Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
File: ZC8kHMyieCtfxAfhu696l6mEdGA.cer (raw, json)
Hash identifier: rPdN4sGATdZqsQIULCweXuiCUK1TzZOLH+aoyGWa1R0=
Subject key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF4DF3B137BB5ECD98ED26AF97EC6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.200.68.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4d:f3:b1:37:bb:5e:cd:98:ed:26:af:97:ec:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:3f:3b:50:18:3b:8e:47:82:af:a9:28:f7:
4f:2b:e9:38:55:8d:5e:64:25:7d:6e:8d:84:0e:25:
b4:d7:0e:c2:cb:52:24:de:0d:99:15:59:27:b6:8c:
31:e2:b5:87:39:f8:2b:5b:2e:35:14:a5:86:a6:50:
53:e7:7a:e2:4e:07:ef:f7:c6:78:c2:4c:24:57:a9:
e0:f2:ad:c4:fb:42:ca:9b:14:32:94:5f:d9:dc:91:
2a:3b:49:1d:cc:80:b8:8a:b7:c4:10:39:24:71:54:
d4:c4:2f:e7:21:19:97:9d:2a:1d:6d:9a:a8:a1:26:
39:89:17:5f:fa:ec:20:2d:29:bd:a8:cf:ee:ff:6c:
fc:81:9d:01:bc:71:33:7a:b7:77:3d:d0:8f:7b:ec:
08:5e:26:4b:ed:1b:b1:a7:d2:dd:39:2f:38:75:6f:
fd:9d:59:5c:12:b2:98:86:ec:e2:8c:b1:65:e9:7f:
f1:f7:0f:45:f3:87:61:bf:bd:82:14:de:5c:dd:aa:
b4:c3:78:ba:f0:c7:16:f2:7e:12:64:d7:90:92:89:
71:52:5b:b5:c3:d6:37:35:eb:63:76:ae:d6:85:2f:
a6:59:ad:f7:35:51:9d:46:08:6f:b1:a7:ac:c0:d6:
07:43:20:bf:4d:40:93:d6:6e:40:8e:cc:a7:a8:1c:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7f:b3:75:b9:f5:01:d7:bb:26:6e:dc:32:02:1a:dd:98:6f:
09:f6:ff:a4:b6:cf:e7:04:57:89:ba:94:8b:80:02:68:09:aa:
ac:69:6a:a4:a2:15:30:a5:21:d1:af:2d:dc:92:7f:15:ce:4b:
b3:79:1d:74:05:e8:17:b5:71:0c:2e:be:51:50:92:d9:e1:b2:
c2:69:c9:93:1e:30:35:48:2c:15:f2:c5:8c:5b:67:ef:55:1b:
27:16:8b:cf:b2:0d:e7:ec:56:d3:e4:0f:4d:2f:a6:b3:76:20:
3f:bd:9f:6a:bf:c9:78:6a:e4:88:d4:96:8f:93:e3:fb:c7:60:
47:53:ab:e9:78:30:c4:b1:91:30:6b:18:f4:1d:ed:92:11:2c:
a9:db:ad:0e:b9:0a:6c:48:cc:e2:71:63:05:79:3a:c1:35:ae:
05:07:e9:10:e3:62:89:85:d1:4f:74:ed:75:8f:66:d3:d4:c2:
22:00:a2:e5:d4:f2:c6:b7:e9:0e:38:66:ae:78:1a:1d:37:07:
b0:6d:a3:2f:f3:65:3e:08:5e:2f:31:98:36:51:86:da:26:b4:
95:c6:3f:19:dc:8f:28:89:22:f8:5c:0b:7f:c4:2b:0b:df:ed:
cb:de:4b:73:d3:4c:00:a8:26:83:9f:3f:4d:e3:21:46:d8:a9:
88:7f:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:41:38 2024 by rpki-client on console-fra.rpki-client.org