Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
File: ZEzbroSyaoSEsQwA6_37y0mQwVc.cer (raw, json)
Hash identifier: 7ZC1oBkuazc3dxle0bDQS06dFNJgjYdSlIiUQTkvrmg=
Subject key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A1E9BEA7383B1AAC88FE45B0D5465
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209920
IP: 185.244.16.0/22
IP: 2a0f:9080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1e:9b:ea:73:83:b1:aa:c8:8f:e4:5b:0d:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:7a:45:63:e8:42:73:c3:d9:e0:cc:a8:16:
08:f8:5b:c0:3b:54:f4:47:8b:16:be:cf:39:8a:84:
24:e6:6e:9d:59:44:da:b4:29:f3:22:61:e7:cf:bc:
9c:52:39:a7:3c:48:57:62:e2:7c:eb:55:03:46:57:
86:7b:0b:50:2a:e6:55:d7:59:93:b7:02:9d:1f:f4:
20:96:55:15:1d:b6:11:72:c9:26:72:d7:64:58:98:
2e:70:93:37:0a:a7:51:94:cf:f4:40:ca:e0:58:2c:
e2:ec:e9:dd:dc:8b:8a:13:d2:a6:ec:9d:2c:82:07:
ba:44:65:63:61:e3:34:55:05:f5:36:70:9c:52:03:
dc:e7:e9:33:7c:c4:06:93:22:40:bf:3d:5c:33:49:
70:d4:d8:b9:c3:59:3f:b9:1e:d2:8a:fe:c4:12:0e:
9a:d1:d2:e2:d9:0b:e2:dc:89:37:88:29:81:94:74:
16:d2:ed:b7:9f:1e:09:c8:7e:77:53:1a:79:cf:db:
48:79:19:77:da:32:07:cd:29:55:33:15:7d:cb:81:
1d:d3:c2:ee:73:0c:2e:6d:e5:9a:e2:6b:2d:d7:67:
bb:59:be:23:c8:61:94:c0:93:e2:af:7f:33:ad:38:
2a:1e:09:84:6c:9a:91:09:f3:11:0b:4a:59:5b:41:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.16.0/22
IPv6:
2a0f:9080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209920
Signature Algorithm: sha256WithRSAEncryption
20:ef:57:04:d3:79:65:45:0f:5b:70:00:0b:c3:31:d5:2b:cd:
96:29:29:ea:e1:3a:7e:1e:67:88:b2:f6:1c:73:79:27:ff:68:
e6:5a:0c:f4:01:ea:4c:e5:0c:81:ce:1f:5f:f2:cb:52:6a:21:
5b:f6:09:d8:dc:5e:38:bf:83:55:54:b1:f1:a0:47:97:89:bd:
23:d7:2b:2d:b4:94:13:fb:2b:f9:0d:89:dd:4a:0f:26:2d:97:
1c:e9:57:86:91:5f:b3:53:eb:4e:59:fb:c8:03:a6:ef:9f:33:
d4:17:00:63:96:22:ec:55:0e:1c:e7:d8:cb:e9:d6:fe:ed:4e:
f1:27:b8:77:93:9f:c2:b2:5b:da:f6:91:39:ea:00:29:f5:53:
02:3c:89:03:80:76:37:17:c1:42:bd:7a:b7:55:37:d3:3f:54:
97:c0:04:65:10:53:c9:91:45:44:f4:77:e4:61:4a:24:c7:76:
da:2e:ff:05:69:12:0e:81:6b:63:f3:b1:f3:34:1f:a1:d8:01:
40:e3:43:1a:d8:e5:5b:53:27:f4:a9:bf:23:2b:67:fc:40:8c:
2a:68:8c:90:a6:49:b7:19:73:8f:ad:ad:4c:d4:75:ca:f2:5a:
b4:40:90:4f:c2:64:93:09:1c:f3:e4:c5:11:87:f0:3d:6a:5a:
30:f3:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:41:41 2024 by rpki-client on console-fra.rpki-client.org