Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer (raw, json)
Hash identifier: 5xz0n+arsVJt5yPEFnLjBi0lC7hM+05DlxZ2QFqiVMY=
Subject key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747DD2CB55E3F68E77CAADC7918A7BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 212.18.110.0/24
IP: 2a12:8400::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:dd:2c:b5:5e:3f:68:e7:7c:aa:dc:79:18:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=159366259f9bae7c37337b515fa5bee05f53abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:f6:0e:08:db:20:73:11:bd:76:30:42:bc:
56:f0:cb:df:be:77:aa:29:fe:54:2c:71:fd:be:0c:
c4:41:fe:15:de:b4:52:f3:c1:1a:71:bd:07:2a:b5:
d6:a9:d6:dd:a5:a4:a0:80:6c:ec:a4:1e:af:e8:54:
4f:18:64:35:1e:59:c9:13:f8:8e:e1:e5:9b:15:47:
99:24:e7:ab:5e:ed:7c:46:bb:87:58:7d:a8:41:f3:
23:e4:52:fa:6e:13:f0:72:8e:95:2e:bc:a7:c0:f7:
06:4f:71:fa:50:c3:9c:60:6b:31:dc:ee:eb:46:81:
22:02:78:c7:1d:9d:7f:01:ec:be:63:4b:af:55:30:
1c:95:c6:1c:ce:84:49:33:17:62:29:fc:8e:67:6b:
00:f9:26:bf:4e:1c:41:03:d3:ab:95:69:6b:ba:11:
21:80:8e:2f:e3:27:94:42:55:1c:61:b0:fc:f4:78:
dd:78:69:43:e2:03:0a:fd:fb:16:6e:89:24:15:bc:
db:87:c1:82:21:e0:bc:3c:1d:ab:19:4c:be:d5:ad:
65:9e:32:24:49:27:42:93:6e:ff:ce:21:54:69:50:
3c:cb:6b:0a:4a:fb:69:97:84:13:e9:94:e2:69:fb:
88:b0:0d:11:99:c9:74:88:67:e6:fc:bf:43:49:e5:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.110.0/24
IPv6:
2a12:8400::/32
Signature Algorithm: sha256WithRSAEncryption
36:4e:ec:63:e2:10:0b:61:94:1e:52:6c:2a:25:9e:75:aa:9d:
38:d8:2f:4d:64:03:e1:19:d6:8f:e0:10:e4:3e:3f:2c:62:f8:
3d:3a:07:31:1d:2f:12:2d:dd:3b:14:80:21:ee:59:19:0e:46:
24:34:ed:03:99:b0:8d:4b:a9:ac:08:67:22:0a:bf:39:80:80:
6e:8b:ea:40:e0:52:28:e3:1e:5d:4f:3f:b5:4f:22:4a:ee:84:
92:80:73:9b:f5:06:0a:a0:e8:c4:ee:02:1e:e6:c2:e1:76:2a:
07:96:ad:bb:e5:e1:91:d2:85:bd:61:f2:7e:0e:05:d1:37:2e:
52:f1:50:da:e0:bf:1d:06:ba:7a:26:e2:dc:81:e4:e0:f0:8d:
ae:17:fd:f2:bb:a3:ed:37:d2:a7:f2:16:fc:89:1c:a7:1e:e8:
77:5e:d4:98:45:ef:cc:2a:6b:f1:fc:ec:4a:ca:7a:ee:e7:20:
fa:94:7c:fc:ac:97:12:37:74:42:21:c3:73:72:7f:2f:6c:31:
02:f5:32:5b:cf:82:c6:2f:41:7d:5c:4c:76:c4:a3:50:8d:87:
20:a4:be:1c:07:94:df:f6:38:dd:da:b5:d0:b6:27:41:c2:45:
f7:59:f7:a5:27:7f:96:2d:75:82:d5:07:51:38:fe:48:03:9b:
fd:9e:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:01:12 2025 by rpki-client