa:5e:9b:ef:3d:d6:c0:01:cb:3e:27:b3:3d:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.72.0/21
IPv6:
2001:67c:25c0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198248
Signature Algorithm: sha256WithRSAEncryption
7c:23:00:43:1b:fe:6a:c4:a8:c1:bc:2c:2f:4d:9b:d1:7d:e0:
8c:19:d3:f0:04:05:08:5d:15:97:3e:64:b6:22:95:c9:b9:ec:
db:dd:56:56:c2:06:dd:8f:6a:d3:22:54:d3:6b:5e:fa:7b:8b:
61:f6:7b:92:2e:fc:56:8f:75:06:66:9d:6a:47:ca:dd:a7:a7:
e3:1e:72:fb:52:93:1f:3c:2b:c5:24:1b:81:e7:c7:04:50:21:
11:e4:63:53:70:ee:ee:db:51:80:c1:95:a0:a4:8f:65:a8:1e:
b2:26:38:92:8d:db:24:f3:1d:93:92:0f:39:d9:94:61:76:bb:
cc:52:4c:78:f9:5a:8c:56:dc:29:69:36:29:70:0b:d4:25:8c:
50:d6:4d:f3:f6:45:1d:31:2f:01:39:4b:3f:68:95:24:19:e6:
81:00:65:07:55:d7:94:ce:53:75:7c:f4:01:49:05:78:7b:3e:
94:19:f9:ad:94:a7:bb:85:06:ba:98:55:ae:13:28:b2:66:a9:
97:62:a1:9d:5b:b9:75:18:85:64:0c:e7:e7:3d:1c:79:df:01:
f8:b5:d9:01:d7:ba:c0:cd:d9:e4:ad:e2:4a:ff:ad:7f:15:46:
0c:ab:8f:c4:04:ef:66:75:83:18:e9:13:61:8c:ad:ac:a7:be:
d2:d0:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:51 2025 by rpki-client