Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer (raw, json)
Hash identifier: 5m5tA5yE7LZV9XBefkLBPENdPsUCRchfK+LDtIPxs7U=
Subject key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE6F4B74A38A89F4D7ECF641723927
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.3.178.0/24
IP: 2a11:f640::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6f:4b:74:a3:8a:89:f4:d7:ec:f6:41:72:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:67:02:70:7e:c5:c8:bc:bf:cc:5b:bc:cd:
d7:ed:e7:e6:f5:d5:c5:b1:9c:62:f3:13:e5:e1:20:
ec:aa:d8:90:d9:2c:e5:18:44:bb:7f:c1:8d:3f:d7:
7f:1b:a6:27:fe:f9:84:eb:79:56:de:e5:77:b4:7d:
e1:51:7b:a3:a5:7c:23:f1:f9:cf:ef:ef:4a:a1:30:
f1:55:34:8b:fd:7a:65:53:d6:0d:eb:1d:65:83:31:
ca:f9:6a:5c:e2:2d:c6:12:27:08:06:de:8d:95:bd:
96:c3:4a:62:fe:ec:0e:41:fc:ee:c8:7e:5d:0d:a5:
00:c1:58:8d:68:a9:a7:d6:35:81:55:8e:34:37:ff:
63:c5:4a:4c:5a:b4:3c:70:83:a6:02:74:96:6d:09:
e0:f7:37:a5:04:21:25:76:55:6d:9a:ee:cf:4c:2b:
24:93:74:53:8e:ad:7a:f5:c5:07:97:55:e1:47:a1:
66:14:8c:8a:bc:e8:90:ef:e8:69:f2:88:5a:29:66:
80:35:82:d7:07:6c:a6:c2:1d:7a:4b:9c:c7:94:c0:
1f:65:80:4f:55:53:9f:a2:1a:d7:f3:78:f3:e1:d7:
e7:99:35:f7:cc:0f:fe:ce:e2:26:15:65:7e:22:e7:
8a:a7:2a:58:98:db:3a:17:62:e8:11:5f:e7:df:d3:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.178.0/24
IPv6:
2a11:f640::/32
Signature Algorithm: sha256WithRSAEncryption
38:18:53:1f:db:61:c4:03:36:be:4b:01:18:ed:09:92:51:da:
a0:a2:f5:bf:b9:d3:a6:5f:8e:4e:ca:c0:21:d8:64:d8:d4:32:
33:0f:34:57:07:59:4a:b0:fd:9e:64:7a:8f:59:0e:fa:4c:f1:
0e:85:f0:08:06:52:0d:44:27:3d:a9:ec:2b:d6:c5:7d:56:38:
c7:48:0a:d2:f3:cf:9e:8c:ee:ca:5d:a1:82:11:74:f9:0b:f7:
19:4c:13:18:ef:4d:6d:69:6a:35:34:dc:d6:7a:50:71:d6:9c:
2a:dd:5a:31:1c:db:09:82:8d:05:f1:d9:3d:eb:36:61:b0:b4:
20:3f:18:38:09:f9:09:b4:ed:ea:a0:f5:f8:c0:81:e5:e4:0e:
8f:45:d8:71:ec:6c:84:e7:38:ab:99:ed:bf:f6:12:62:f6:2e:
ea:ec:bd:f5:df:ce:2a:86:31:50:11:a4:92:2d:23:dc:fe:1a:
9c:92:97:14:79:f6:fd:d0:bd:88:1a:bc:90:11:e5:0e:a0:69:
71:f3:05:a8:88:89:fe:cb:2a:0b:73:e2:ee:ef:72:a7:d6:c8:
13:bb:b7:c7:a2:66:53:2d:4d:83:80:d5:ad:4d:d8:d4:2a:fc:
a8:da:98:67:da:20:8c:42:a8:81:42:f0:1d:58:29:8f:93:8a:
04:61:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 12:58:09 2024 by rpki-client on console-fra.rpki-client.org