Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.cer (raw, json)
Hash identifier: 6zCQAwly1+tEc+e4XJr3x7lN6gLGFklU7jJqDjnx18Y=
Subject key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF2B9054A13B9D152C3C77CAAC372
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57763
IP: 37.75.136.0/21
IP: 91.224.66.0/23
IP: 185.63.0.0/22
IP: 2001:67c:2074::/48
IP: 2a01:5740::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f2:b9:05:4a:13:b9:d1:52:c3:c7:7c:aa:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:46:fd:be:76:8e:2d:4c:f4:a8:b7:3d:4e:
91:cb:e9:0d:1e:79:30:d4:e3:0c:44:ca:db:38:cc:
08:1a:2c:53:39:61:e2:93:ed:75:f3:b7:95:cf:48:
27:ea:0d:e8:3a:22:8c:04:80:2d:b4:d6:4b:78:23:
db:a0:13:f3:12:16:ab:08:b7:40:2b:61:77:d1:77:
45:c6:b2:4b:b5:13:af:84:04:4e:02:4b:aa:3e:9f:
e8:a0:79:b8:db:7a:e5:0f:12:f8:bc:2e:48:14:62:
00:28:fa:34:2e:31:6a:40:63:d1:a3:58:1e:8b:77:
2d:e7:7d:3b:83:12:64:b7:64:15:b1:7d:63:48:35:
c8:db:e1:22:85:e0:72:a0:4e:16:ae:c6:fd:20:31:
56:6f:41:00:ce:55:9a:f4:a8:89:7c:ca:ac:1f:b1:
24:5e:5e:00:ba:e7:65:91:93:d9:6c:98:7c:a6:d4:
7d:0f:9b:ac:dc:76:55:d9:f0:19:6c:56:94:e7:05:
be:45:4e:f0:a5:2a:5e:72:cc:72:41:b4:9a:9c:00:
de:8b:cc:dd:84:e1:f7:8f:53:b0:c2:8e:27:ff:d5:
b9:c5:ee:e5:2b:95:bb:14:ec:50:fe:d9:4f:2b:b8:
c8:9f:d3:66:d6:ee:df:72:9e:ed:62:6b:d2:f8:10:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.136.0/21
91.224.66.0/23
185.63.0.0/22
IPv6:
2001:67c:2074::/48
2a01:5740::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57763
Signature Algorithm: sha256WithRSAEncryption
6a:7b:aa:8f:71:b5:6d:9a:2c:88:f9:92:16:6b:4e:3a:73:7b:
54:be:8a:67:1a:c4:0a:25:70:c7:a2:d3:78:f1:7c:df:ae:c5:
55:9c:c5:04:10:19:a7:ba:75:9a:00:8a:92:47:c8:86:8c:a8:
64:68:ae:95:a9:52:e2:ce:4e:c2:aa:18:e1:f3:9a:e0:83:da:
eb:ba:7b:a6:86:b2:e1:5d:ac:16:56:c6:2b:80:4b:49:10:56:
56:16:17:cf:76:41:ca:1b:81:af:b4:87:dc:a4:41:91:da:2d:
e2:73:06:38:16:95:bb:47:41:2e:18:b1:38:1e:2e:a9:65:1e:
8c:a8:5b:47:c7:da:33:50:05:0d:7a:8d:20:d8:80:e2:42:83:
b4:b6:38:e6:fb:c9:df:b8:5b:a3:5b:20:39:98:dc:26:a4:ab:
da:81:4e:7d:ed:7c:ce:1d:0e:3d:22:0a:ed:2c:2d:fb:4b:73:
fc:c0:34:c8:a6:3d:bd:4e:55:9a:df:16:be:10:04:94:98:17:
ef:0b:fb:e5:b4:b8:7d:92:c5:ef:c1:0e:8b:86:36:03:84:06:
c3:b2:eb:e9:ae:ab:5f:9f:8a:37:b5:59:5b:ea:3b:90:51:6e:
01:25:68:ed:00:33:76:ae:20:ea:40:26:fd:8e:45:fb:53:bd:
31:98:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:40:56 2024 by rpki-client on console-ams.rpki-client.org