Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer (raw, json)
Hash identifier: 18EoZrWyyZcwgLGoXJRdtblJs4MVEJHxYBKHifrvkQA=
Subject key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348F892C2658332CFBEAB461CCB8E8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62291
IP: 178.251.48.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f8:92:c2:65:83:32:cf:be:ab:46:1c:cb:8e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:d6:20:a0:c8:bf:df:6b:e7:41:65:f9:35:
eb:32:40:02:81:c4:e6:8d:6a:46:ca:42:39:4a:d6:
bd:6f:41:12:b1:a6:13:26:77:1c:5a:6f:9c:e8:48:
ce:e1:68:fe:27:b8:ce:97:49:b1:31:09:e1:04:0a:
2d:9c:38:87:a8:0f:71:e7:36:25:ff:65:ca:a0:7d:
7f:56:54:f0:e1:73:59:3f:10:64:d4:ba:db:32:37:
c5:bd:7e:75:f6:6d:f2:3e:a9:55:77:30:b2:6a:ea:
57:3d:91:0a:b5:6a:42:a0:d4:a5:1c:4f:8b:4c:2e:
84:23:ca:e2:f0:b9:49:63:21:bb:e9:e5:cc:1a:3e:
4d:c9:db:22:d3:58:c9:d2:4a:46:c0:81:73:5f:df:
41:ef:8d:73:91:34:1c:40:9e:f9:75:d0:7d:27:2d:
65:d9:0c:96:56:f3:ea:32:d6:26:fd:e3:04:6e:07:
45:8c:71:8e:98:e5:f3:01:fc:5e:61:4f:26:af:ce:
d2:7c:8e:b4:0a:c8:bf:7b:a0:30:32:25:b9:bf:8c:
eb:6b:9a:89:0d:9d:93:9e:b0:36:77:77:09:c5:31:
c3:74:e9:89:92:a5:58:5b:9d:3b:5b:34:60:06:38:
d2:87:fd:77:b4:a4:5a:77:e8:7e:57:59:ba:03:81:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.48.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62291
Signature Algorithm: sha256WithRSAEncryption
22:11:e1:94:27:9a:69:d4:fa:19:e3:7d:85:e5:18:05:cf:2e:
a9:b1:4d:48:f1:18:18:0c:e1:f0:f8:0d:38:85:0d:6b:6f:cc:
b2:63:18:30:f7:71:d7:66:94:fb:41:a7:e3:78:30:5d:1b:36:
f0:f7:f6:6d:3e:93:f8:4c:1f:87:7d:4f:2e:5d:b3:52:f1:5e:
6c:3f:0f:a5:d5:6f:fd:69:c6:a0:30:8a:63:5f:b8:fe:af:1f:
82:d5:b9:e4:ce:9b:bc:1b:0c:39:93:87:6d:6d:ff:bf:14:5f:
df:da:ce:8d:10:25:29:84:95:06:8b:83:5c:c2:d0:62:6b:43:
5c:ac:08:9f:b7:b5:ba:ea:c8:98:40:10:dd:5f:c7:8d:56:cb:
7b:c4:dc:e1:36:8b:c4:18:09:a2:97:d3:57:93:9a:8a:ce:65:
00:39:de:d8:3d:f4:74:2b:58:23:8f:44:11:6f:41:cd:0e:d5:
61:e5:8b:30:aa:19:39:4d:de:41:b7:26:0a:8e:bc:e4:12:33:
64:0f:b5:4b:21:d6:0f:b8:0e:b8:fd:df:9b:d7:04:3d:23:db:
e7:3d:84:7e:9b:e0:d6:6c:0f:44:9c:e9:04:6f:23:21:4c:d5:
22:71:7c:03:a5:9b:a9:fc:44:8f:7a:ea:2b:d6:37:8f:46:36:
c1:41:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:22:07 2024 by rpki-client on console-ams.rpki-client.org