Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
File: E_ZReahVuwpt3lZiFisrW6l0hxA.cer (raw, json)
Hash identifier: Z3JdW0nD41WQDr45Go3pseZ+e2ImKU9DNS8XK7N+RmI=
Subject key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D3290775C7D499C8DF78009994381
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210063
IP: 212.111.77.0 -- 212.111.78.255
IP: 212.111.83.0/24
IP: 212.111.91.0/24
IP: 2a0e:3440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:32:90:77:5c:7d:49:9c:8d:f7:80:09:99:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:d5:f0:10:47:30:c1:17:c2:31:c4:2e:60:
01:a6:85:3f:4f:55:20:a6:eb:66:40:bb:52:a7:82:
07:36:9e:09:55:e0:bc:a1:ba:e8:9b:ce:9b:c7:ff:
41:64:08:bb:e7:8a:83:5e:30:1d:38:80:f3:f1:93:
31:56:c0:75:f6:41:dc:77:1e:5f:83:db:2a:c5:45:
ee:9b:98:94:ac:89:86:47:da:78:06:cf:75:4e:e5:
f1:f2:b8:33:51:6c:a3:15:33:1d:3d:b1:df:26:88:
1b:b7:86:fb:fc:a8:6f:a4:18:14:4e:e5:f4:a8:ee:
c5:15:3e:9a:d5:4d:cf:ed:46:38:f8:59:51:5c:a7:
38:81:d2:ea:3f:75:52:68:77:44:29:a1:20:87:55:
05:f8:09:99:76:f3:c0:97:6e:f8:a6:cb:28:d0:5c:
6b:8b:06:74:f7:70:39:86:e8:fe:d1:15:b0:d5:d0:
34:0b:01:7e:7f:a7:41:6f:15:ff:8a:10:ee:e4:dc:
f5:eb:0b:d0:68:78:15:be:68:04:eb:13:fc:db:fa:
d8:fc:58:3b:76:84:7f:89:fd:6d:14:e5:70:95:0b:
07:67:cc:53:81:2a:32:0b:5f:5e:ce:ef:4c:db:df:
b6:de:2b:8a:c4:56:2a:cc:35:46:4d:c8:02:59:84:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.77.0-212.111.78.255
212.111.83.0/24
212.111.91.0/24
IPv6:
2a0e:3440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210063
Signature Algorithm: sha256WithRSAEncryption
b0:9b:48:c7:dd:8e:6d:1c:1e:21:e0:76:ac:45:e0:bf:c9:d8:
42:43:7b:66:20:92:4b:73:be:b5:74:66:b9:bc:fa:de:a0:69:
65:e9:4d:dc:73:b7:df:f1:b8:71:87:5c:f2:dc:49:fa:59:54:
e5:12:ac:da:86:5e:83:71:d2:ff:f2:6c:4b:23:24:27:5a:cf:
ef:54:a6:75:a8:68:dd:4b:c1:1c:e4:b5:d8:93:5e:55:b3:1e:
90:9d:33:ca:22:81:3c:58:ea:64:9a:72:8a:43:ba:d6:05:b0:
c1:2f:2c:50:67:97:01:99:79:a9:ec:0b:24:5d:6a:b6:7e:9b:
a6:d2:d5:34:1e:ed:ac:e8:b5:c4:a3:54:ca:85:25:76:c8:68:
02:30:fb:4e:76:a2:be:30:2c:8d:b6:81:ba:b7:7e:2e:08:4c:
c0:67:e8:ec:66:c8:72:25:b9:3a:91:3e:ae:5a:78:87:4c:c2:
dd:e4:e5:95:27:8b:4c:f4:f9:83:1e:58:c6:fe:a1:26:3d:2c:
e9:74:dc:4d:45:9b:35:c6:77:82:41:f8:1e:27:e9:9d:72:78:
0b:28:bc:dd:e5:ec:25:85:16:40:0d:76:31:f8:09:68:7f:c2:
03:81:d1:a4:7c:31:e0:fb:f4:36:e6:57:3f:09:34:79:93:b9:
65:b8:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:04:11 2024 by rpki-client on console-ams.rpki-client.org