Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
File: Z8i133U8dJrleBD52T87pRrgXVw.cer (raw, json)
Hash identifier: OgZRkcco2TLidUW6mUK7rkNV5Bb2lEbnZPofmEoUYHs=
Subject key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6F1AB14B0CC3DD699607763FF03C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42666
IP: 31.210.224.0/21
IP: 77.73.160.0/21
IP: 79.99.208.0/21
IP: 94.228.0.0/20
IP: 185.26.224.0/22
IP: 185.30.84.0/22
IP: 185.163.100.0/22
IP: 195.133.204.0/22
IP: 195.133.212.0/22
IP: 2a00:8e20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f1:ab:14:b0:cc:3d:d6:99:60:77:63:ff:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:e4:be:a9:04:34:8d:33:28:0f:3f:df:ab:
e1:fb:de:2a:ec:19:39:dc:2a:4f:74:3a:78:b9:16:
ef:9c:9b:8c:36:3a:38:7d:cb:06:9e:76:bf:d8:00:
c1:bb:9b:de:b7:b8:ab:6d:fb:62:bb:6b:89:0f:2b:
07:2f:01:72:79:b3:8e:c0:71:06:26:19:e3:14:bf:
43:10:be:81:71:36:ac:52:f5:33:d8:b3:65:18:4d:
37:4a:2a:c7:ba:a0:24:28:4d:fc:31:ac:9f:0d:c0:
63:6e:b5:e1:45:b1:6c:29:f7:98:5f:3f:c3:3b:21:
b2:07:4e:38:06:9c:a2:f4:76:3e:fd:0a:23:48:b7:
83:ba:f9:ba:bf:81:8a:d9:7d:37:9a:64:92:9b:98:
78:8e:4e:b0:04:da:a8:23:a5:35:78:ad:27:f3:9f:
15:ed:a2:78:2e:f6:21:09:13:78:d7:0f:37:4e:a0:
93:4e:92:df:49:8a:d4:e8:81:37:2b:94:a1:8f:9d:
39:aa:05:25:cd:a5:22:b7:e0:80:b3:ff:df:5c:57:
70:61:8b:66:83:c0:79:a6:c4:b3:a1:3a:c7:cd:38:
f1:36:6d:52:82:74:47:fe:aa:92:e0:d1:e7:5a:d0:
2a:f3:9e:cf:8a:0a:b8:2f:05:ff:6a:a3:f9:49:fb:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.224.0/21
77.73.160.0/21
79.99.208.0/21
94.228.0.0/20
185.26.224.0/22
185.30.84.0/22
185.163.100.0/22
195.133.204.0/22
195.133.212.0/22
IPv6:
2a00:8e20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42666
Signature Algorithm: sha256WithRSAEncryption
93:1d:44:c9:6d:ad:cf:63:77:fc:43:09:9e:f8:52:69:9e:e5:
c2:08:57:bc:7f:76:b1:62:57:c7:b7:6a:b9:ba:ce:98:2a:04:
d9:f4:5c:bc:80:33:6c:cd:9b:24:e4:2e:42:29:a8:64:4e:03:
8b:10:29:c8:8f:9c:13:ee:fa:9d:0e:61:99:ce:b2:c2:b8:70:
05:e5:de:80:ef:07:d9:ee:2e:d8:7a:68:30:1c:3b:8e:99:5b:
98:e8:1c:1a:d1:03:c7:7a:ab:92:f8:be:03:ce:97:c0:1c:2e:
18:a2:3a:26:d5:63:fe:90:c5:e5:70:56:88:05:4f:be:44:19:
77:af:5e:e8:6f:ef:1e:96:cf:71:1b:44:d5:1d:a8:08:b8:a1:
29:b1:10:64:9c:03:29:fb:66:05:fd:c4:ef:11:3c:7b:ca:82:
c3:51:d0:86:e0:a9:24:ed:1d:71:72:41:51:c8:72:ad:dc:1d:
28:e8:72:1b:1d:a7:14:31:90:04:a0:81:2c:bb:4f:d4:70:9a:
d5:62:cf:ab:7d:c5:ac:e7:d6:f7:4f:11:77:97:a7:3d:8b:50:
4f:b8:08:28:f1:2c:6a:f5:62:17:e7:64:8b:11:e7:7a:ca:03:
0d:d0:09:13:1a:48:7b:e4:c4:b9:3e:94:47:af:f3:7b:1b:6d:
25:13:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:05:00 2024 by rpki-client on console-ams.rpki-client.org