Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer (raw, json)
Hash identifier: dLAtqdQyj9I8mA0QsnG5XY3I5tjqlcJVcy7OibQefLY=
Subject key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72732E5A4A1C82A99D67C6CCAE7C364
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202921
IP: 147.161.24.0/22
IP: 185.148.212.0/22
IP: 212.69.128.0/22
IP: 2a0d:f780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:e5:a4:a1:c8:2a:99:d6:7c:6c:ca:e7:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:b5:bd:1f:69:f3:2e:13:fb:08:0b:fe:16:
8b:bb:51:91:8f:07:7e:82:d0:5d:fe:30:ab:30:15:
57:6d:5b:93:d9:4d:9d:9c:a1:2b:7b:02:5b:6d:46:
11:13:ab:f7:ec:e9:ff:8e:d9:02:5e:32:b6:99:13:
60:9f:00:ed:0d:2a:13:26:ba:bf:8c:85:e6:bc:54:
f8:47:2c:eb:47:44:7a:91:39:f2:fc:db:b0:c0:36:
db:e7:1b:78:c5:f7:57:7d:26:80:f0:e1:fe:2c:ec:
ca:07:57:7e:59:79:a4:dc:31:ff:ec:5e:73:42:fb:
ca:50:f6:3d:a4:ea:1d:a9:e9:da:21:d2:33:e1:ef:
b5:72:61:02:40:b0:53:ec:92:6a:57:3a:c3:0b:2b:
9a:66:59:cd:7f:5f:29:bd:69:91:a7:af:07:8b:e4:
7a:8f:e3:af:f5:63:56:aa:b1:07:75:f4:92:95:44:
13:cd:b6:f4:d3:6a:8d:fd:cc:a7:e2:25:91:4f:70:
5b:62:40:55:02:bc:b7:63:ae:4f:9d:b0:77:01:b2:
35:c6:95:d6:b5:f6:88:cb:de:be:0b:9c:5b:30:13:
c4:77:bc:9f:73:5d:23:30:ad:27:eb:3f:8a:fd:34:
be:de:b5:05:24:f6:a8:b6:ca:da:28:d3:b7:75:eb:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.24.0/22
185.148.212.0/22
212.69.128.0/22
IPv6:
2a0d:f780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202921
Signature Algorithm: sha256WithRSAEncryption
1b:6a:f9:1d:f8:78:18:01:30:fe:94:97:52:1a:cd:ba:f7:34:
bf:e3:03:57:e4:12:20:54:32:97:cf:b4:c4:41:92:bc:87:ba:
7b:2c:ee:ca:15:ea:bb:9a:24:26:fc:ef:03:03:70:e6:ac:5d:
26:4e:3b:08:f4:5a:fb:29:96:b6:c8:f1:78:a9:5c:8d:ac:69:
f3:85:17:61:a2:64:f5:0c:36:84:fc:28:98:3b:f4:9e:ea:86:
17:40:69:4a:11:65:b0:86:13:20:43:92:2f:c1:1c:c3:e7:98:
1e:72:8c:d0:f7:36:7e:a7:a5:d2:1d:30:fc:40:bf:36:c8:6a:
3d:68:af:1c:e9:1c:ad:5a:19:8b:a1:3d:37:17:69:54:4a:6f:
b4:72:c5:55:3f:77:2d:bb:e2:cc:4c:f5:1a:57:32:9f:c6:c7:
ba:9a:c2:84:84:5d:c5:c8:3f:dc:a9:f6:79:09:d7:a4:60:d4:
a9:8b:e2:ea:e2:33:ed:3f:8f:91:16:0b:f5:34:a9:6e:bd:98:
ee:94:fa:01:39:e4:ef:ca:da:e5:19:de:b2:db:17:86:c8:3c:
3b:98:36:e7:9f:2d:03:7c:3c:66:28:c3:1a:54:07:9a:c1:75:
81:a0:07:a0:8d:ef:ba:cb:7a:63:6b:b4:63:89:a6:88:03:56:
52:02:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:53:13 2024 by rpki-client on console-ams.rpki-client.org