Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
File: Fzn5ZM1In80lALN2gdWEedVTyKs.cer (raw, json)
Hash identifier: Icrsj/Pb8SiRUhvSEaVy7Fia8dvkm7wldKJ1jLZkjRg=
Subject key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64ABB395105C2F2AC68465A0408D7D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51343
IP: 178.214.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:bb:39:51:05:c2:f2:ac:68:46:5a:04:08:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:a1:07:64:95:db:6e:89:1a:10:95:ef:2e:
ef:15:1b:4d:4f:60:b7:98:5f:89:c9:fc:a3:5d:21:
4e:6d:0a:78:ff:89:9b:26:65:7d:16:4b:6f:e0:9c:
3f:1a:ae:a4:11:21:55:7b:82:6a:9b:06:c3:8b:17:
c3:48:77:c6:41:00:8a:f3:67:46:73:51:ec:3e:04:
c6:ff:b7:14:fa:49:6b:b5:64:5e:3e:e3:80:f0:3d:
75:43:58:60:ba:6f:a6:09:53:f6:7b:21:09:6e:1d:
28:1e:43:e9:65:5d:bf:43:ad:8d:8d:61:08:e9:34:
43:ab:41:32:60:3f:cd:e3:4d:c4:91:54:d1:48:4d:
ab:77:70:b8:10:54:45:bc:87:d5:ea:85:56:10:67:
8b:12:7e:a8:e7:13:2b:06:1a:8f:92:01:fa:30:ef:
85:fa:4e:17:c6:62:3b:9e:80:e0:62:0f:3c:ad:83:
4c:8e:f8:8c:e3:81:ed:25:2c:43:c5:c5:29:1b:68:
02:f5:c8:41:6f:e4:ac:2f:4c:9f:5f:c9:b5:59:f2:
6d:a1:a6:f7:00:96:2a:4e:9e:17:aa:e9:99:8c:86:
ec:db:f0:3b:dc:b3:78:1c:eb:e1:8e:10:9a:1a:33:
fd:7e:dc:23:0d:45:41:fa:11:8e:c9:8f:e1:ac:dc:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.32.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51343
Signature Algorithm: sha256WithRSAEncryption
39:ae:e7:14:a7:40:d1:8f:53:02:ea:bb:cc:d4:a0:cd:0a:c8:
b3:58:83:e0:d4:9a:e3:d4:62:12:80:0a:c6:b4:93:ea:a3:67:
cb:8c:36:67:95:c8:c6:2e:87:47:24:2c:fc:4a:e5:05:16:96:
f2:b6:24:33:74:56:3e:b3:19:8f:b0:84:9a:c0:e1:08:c0:e2:
53:cd:55:54:06:4f:90:e7:45:77:a1:1f:e1:e5:f4:f5:51:df:
75:49:81:86:82:6a:b0:7d:42:95:9b:ec:31:8c:b9:69:ed:a5:
5d:05:c6:3a:1e:d1:2a:b8:90:3a:10:98:d9:de:d9:b9:ad:38:
da:09:58:2e:3f:ed:01:43:ea:d0:b9:0d:b5:fc:29:fd:72:4c:
93:52:b4:29:58:19:20:f3:8f:40:db:cc:1c:3e:cd:63:20:33:
61:cf:e2:03:14:27:0d:8e:45:72:20:f6:ad:cc:be:b3:17:1d:
8f:c0:07:fa:12:d4:46:78:15:66:02:6f:eb:3f:af:df:04:df:
6b:a1:82:c4:f8:f4:2a:5c:b4:bd:5b:d8:5b:5a:90:9f:a3:55:
4a:a8:fb:bc:b5:e8:a0:52:51:e8:fd:aa:6f:e6:b7:79:98:06:
3c:d1:f4:fd:75:d8:82:c2:c6:0e:55:1e:2c:e9:ec:54:0e:00:
21:02:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:55:38 2024 by rpki-client on console-ams.rpki-client.org