Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer (raw, json)
Hash identifier: pm3p3iJ0BpJ7hhjC8/VEhmIppF6x73f3cpZl7sK98SI=
Subject key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC9CC80615488E7F1508076DF68E04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 161.76.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9c:c8:06:15:48:8e:7f:15:08:07:6d:f6:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:f8:be:11:66:ac:d1:70:d8:21:8c:ae:da:
4e:54:3a:69:d0:b3:00:ce:39:74:ad:64:6c:b0:d8:
96:a2:bf:a4:da:04:c6:b5:be:86:0a:a0:d7:ee:78:
e6:4a:dc:4c:9e:80:04:0a:4c:13:9c:26:c8:7c:3e:
eb:b1:2e:71:76:87:63:33:28:a3:69:d6:db:2c:2c:
2b:e7:f5:15:58:1f:5a:8d:2b:e8:9b:87:58:f8:0d:
11:00:d6:d0:05:85:b7:3f:57:4c:5f:34:b6:94:87:
16:a0:20:55:b6:6f:10:02:2d:d7:b9:67:bd:db:25:
90:ef:2d:9f:29:12:13:9b:68:f4:82:ac:3c:f7:8a:
be:d3:72:41:7e:70:7b:6f:03:32:1f:e7:2f:83:f7:
0f:05:d4:95:36:30:db:8d:12:b8:77:ab:1b:0c:86:
36:45:28:d8:27:e4:44:bf:f7:b0:03:24:4d:9f:60:
51:ba:4e:1d:58:96:bf:61:aa:21:57:2e:c8:80:43:
55:9a:5d:72:95:73:61:8b:18:5b:5a:0c:19:82:66:
ff:3d:50:e1:42:af:34:e9:60:d5:5d:bc:29:d5:3f:
8f:7a:b9:b6:be:fb:66:8e:69:b3:54:03:df:c9:23:
b8:92:ef:a8:5b:5a:68:cc:bf:21:22:ea:b2:8e:15:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:24:85:6d:a1:2f:5c:86:64:cf:7f:8f:c2:85:fb:74:9f:a3:
cf:e9:83:b9:ec:03:49:38:5e:b3:8b:5b:76:b7:e0:ef:d3:3f:
35:cb:13:45:08:c7:da:65:ca:19:cc:b3:56:2f:97:a7:8a:17:
5a:ca:cc:1f:ec:d5:05:86:1a:2d:90:33:8e:8d:71:bc:7b:ea:
f4:5f:fe:cc:83:e5:4f:96:b8:46:68:92:61:32:95:fc:c8:ff:
f9:3a:e5:ff:c0:29:f5:5f:23:24:b8:8e:1b:2d:b6:38:d2:d4:
a0:95:8f:cb:be:12:cb:c5:9e:06:f6:2d:33:7c:aa:84:9f:33:
72:ed:d5:1c:19:42:e0:c8:76:3d:27:e0:72:ab:ee:b7:4e:54:
32:85:c8:71:26:ad:ea:5a:0c:0e:fc:1a:db:18:6b:ae:e8:5a:
5d:14:cb:cb:13:b1:6a:58:aa:cc:7f:17:6a:2c:a6:f2:00:a3:
91:f7:28:4f:1e:d7:94:db:ef:97:98:78:0a:72:09:66:bf:67:
5f:41:cb:fb:75:0f:db:2c:f7:29:c7:ac:ff:d3:db:84:3d:fa:
00:bd:f7:4c:3f:97:90:26:6e:b2:fc:55:9d:53:80:51:3d:e9:
21:07:9b:e9:c6:91:40:87:e8:85:a1:8b:23:9d:ae:20:0b:9f:
bf:a8:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:56 2024 by rpki-client on console-ams.rpki-client.org