Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer (raw, json)
Hash identifier: L8SmJH/Pm6I4pj3EB/HmeGwspH1QAXKSLJ8FR1h4SHc=
Subject key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAF28AED8D773EC7C48A4A8849BB19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.126.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f2:8a:ed:8d:77:3e:c7:c4:8a:4a:88:49:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:a8:91:51:54:8b:93:4e:11:fb:9b:23:26:
0f:7a:18:83:2f:b9:05:28:3e:0f:8b:89:69:3b:fb:
52:c8:3e:50:e5:45:41:c5:e2:34:ec:cf:2a:fd:c3:
7a:e0:4f:3f:c6:4a:9b:11:ff:da:06:8d:3e:34:f7:
58:ee:3b:be:c4:0a:12:54:e0:3f:da:4a:f1:2b:fc:
f3:97:e6:9e:52:7e:16:e5:6b:24:e8:70:c1:d7:64:
2f:cb:9b:bf:ad:67:36:d3:fa:3c:78:8a:6a:7e:72:
70:f2:e1:83:3d:1d:f9:1f:2d:60:2b:f4:d7:1a:05:
c6:83:7d:8b:87:7e:3e:11:62:0c:e6:89:28:7d:07:
9b:a5:d3:35:e6:64:37:13:6a:b4:0c:1d:50:45:ff:
4c:aa:19:5e:82:bd:6e:7c:c0:c7:1c:ec:d7:c3:80:
f0:47:f9:f4:e3:22:b6:0e:cd:50:1d:a9:80:02:a2:
05:b0:45:1c:d2:8a:8c:68:34:01:17:c3:5f:58:2c:
e0:6c:14:2b:19:43:07:d4:f5:a3:b1:1f:62:b6:43:
b4:35:7b:a6:4a:25:73:71:83:9a:f9:c8:22:03:d3:
7f:b7:9b:05:0c:8c:79:9e:ae:c6:c2:06:b8:51:cd:
f6:cd:c9:9b:67:b6:a0:32:ea:e0:39:6a:e6:30:e8:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.96.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b3:bc:97:89:ca:d9:d0:d3:57:e2:c3:5b:47:1d:52:19:ea:
04:03:8a:e4:2a:9d:95:82:b6:66:83:93:2d:10:e8:b3:f5:a6:
cf:36:bc:d6:fd:1f:d5:80:0d:41:f5:59:27:a3:3b:29:e6:e0:
b0:80:bf:e7:1f:0d:80:47:79:af:01:e9:92:10:34:e2:7e:d9:
01:5c:5b:83:fc:4f:63:9a:d3:5c:42:02:d1:43:26:7d:13:ff:
02:d0:12:53:08:1d:a0:9c:01:4f:0f:b7:5f:88:3f:bd:05:c4:
f5:76:83:8e:91:67:08:69:18:d8:5e:47:f0:08:f7:48:3a:d9:
28:71:fc:25:78:44:28:0b:05:c2:6e:8c:1a:8a:64:4d:da:7c:
f9:45:c9:a1:ae:f5:f9:95:85:29:2e:e9:08:62:1a:b8:b3:d2:
71:2f:59:d4:d9:8e:c1:01:ce:e0:07:d4:20:41:6a:09:70:6e:
e5:ce:75:37:d3:20:68:3f:f2:d8:7b:6c:88:7f:7f:2f:bf:59:
f3:33:01:d5:b3:19:cc:ab:f1:3c:c5:05:29:4f:50:9b:86:8d:
a8:7f:78:f8:c6:8e:95:4e:57:d5:25:e1:0f:96:6a:f3:67:dd:
96:37:e3:b7:08:18:c4:88:d9:e5:56:ca:a8:95:72:d0:e6:8e:
3a:6f:d4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:41:47 2024 by rpki-client on console-fra.rpki-client.org