Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.cer (raw, json)
Hash identifier: yT7bAhqBztNi8Uy0z64GuffspLKxWXQMMgaAPd7mJqs=
Subject key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425429B97141CE12EA09B01A5351287
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25374
IP: 93.183.128.0/18
IP: 109.199.224.0/19
IP: 185.2.208.0/22
IP: 195.24.88.0/21
IP: 195.39.212.0/23
IP: 2a02:4dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:42:9b:97:14:1c:e1:2e:a0:9b:01:a5:35:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:2a:df:63:48:18:71:9b:01:c6:de:75:f5:
12:7c:f6:94:79:75:94:a9:2d:6d:ed:9d:f1:16:97:
44:12:7c:04:49:84:03:13:81:44:28:7d:f3:7a:3e:
e6:40:7c:68:6c:26:a3:a1:0f:0a:0d:54:1d:0c:c6:
61:8b:e8:15:d9:7c:71:26:f7:3a:bc:fb:ec:9c:bc:
eb:57:a1:29:ab:e4:f6:18:ca:66:63:b2:18:d7:2a:
f7:88:ca:dc:5e:9b:92:f2:72:8d:13:af:93:02:6a:
7b:52:32:16:5a:5f:3b:d8:47:27:82:d7:0c:40:25:
f6:2b:db:ac:e3:a7:88:2f:49:57:a5:73:67:4f:68:
9b:7d:94:ae:f1:44:97:bd:12:ff:bf:d6:94:c0:7e:
23:77:e6:ed:13:88:91:0d:e4:1f:d8:5b:61:33:58:
45:78:38:9a:e9:4c:90:a0:46:56:e3:12:c7:eb:10:
60:36:38:5c:76:a4:56:73:9d:d5:b0:f4:ed:50:60:
3b:a2:64:ac:bb:7d:78:c3:fc:53:6d:16:b1:b8:e7:
23:7c:c4:26:f0:cd:b5:bf:c3:01:96:bb:4d:71:31:
0f:22:84:1f:1f:76:02:50:d2:fa:de:bb:58:76:77:
e1:10:6a:a4:93:ac:d2:9e:b8:f7:f2:be:75:a9:e2:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.128.0/18
109.199.224.0/19
185.2.208.0/22
195.24.88.0/21
195.39.212.0/23
IPv6:
2a02:4dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25374
Signature Algorithm: sha256WithRSAEncryption
8d:fa:51:0e:9c:b9:d0:83:b4:ba:a3:2b:4d:ce:16:e3:2f:7e:
b6:a7:a8:a1:9d:cc:e5:68:aa:8b:6e:c1:74:e2:a8:18:35:ef:
88:89:74:28:de:97:ff:9d:9d:1a:6c:3a:6c:27:4d:bb:b9:bc:
4a:80:57:e8:20:52:62:85:31:39:7e:fc:f1:22:d0:51:07:e8:
86:18:de:5c:bc:04:88:b7:bf:f4:89:ed:2e:64:cf:a0:2a:e3:
5b:7c:78:2a:d4:3c:1e:7f:74:e3:ea:12:fb:58:84:1b:4b:f7:
0d:02:b3:9a:c6:4a:2f:d2:d5:11:78:63:f8:54:37:ca:27:ac:
bb:73:9e:f6:a1:b7:7e:07:16:77:35:e5:74:df:4a:17:e7:ed:
23:f2:1b:69:50:0e:2e:c3:47:02:f5:54:f7:eb:f1:30:61:65:
8f:5d:b2:50:8d:f5:9a:c4:b3:a1:4a:47:b7:61:b6:4d:66:ed:
89:e8:c0:c1:7f:50:5a:28:5b:9b:06:8f:30:b8:fc:ac:ed:b2:
13:70:ce:d2:d2:1c:a0:7c:b8:21:f9:d5:1e:63:29:96:20:87:
b9:9e:9c:19:64:3d:de:19:7a:b4:47:43:aa:f6:1a:90:4d:23:
49:39:79:6a:13:37:5c:90:04:81:e3:e7:dd:ad:7f:6c:f0:32:
aa:4d:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:22:14 2024 by rpki-client on console-fra.rpki-client.org