Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer (raw, json)
Hash identifier: 2+rsFM5cE46MCuZUWn41XI5HxqYMOvDlbW2pmtR76Jk=
Subject key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72E7F1A361AFC1DC51BB6C8B597DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207294
IP: 188.190.124.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2e:7f:1a:36:1a:fc:1d:c5:1b:b6:c8:b5:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:ab:8a:e8:07:19:89:b0:c6:96:10:40:dc:
47:63:46:44:33:d7:80:c5:24:e0:4f:ed:4e:46:22:
dd:f0:4f:74:54:b4:06:81:ab:fc:4f:e8:b8:b0:44:
eb:a9:58:11:b1:55:3d:a3:e7:d6:8f:ff:67:ca:72:
d5:14:ce:d9:c5:43:c0:0f:5e:eb:ae:82:9a:5f:9b:
32:aa:6c:31:2c:6d:7f:03:54:a4:35:65:39:f6:58:
5c:75:d9:d9:76:69:60:12:53:4d:5d:27:3d:1e:01:
93:1f:de:d4:a5:2d:29:7c:02:15:60:19:ac:c7:40:
53:49:3e:2c:7d:44:bd:2e:86:b8:b8:04:e5:95:52:
1b:00:9e:83:b4:60:ae:75:00:c9:48:5f:9f:d9:cf:
79:74:2c:4b:3d:7b:fc:1a:2b:07:9d:bc:ad:f4:c4:
a5:86:d9:d2:fe:c2:b2:fd:35:22:dd:78:28:8e:34:
a1:ed:8d:14:5f:57:ce:52:3e:89:b9:c8:d2:12:c1:
08:13:d4:4b:6a:96:f6:68:01:d1:3b:21:18:d5:28:
c1:6f:27:4e:a8:57:fb:fc:fb:de:b6:d6:f5:21:ea:
84:7b:f0:20:3f:21:39:38:6b:d5:11:b4:d5:73:1f:
54:2e:4a:cb:07:dd:cd:ab:c6:33:8c:3d:c4:e8:41:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.124.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207294
Signature Algorithm: sha256WithRSAEncryption
85:8a:64:b3:3b:c5:eb:61:cd:3a:de:bd:fc:01:15:04:61:78:
62:2e:98:3f:50:a0:07:4e:f5:79:a7:24:ab:dc:23:64:f9:00:
a3:a1:89:ca:e3:a6:db:4b:fb:99:b2:b6:62:21:04:99:41:8b:
0c:e5:fc:bb:aa:e4:02:9a:32:dd:30:42:65:0d:f4:df:08:37:
ca:eb:c0:40:3b:6f:b6:84:9e:95:bf:f1:88:38:0d:dc:3d:7c:
58:ec:a0:6f:2f:67:f4:26:0e:92:1f:13:dc:f8:02:73:e9:a5:
b8:0f:4e:43:27:94:95:dc:52:78:76:56:e9:95:9e:b9:71:8d:
c1:50:4f:92:d4:2c:38:eb:45:54:08:5a:14:c4:c0:e2:3f:1c:
cc:43:a3:c8:3c:30:86:a6:f5:ba:da:5d:0b:0b:f4:94:ab:22:
d7:f1:53:1a:d6:fa:e2:e7:10:f4:3e:28:66:0b:1b:0d:09:d3:
c8:0a:38:6a:81:d2:dc:07:83:28:df:97:64:11:a1:29:fa:ca:
34:03:07:18:3e:43:99:22:09:92:b7:c3:0f:bc:7d:9d:d6:df:
34:68:4b:e8:03:55:ae:5b:6b:a1:4f:b7:f3:38:20:b8:12:a8:
a6:83:2d:58:46:ec:b7:47:26:38:03:da:89:a7:6a:be:60:75:
2d:c4:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:23 2024 by rpki-client on console-ams.rpki-client.org