Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer (raw, json)
Hash identifier: Kwby6IZgPtTxdgm7Z3k9LvmO31UGYrWDKwkQjqKh4WM=
Subject key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DFA5324988B13325F6B0415070515BE12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Mar 2024 14:02:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.53.128.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:53:24:98:8b:13:32:5f:6b:04:15:07:05:15:be:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 1 14:02:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:6f:72:05:44:37:60:9e:41:1d:af:cc:e4:
54:c1:08:41:26:a2:14:4a:cc:a4:13:b5:ab:db:77:
9e:2f:e8:95:c0:67:1e:ae:8f:36:69:62:b2:9a:5b:
b9:b2:64:47:a6:a9:ef:8d:25:d7:8b:8d:cb:b3:f8:
58:59:92:c3:79:51:4e:2e:ac:b6:c3:da:81:96:c7:
72:af:e7:ba:79:e0:c2:48:56:77:b2:e7:3f:c3:10:
99:3f:9c:25:e4:51:95:47:3a:57:24:9c:44:e8:7a:
33:4b:9a:fe:5a:44:87:6e:c5:d8:e2:89:b3:ea:67:
bf:24:e8:7b:75:b5:c9:91:f4:8c:26:08:f5:63:4a:
6f:cf:5e:b6:fc:c3:b1:2f:57:d1:84:b9:bb:79:39:
b1:1d:a3:19:20:03:ed:65:2c:71:75:ac:6d:ce:05:
ae:a3:d7:2b:bc:50:91:a6:fa:05:ad:ee:72:ed:4c:
90:49:4d:d6:b9:dd:78:16:b4:4d:e0:e7:1c:d3:80:
53:c3:b0:1e:d5:80:6b:9c:3b:36:a0:c7:0e:98:a8:
ea:ba:0a:06:d1:7c:b2:b6:42:fa:a2:a8:31:02:83:
84:d6:9b:4e:6e:80:23:29:8b:5f:a7:39:10:c3:38:
62:46:52:22:3f:1f:ca:e3:96:c5:12:57:b8:be:b6:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.128.0/19
Signature Algorithm: sha256WithRSAEncryption
32:04:54:ce:71:cb:42:20:7f:bd:e8:bf:ba:99:16:1a:47:6f:
16:4c:fd:81:51:2b:e4:9a:85:98:7c:fd:af:ad:6d:3c:73:da:
ce:13:1c:94:cf:1f:a1:7c:3e:7f:05:51:3a:95:e5:5f:4c:e4:
06:07:41:41:7b:83:31:bb:17:9d:b8:3c:47:ff:f8:39:34:fa:
c1:e8:96:2f:7b:77:3d:52:7b:c4:59:8b:27:11:41:8b:9f:c7:
38:9b:c4:03:b2:c6:9c:4c:e4:41:f3:0e:a6:8e:83:9d:db:f9:
e9:2a:3f:64:39:3f:bb:e6:6d:bf:e3:d9:da:f2:9f:f1:2e:8a:
cd:f4:fc:6f:21:52:8b:e4:4d:a8:b6:56:c0:30:dc:d2:e8:9f:
39:81:fc:02:9f:3b:40:42:46:10:4b:f8:84:5d:2b:9c:94:ed:
ce:e0:62:a3:c4:ad:f9:be:16:53:d8:2a:59:17:9c:11:18:e9:
6d:24:11:4e:e1:03:c8:1d:83:c8:23:7a:ec:a6:48:92:32:ce:
de:bf:00:1d:7a:fe:e7:b2:73:82:0d:78:73:3e:e8:5d:fb:71:
98:51:e4:95:2b:9a:18:e0:eb:4c:36:4d:31:50:a8:94:ad:7d:
e5:21:94:97:c4:f0:ee:0e:85:6b:5d:b3:ad:70:99:42:64:a8:
bc:43:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:28:44 2024 by rpki-client on console-ams.rpki-client.org