Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer (raw, json)
Hash identifier: I6H+cdUlqHoFKQCM7fIrYc2ytFb8aQQv3x5BzdAIS/Q=
Subject key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8927AE7F56D4D13C27C14906E5E21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20972
IP: 185.100.12.0/22
IP: 195.32.0.0/17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:92:7a:e7:f5:6d:4d:13:c2:7c:14:90:6e:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:2d:03:23:5c:7a:fa:b9:da:1d:da:a5:a8:
0f:9b:67:77:7c:b6:ec:62:94:d7:e3:44:d6:7b:ce:
5b:96:64:d4:81:69:eb:a7:4b:ad:9f:53:d2:a8:2b:
0c:f1:12:23:80:4f:57:a7:d5:4c:0c:d2:df:83:dc:
5c:19:01:29:2b:d5:98:5b:2a:24:27:d0:13:bb:14:
b2:f0:20:5f:c1:a5:18:b5:d3:d7:a4:ee:4f:2c:1a:
7c:62:24:da:8f:a9:33:d8:dd:6c:08:d7:a0:ca:e4:
50:64:7a:39:41:c8:98:31:cc:a6:71:dd:c8:b9:77:
2a:75:4e:4c:25:ca:43:b4:0c:f2:c9:4f:7c:7d:2b:
6d:3c:8b:a1:95:f3:1e:23:27:c6:77:b7:39:ae:5c:
28:87:55:ae:06:b0:20:e4:e9:2c:16:d0:ed:c8:0c:
e3:62:cf:5c:ef:2b:aa:98:73:ac:8d:2a:ee:0e:8b:
57:c7:0d:76:25:46:3a:6b:09:64:c9:64:09:20:9b:
ca:3d:95:d4:72:a3:53:13:5b:e0:81:ea:82:51:ec:
2c:71:d5:1d:3a:a5:00:d6:fe:ea:15:a5:c3:56:5a:
49:43:ab:d2:69:57:5d:00:d0:ab:11:3c:e3:3b:f2:
b9:a7:6d:2b:d3:0a:05:39:a6:bb:59:ff:93:2d:5d:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.12.0/22
195.32.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20972
Signature Algorithm: sha256WithRSAEncryption
ab:68:93:50:66:92:2d:a4:56:7e:2a:78:c0:1b:26:d9:26:0e:
20:19:4d:e0:fe:6f:9b:c4:ab:df:f0:d4:43:6b:45:3c:9b:ea:
53:84:51:81:ce:33:36:f3:12:57:0d:2c:92:a4:e4:31:10:5f:
1d:93:0b:a3:31:7b:56:a8:f0:0c:d1:11:be:c9:3c:01:37:52:
79:4d:75:57:85:4d:79:d6:f0:c2:88:27:e2:c2:0d:c4:5f:13:
0b:b8:69:0d:34:b3:43:a9:46:c9:68:5b:36:18:5c:1b:9f:6b:
d4:a5:7f:2d:1e:57:43:be:6d:b7:9b:87:bf:dc:c6:87:41:40:
41:60:bd:50:b4:c3:9a:38:e6:8f:f5:4a:93:c2:5d:1a:68:28:
37:48:6e:dc:ec:94:55:19:42:81:6e:9a:aa:ae:cf:dc:26:c8:
52:01:58:1e:e8:ad:19:fd:b0:20:c9:af:35:53:03:8e:a9:0b:
b0:8d:55:fe:8d:23:88:8f:9c:05:84:e9:a1:9d:f5:20:02:1f:
d1:c6:c6:45:b5:09:9b:3a:b8:ba:1b:34:84:2a:71:13:f2:2d:
a3:b0:f5:25:b9:42:2a:18:4a:6a:80:c7:f3:4e:b0:d9:ef:dc:
f7:31:77:38:0d:d3:7b:c2:3c:ea:82:15:1a:a4:ac:fa:6e:e9:
4c:70:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:58:36 2024 by rpki-client on console-ams.rpki-client.org