Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
File: CZ05RkE90RFhtGx99q02Kpk41dQ.cer (raw, json)
Hash identifier: tC+7mVKeds0pSHUsSiQQ4UhWuuPfjyalrQDCj9EiAn4=
Subject key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190F053C53B59481F84B55ABC926A8165BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jul 2024 18:35:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208777
IP: 45.84.84.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f0:53:c5:3b:59:48:1f:84:b5:5a:bc:92:6a:81:65:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 26 18:35:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:a6:2b:b4:1e:3c:83:af:e4:90:7b:0a:da:
5b:f3:26:64:c1:24:f6:be:c2:32:84:d0:40:ed:56:
95:b6:d3:da:53:3d:60:f1:08:90:69:7a:68:7c:5d:
7b:73:d4:07:2e:fb:98:b6:00:f1:d0:12:99:29:98:
cb:26:fa:cc:85:0b:09:33:a0:b1:07:6d:b9:b8:31:
25:29:6c:b2:57:71:3c:84:8f:4d:01:a6:04:6f:fd:
ed:39:3a:8b:9c:c4:ca:ce:46:52:bd:86:17:26:a2:
1b:26:2e:cd:9a:16:c8:66:b8:d6:ef:2f:dd:fc:34:
b7:78:67:4b:f9:8d:ea:ed:9c:55:c3:57:05:d7:46:
9e:7d:67:bd:0e:8b:09:ed:15:69:cf:44:3b:de:b9:
d4:a5:87:d5:28:5b:f8:23:45:13:ba:0f:e9:30:32:
74:5a:6a:ec:12:89:82:12:17:dc:48:28:6e:2c:d3:
90:3b:f5:6d:e6:b2:6e:26:62:bc:98:08:bb:10:a1:
b6:72:18:58:41:af:be:52:33:e2:a9:98:9c:00:63:
7b:0b:16:cf:58:35:81:6b:3f:9a:a0:b0:ce:ae:55:
da:76:94:1f:7f:b2:6a:a3:48:cc:16:9a:b3:69:6c:
60:1b:09:96:31:ca:15:34:c0:f4:e4:9d:29:70:f6:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.84.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208777
Signature Algorithm: sha256WithRSAEncryption
22:33:49:9e:7d:e7:02:69:8e:a1:58:51:5e:b4:1d:5f:79:5b:
cd:a9:17:fb:19:a6:16:7e:19:1a:09:2f:04:ac:eb:f1:3a:02:
f7:3d:5a:53:ef:2f:d4:2d:52:0b:7d:a4:1a:c9:9c:cd:77:4f:
c2:93:02:00:cf:31:f4:25:b7:cf:0c:04:37:f4:8b:69:5b:86:
b6:2d:48:91:76:ce:67:fd:0c:b2:de:51:84:e4:7d:73:0b:2d:
53:e4:8b:dc:c6:91:bc:95:f1:6c:aa:01:04:97:b0:16:e1:23:
7a:6e:0c:45:53:a2:6c:25:6e:5b:f4:62:23:47:bf:21:51:69:
2f:cd:5e:aa:60:7e:c1:ad:d7:39:d0:bb:5b:cf:ab:cf:b9:e5:
57:be:65:8d:cb:07:d0:b1:f1:c9:3e:72:23:bf:59:1a:a2:1f:
1d:86:fe:00:a3:ef:0b:fe:4d:1e:1a:a9:11:1b:5b:77:0d:32:
f9:1d:8e:99:a2:1c:08:48:33:03:a7:6e:cc:d9:b8:8e:9a:bc:
30:5f:83:75:80:5d:22:04:71:d2:7a:32:8c:c3:9d:f6:0b:34:
a6:e1:f1:1f:10:61:d1:46:e4:46:91:d7:ef:3b:db:3e:5a:dc:
5f:3c:48:6e:f7:ad:dd:8f:6d:62:1c:94:94:92:e4:63:bf:74:
5f:8d:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:41 2024 by rpki-client on console-ams.rpki-client.org