Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer (raw, json)
Hash identifier: ZKGwfmj0b5mEcS4UdYfyJJcPMK+rDHQOEb6xuJYcnfA=
Subject key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7264B6C9B88B6CADBAD394E5649B2E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207650
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:4b:6c:9b:88:b6:ca:db:ad:39:4e:56:49:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:b4:75:b6:93:c5:4f:c4:9e:fe:eb:d4:01:
91:af:84:40:4d:ba:43:bc:b8:99:7e:1f:45:e0:6c:
c8:64:05:bb:7f:fc:8c:a7:5a:99:73:6f:a1:cb:4c:
44:bf:93:d8:57:17:e1:76:b0:4e:0e:c4:58:0d:d4:
82:cd:bc:31:da:f7:d4:7c:d1:48:1c:d4:d4:55:7b:
c6:f1:4b:d5:28:39:35:50:0d:8a:42:28:b4:95:95:
f8:f8:7b:fc:a2:82:c9:11:f1:70:09:6f:35:a5:52:
f0:19:9e:65:e0:60:ed:1c:9e:6e:c5:4d:ce:7a:25:
6a:4a:cb:e6:07:cf:8a:ac:25:61:d1:77:5e:42:e7:
de:79:03:af:a6:5f:fa:b6:92:6c:e3:ee:e8:38:bf:
23:d8:bf:9d:dd:5f:94:92:d1:49:04:c2:89:d6:65:
07:d4:15:32:8b:da:e3:08:ac:7b:11:e9:e9:b8:8b:
ab:40:25:04:06:ce:47:6b:98:56:b2:a6:b0:4f:a1:
60:0a:a9:96:32:cd:ac:f6:f2:42:d6:99:61:fc:5a:
c3:cd:85:5f:9a:17:29:0c:d3:a7:f4:29:80:95:29:
8f:97:86:4b:1b:38:ff:30:c7:a2:d2:cc:b7:c3:b9:
cb:a9:c6:8a:d2:37:6c:4f:f8:12:c6:d9:48:04:f8:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207650
Signature Algorithm: sha256WithRSAEncryption
6b:62:d8:1c:60:b5:aa:3d:e6:01:42:31:bd:88:be:9e:f8:53:
e8:97:de:5f:40:37:7b:01:0c:2b:eb:75:de:db:bd:b7:40:44:
f7:e0:99:bc:49:f4:4d:e3:c3:2b:67:87:53:49:2b:94:f8:15:
ff:36:c4:5e:51:2d:08:31:0d:b9:a7:8f:bf:ad:47:32:96:46:
3f:78:bb:09:c4:af:dc:fd:54:0f:ed:2a:05:e1:dd:26:67:de:
78:1e:54:c3:9a:ca:5d:76:46:bd:07:53:2d:c0:69:e4:a7:6b:
07:c2:57:a4:51:c9:76:c3:c7:c3:6e:50:13:8a:2d:56:d7:ac:
43:8e:ff:07:87:32:32:e7:3a:da:9a:a1:fc:62:26:af:00:f2:
94:ad:88:b3:1d:14:ad:a9:e9:9e:36:1f:a9:81:df:a1:c5:e2:
a4:3a:f8:06:71:9a:c8:dd:f6:db:f1:37:8e:f0:3f:36:67:e2:
e6:cb:cb:2d:6c:27:a7:26:05:64:b2:a9:e0:5a:d5:65:f8:e3:
73:97:ef:57:04:af:f4:5b:28:37:27:bd:cb:57:ca:3b:aa:69:
3a:a8:10:ae:6e:17:7a:7a:06:ce:e6:e2:c3:f9:d7:c6:cb:7f:
e4:4a:64:a8:c3:23:ed:44:16:e0:f9:34:7a:19:b6:e3:8c:5c:
5f:e8:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:21:58 2024 by rpki-client on console-fra.rpki-client.org