Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.cer (raw, json)
Hash identifier: jKZkIQqeNDtIT0ItP6WqvkDlXx6JMP6HrUg5AxjyyLA=
Subject key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01901B9CA14FBBFB071BD8F4230C092D8A30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 15 Jun 2024 11:16:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35760
IP: 87.101.16.0/20
IP: 91.196.12.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:9c:a1:4f:bb:fb:07:1b:d8:f4:23:0c:09:2d:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 15 11:16:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:dd:9b:fb:07:b6:19:9d:7f:9f:4a:a8:86:
82:b4:23:b8:52:5d:fc:78:6c:bc:c8:80:85:f5:b5:
c6:9a:b6:f3:ac:8b:91:97:60:d3:57:0c:06:f0:e9:
af:a7:4e:57:8f:6f:f0:9f:a6:a1:14:ec:b6:5d:72:
2d:3b:4d:12:f1:40:28:26:e0:01:55:55:67:fd:1f:
b4:5c:09:17:47:c2:1c:b3:53:32:5b:83:08:8a:91:
d5:9b:a0:bf:32:d3:b4:5a:73:f4:69:06:2b:fc:dc:
19:a5:ac:c4:6f:38:cf:7e:71:2c:0a:7d:02:de:31:
0e:59:10:56:d7:22:19:db:85:31:7c:6e:d5:0b:d8:
04:41:e4:80:b9:47:94:af:ff:41:e9:22:7f:9a:90:
6d:b2:3c:19:f4:7d:11:f3:78:f2:ae:2d:b0:99:ff:
6f:3f:f1:8b:ea:10:80:e5:cc:94:4b:b1:30:0a:28:
22:51:b0:31:55:51:f4:5e:8b:ea:37:1e:fe:22:58:
8f:55:e5:33:c3:77:5c:70:9b:42:24:5a:1d:4f:e7:
66:ec:40:14:62:b0:20:51:35:c3:d5:2e:86:21:c3:
ba:43:dc:31:14:47:92:4c:cf:57:f1:f2:93:0f:6b:
7f:99:a5:50:6d:be:1e:ce:72:ae:22:92:f0:bb:2f:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.16.0/20
91.196.12.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35760
Signature Algorithm: sha256WithRSAEncryption
a3:2c:8c:49:88:66:f0:da:b8:07:7c:1c:a6:80:12:cb:b2:a8:
81:c6:8d:c2:00:0a:6d:12:8d:6e:99:53:be:c0:6b:16:f9:91:
18:d2:86:8d:4d:8a:bf:d7:1c:9b:60:7d:21:02:11:97:80:ef:
7b:89:63:7d:10:ba:a9:47:04:c6:11:1b:67:e4:5a:22:03:be:
77:81:bf:f8:b6:f5:9d:03:90:45:ee:d4:78:af:d3:af:ac:06:
f3:7b:e8:7f:d6:dd:0f:18:f4:ae:7f:11:a6:d4:a4:10:43:1b:
7e:27:e9:26:8c:7c:91:27:68:99:21:dd:17:db:52:18:5f:95:
77:83:35:36:c8:88:06:40:d0:3c:a2:e9:25:15:5a:d4:68:bb:
51:36:73:98:54:0d:a5:8b:69:8d:76:f7:8f:48:f5:a8:39:de:
bc:ff:6b:14:9b:72:4f:b5:10:7a:aa:fb:df:ab:0f:21:60:8d:
9d:cb:b7:60:93:50:16:99:a1:1e:cc:53:04:08:31:6b:15:71:
ab:9c:59:74:27:1b:aa:e3:23:c4:ad:5d:6d:ce:b2:31:8b:4d:
21:0e:a4:eb:18:95:f6:bb:05:2e:44:c4:75:42:32:98:c3:73:
82:fe:fa:b9:7a:b0:34:4a:27:12:c9:cd:16:35:00:5e:a1:aa:
85:be:41:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:12 2024 by rpki-client on console-ams.rpki-client.org