Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.cer (raw, json)
Hash identifier: E+8GeyQXd97QR21FIld4p4+XognOGmlgBb6BdH3uQ8U=
Subject key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3D9FE06C1E4728BA65DCB227D4D43797
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 15:41:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210789
IP: 212.6.58.0/24
IP: 2a10:6b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:9f:e0:6c:1e:47:28:ba:65:dc:b2:27:d4:d4:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 15:41:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:16:61:15:02:af:d8:72:63:45:bb:d8:1a:
77:bd:d8:be:79:17:ad:83:f9:d7:5a:d7:ff:7d:d3:
f7:8d:90:83:81:c6:a7:04:4e:eb:f9:f8:48:68:fd:
0a:61:db:aa:54:59:da:09:29:78:15:be:0c:89:4a:
b1:76:94:50:8c:c6:07:d5:e3:5c:58:5d:27:64:a5:
08:f8:eb:45:b6:de:db:cc:35:c9:7c:77:62:78:6f:
a7:d1:65:28:8c:7a:fc:d2:bf:35:8e:a5:6e:e1:b1:
12:01:9b:ef:07:e9:9e:0d:cc:ac:7e:32:34:9d:86:
df:b2:da:65:51:7a:15:e0:68:8c:75:b1:85:4a:db:
b4:8a:07:8d:67:b6:3b:c1:9b:e1:ff:22:a3:ee:87:
dd:6a:84:dd:cd:60:09:0f:c1:36:e6:46:3d:f1:47:
7c:18:2a:e3:d5:10:81:c8:af:78:c4:10:da:c7:89:
c0:df:a6:eb:b3:5c:58:c7:83:8b:34:51:61:bd:f4:
4e:80:04:f1:0c:1c:49:3a:88:1b:85:ea:89:91:18:
bd:d2:e3:9a:7e:31:57:f9:0b:86:96:66:06:f4:52:
19:f8:52:da:6e:70:b6:63:10:53:a7:6c:57:3c:ee:
62:66:f4:85:59:6a:f5:b9:8c:f6:99:a7:09:6d:75:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.58.0/24
IPv6:
2a10:6b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210789
Signature Algorithm: sha256WithRSAEncryption
93:5d:19:11:ce:05:76:2e:22:cc:4c:9e:52:d6:d7:27:fb:7b:
0f:25:18:95:ae:82:88:6e:82:bf:df:4a:3d:2d:69:f5:4e:a4:
05:04:9b:65:5e:cd:95:06:bc:1b:78:8c:66:71:f7:d4:80:72:
5e:19:80:84:1f:6a:34:c7:02:fc:2f:85:d1:eb:6c:10:be:f9:
ec:30:f1:05:e4:eb:0d:3e:90:0d:8b:7f:6a:24:31:ba:a2:32:
f2:38:dc:cd:c1:88:ef:ec:eb:0c:f8:d6:ed:58:56:14:ad:1d:
a1:80:aa:ab:ef:a9:38:29:0c:03:e9:01:10:18:e4:53:a7:02:
51:48:56:a3:3a:ed:b5:50:56:4f:ac:35:94:2c:29:66:6a:d8:
e8:5d:bc:a3:de:d7:f8:51:e3:ba:63:ab:a6:19:79:e4:e8:9e:
f3:75:37:8e:1e:34:af:92:e3:43:98:16:1f:c9:1f:53:a8:f4:
30:77:14:2a:20:30:0d:b6:ed:bb:cf:a4:a7:80:3e:0c:57:d7:
f9:95:dc:50:14:e0:50:31:79:c6:1c:7d:6e:95:e0:0c:0f:cd:
41:79:84:21:16:1b:8d:6b:82:14:8f:c3:4d:8b:a0:8c:20:d8:
85:02:a5:b9:c9:2e:57:35:9c:48:4a:c2:79:32:36:12:75:85:
e7:83:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:10:13 2024 by rpki-client on console-ams.rpki-client.org