Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.cer (raw, json)
Hash identifier: 2qGFmMUWShEo2MN2T4ljQAFYYIt31MYuVDL2TqviDSQ=
Subject key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424B3DD18C8B4F3D8AEDBFFBADE9C75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35567
IP: 87.250.96.0/19
IP: 91.191.0.0/18
IP: 164.40.224.0/21
IP: 185.16.12.0/22
IP: 213.196.112.0/20
IP: 2a02:17a8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b3:dd:18:c8:b4:f3:d8:ae:db:ff:ba:de:9c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:04:77:6d:17:0a:38:68:68:78:dd:f3:fb:
4a:58:b1:c8:e2:77:5b:b4:54:23:56:cf:6c:37:65:
25:04:1d:f7:b9:53:06:7d:ab:c1:41:42:07:36:57:
f2:7f:31:98:fe:4b:20:8a:6f:91:3a:3b:63:a5:88:
fd:e5:12:91:fd:4f:e8:d3:29:e6:c3:4c:fe:49:e6:
5b:fd:2a:57:0d:9f:0c:0f:d3:06:a1:8f:ec:d0:f5:
96:7c:f1:ec:a2:d4:9a:69:36:88:2e:e6:2f:c7:ab:
dd:10:fe:f1:57:c1:29:2a:03:8b:b7:e8:98:38:f9:
48:34:49:b9:52:e8:2a:b5:3a:43:fa:37:72:b8:d1:
c9:13:0f:f7:51:8f:64:c5:9c:db:82:8d:25:c9:3c:
03:ac:4e:5f:4b:ca:9c:46:98:d1:39:94:0d:29:e2:
e9:70:f0:f3:12:b8:22:c3:23:c8:62:eb:45:03:8e:
e7:3f:a0:2b:bc:62:8b:17:0d:c1:5f:40:4a:16:8c:
e9:3e:57:90:e8:6a:cf:78:6e:5a:f3:03:6f:8b:2e:
8d:dc:a3:2b:a9:bb:10:35:23:74:76:92:5d:ae:5c:
62:04:a1:d1:fb:13:b0:84:0d:07:9a:6b:ff:4c:0e:
0e:fb:81:dd:22:61:0b:ef:a8:93:ad:a4:c1:9f:89:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.250.96.0/19
91.191.0.0/18
164.40.224.0/21
185.16.12.0/22
213.196.112.0/20
IPv6:
2a02:17a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35567
Signature Algorithm: sha256WithRSAEncryption
59:b4:1e:cd:06:ef:69:aa:0e:70:14:8b:83:41:b2:a6:cf:2c:
b8:3b:5b:0b:b1:92:fb:db:de:1a:eb:a9:54:7a:7a:38:10:4b:
ce:60:46:2c:24:fe:ed:5a:92:96:fa:35:50:a1:18:41:f6:ce:
e2:55:48:0b:85:01:e7:29:c2:2c:95:f3:20:d4:59:1c:e4:0d:
29:e7:6a:86:9a:58:8b:bd:ff:67:4e:7a:30:a4:1c:7a:e3:26:
aa:7f:de:64:46:f6:55:f5:3c:bc:63:1f:3c:15:64:32:37:92:
44:7a:3c:41:71:bb:3c:a6:2a:df:c2:40:91:99:62:2a:37:65:
73:d6:1b:c4:c8:46:71:3c:00:4d:59:fa:cf:8f:f5:c1:46:89:
ba:99:46:9a:ca:6b:5f:e1:68:69:e8:0b:25:e8:88:30:ba:c1:
aa:fd:66:11:7d:67:e8:db:e3:f9:9a:f9:d1:80:95:f4:0d:72:
ae:6c:e3:8f:84:d5:e9:02:10:a2:52:56:ed:06:02:69:2d:ad:
af:f9:af:ec:ae:c6:1a:c6:5f:4f:b9:e4:ef:20:ac:23:5e:3e:
7a:c3:2e:ad:1c:80:db:58:90:d1:2b:3f:74:3e:50:0c:2c:9c:
dc:de:2f:de:59:08:0c:6d:19:5a:d1:09:29:46:8b:9c:d6:27:
f9:da:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:13:03 2024 by rpki-client on console-fra.rpki-client.org