Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
File: ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer (raw, json)
Hash identifier: nrN/A6ugeU2sQb5QHHTNmUei7vH++WjGviK3GsdEM+0=
Subject key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E568D6FBC90F4649919629896AF1CCA22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 19 Mar 2024 11:51:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.150.4.0/22
IP: 2a0f:8600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:8d:6f:bc:90:f4:64:99:19:62:98:96:af:1c:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 11:51:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:89:1e:de:21:96:3d:43:58:7f:b9:94:8e:
c2:2e:19:37:fc:ab:b4:b4:60:ae:1a:4f:33:4f:db:
97:74:ea:29:1a:7a:e2:7f:e9:3d:5a:c1:35:82:d6:
cb:36:d4:3c:87:c9:66:35:ee:8a:53:44:28:07:9a:
93:16:fc:b5:57:be:26:68:f3:02:dc:a4:2a:03:2f:
b7:21:7f:b2:0f:cd:a5:41:a3:6f:d6:26:1d:fb:cc:
f8:43:b0:15:2b:e3:8e:9c:e7:34:98:f4:32:f8:bf:
b2:74:d9:10:5f:25:13:10:8e:7c:f8:24:5b:68:14:
d6:a5:84:40:d8:50:f5:6e:57:4a:2e:aa:ef:9d:d6:
4b:11:7a:93:66:81:1b:8a:dd:97:d3:90:29:0f:eb:
2b:21:61:bb:24:c0:93:ab:1f:7e:0a:49:b0:77:fd:
b4:7a:46:79:e1:e3:06:fa:ef:c8:c4:fe:27:51:a3:
02:3e:e2:89:b6:2a:4c:92:5f:0e:15:51:81:7b:e1:
5d:db:35:7c:9c:ca:4c:91:28:68:47:e1:39:cf:22:
d7:b1:e8:2d:fe:b4:e8:ef:00:b8:bc:0c:2a:21:0a:
94:ac:98:de:e0:2c:79:87:2a:63:d7:8f:64:f8:b6:
e2:53:0e:88:d8:e3:fa:a8:dd:8a:12:c1:17:cf:5c:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/22
IPv6:
2a0f:8600::/29
Signature Algorithm: sha256WithRSAEncryption
9c:a8:44:5c:27:26:99:b5:7b:75:35:df:8a:e2:7a:b5:97:e5:
49:eb:2b:8c:7a:a3:02:67:6f:47:7a:d9:89:d9:e1:1b:a3:de:
1d:e2:c7:bf:be:b8:cb:64:4a:37:a5:20:ac:f7:20:2e:5f:b2:
7d:bd:a6:03:b1:24:72:23:27:d3:69:a4:3a:65:6f:2d:33:0c:
e5:57:26:b1:84:3b:9f:22:94:16:36:67:c1:f9:17:32:a0:92:
56:45:ab:69:68:41:d2:98:6e:52:57:1e:e7:88:10:74:e1:62:
4d:aa:25:13:28:41:cb:9c:a1:10:c4:ed:aa:22:47:67:fb:8f:
ea:53:bb:ef:4a:03:72:b6:50:03:e3:8b:e6:7d:0d:72:df:5f:
0f:c0:0a:33:11:84:9e:65:cc:f8:5f:fb:03:81:5f:27:2d:4c:
ce:12:b8:cc:b0:3d:c8:ed:86:04:3b:e6:89:45:b9:59:72:37:
3a:03:5e:c6:87:4a:e7:08:0c:9d:72:5c:a4:98:ff:12:ad:94:
ac:02:e0:30:24:bc:1a:70:e7:3e:12:4f:e7:1e:d0:c4:87:7a:
6b:da:8c:45:eb:12:f1:0f:ae:59:61:28:75:8b:71:a3:8a:a7:
fe:ea:1d:d3:64:0b:0d:80:79:08:ea:04:32:e9:85:51:b1:53:
66:f7:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:45:43 2024 by rpki-client on console-fra.rpki-client.org