Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer (raw, json)
Hash identifier: zdi7sTQJZyj2PxXgZyy+zFKeKqyTWQazFn6JvNAxAy0=
Subject key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0DD9B83BED734206FC15EBF26485B627
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 09:02:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203935
AS: 204166
IP: 93.115.196.0/22
IP: 137.59.56.0/23
IP: 185.107.0.0/22
IP: 185.113.192.0/22
IP: 185.216.188.0/23
IP: 2a02:7480::/32
IP: 2a06:3f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:d9:b8:3b:ed:73:42:06:fc:15:eb:f2:64:85:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 09:02:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:6c:a4:e4:90:f7:82:b3:89:94:bc:23:64:
4d:72:3d:32:ae:6c:cb:4e:4e:77:f3:83:41:97:48:
23:4d:0c:35:9d:94:d6:66:50:b0:07:b1:7c:6c:ec:
69:24:d8:e3:82:66:f0:ab:3f:df:67:16:6d:20:fd:
17:85:57:01:87:c7:13:7c:ec:3e:45:80:d4:3f:22:
13:c7:64:67:60:a2:c6:42:0e:14:06:d8:a6:cc:c2:
41:d0:85:7a:1d:b1:a1:c9:88:66:af:08:c7:ed:5d:
5e:92:76:34:3e:73:fc:c6:19:3c:08:8c:05:1f:da:
f3:90:21:61:31:bf:6a:cc:1b:17:b5:38:10:62:bb:
91:7c:64:e4:8c:b3:31:ab:5d:42:40:ca:3a:fb:e7:
de:d8:d2:20:e5:4f:c9:65:ab:a8:66:fd:02:0a:84:
8b:a8:2b:f2:d5:bb:26:4c:6d:39:a1:aa:56:bf:0e:
06:c0:55:93:5d:ce:81:47:14:95:36:09:fb:ae:fe:
c8:9d:9f:7b:d3:7b:59:f5:b2:1c:74:7f:8a:49:59:
b9:26:80:dd:e8:21:43:2a:55:58:9e:e8:e4:70:20:
80:00:ed:44:ef:24:f5:d8:33:f4:36:ae:88:12:f6:
94:7c:f6:c8:71:0d:c9:8d:1c:35:cc:a1:df:03:08:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.107.0.0/22
185.113.192.0/22
185.216.188.0/23
IPv6:
2a02:7480::/32
2a06:3f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203935
204166
Signature Algorithm: sha256WithRSAEncryption
85:cf:7a:37:04:52:f6:8f:e4:a8:bc:5e:1c:d8:bd:7a:80:3b:
5b:f7:39:40:7b:d8:bc:c1:16:41:df:90:80:c3:e8:0f:0e:b5:
15:91:b1:1a:75:83:fe:76:ed:f9:d7:37:2f:2b:36:49:a9:da:
36:9f:70:8a:1e:66:cc:26:19:ec:b9:42:a0:a3:97:3f:77:58:
a1:13:1a:72:e0:74:cc:4d:a9:b3:59:8e:ad:88:85:bc:77:c5:
dc:86:24:f3:d6:3f:75:7d:cf:6d:4a:8a:2b:2b:f5:ac:7f:09:
3f:8c:13:5b:8f:65:bb:cf:50:c7:95:d7:f4:29:a2:e2:55:81:
bd:a1:47:26:95:26:76:ff:ac:e5:3b:69:63:d4:99:e3:c5:a2:
b8:39:17:0b:4f:9a:8f:c5:2e:61:e4:cd:91:7d:fb:62:e7:07:
03:52:fc:da:98:ba:79:97:fb:07:b9:27:52:f3:26:d7:be:4b:
a2:3c:be:07:06:10:81:6e:36:3c:7f:83:da:1d:2c:46:aa:40:
0b:de:ac:eb:96:6e:e7:5d:07:7c:35:35:d2:b7:33:93:eb:34:
b3:ce:99:38:a9:6d:e9:65:ca:44:a7:42:16:9d:d2:82:0a:e7:
e7:d2:6c:10:59:cd:f3:90:49:b8:d7:0c:d1:b6:fa:9d:52:a5:
38:3e:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:22:19 2024 by rpki-client on console-fra.rpki-client.org