Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer (raw, json)
Hash identifier: j3Kkl7tIo2W1A96F29uxNLHLqSH5WjVYqcTwcm1cWiU=
Subject key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC3498A51653DB4273F33AACD3138D673
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Apr 2024 14:36:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215128
IP: 193.151.244.0/24
IP: 2a13:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:49:8a:51:65:3d:b4:27:3f:33:aa:cd:31:38:d6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 14:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=654d96672a59ec3895fc15847aca1b29db791244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:a0:e1:66:f7:b2:c7:88:fa:ae:cf:93:17:
ef:b9:2d:9b:f5:98:0c:77:e5:e1:c1:3f:16:47:b5:
05:f9:3f:12:e9:bf:1b:10:38:50:cf:d4:8b:7d:ce:
05:cf:99:ac:a9:da:b3:94:8d:f4:88:de:68:59:3c:
bc:2b:9d:05:23:78:31:4b:a0:90:24:dc:23:75:fb:
aa:a7:92:24:6f:96:2a:cf:47:61:6f:33:79:a9:68:
42:2f:79:4f:ba:4d:d7:50:cc:af:f3:5c:9b:76:3d:
bc:c1:0b:ee:6c:47:77:50:c1:a6:f9:8c:0d:a0:d6:
2f:1b:7b:d3:70:72:9d:2b:9e:da:2d:6f:8a:94:2d:
ce:9e:96:83:0b:42:0d:f0:e5:5a:6b:de:f8:2e:6a:
d3:6a:69:53:c1:4d:31:92:a0:5b:4f:5b:d8:75:b8:
49:99:68:15:aa:27:36:3f:f7:35:49:03:f3:6c:42:
62:84:e6:35:32:91:c7:72:b3:b6:e1:19:64:88:7d:
37:5c:b7:44:a0:0c:6c:c3:9f:30:d3:34:6b:c6:7f:
0b:a4:69:e1:d9:fe:83:d5:2b:33:ca:26:7c:f0:84:
a7:2f:0c:0f:12:46:88:8a:2e:9c:4a:0d:19:1a:84:
08:1c:aa:de:fe:b0:7d:b4:9c:c6:a9:dc:cb:dd:c2:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.244.0/24
IPv6:
2a13:6040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215128
Signature Algorithm: sha256WithRSAEncryption
97:b7:1a:27:4c:7b:8c:4e:62:95:0d:ed:6b:38:98:e3:63:f1:
0b:a4:c3:0d:20:c8:f8:02:35:5c:d4:c1:ad:c7:f0:a0:ff:ce:
4b:a0:43:74:2a:52:e4:66:cb:2c:ac:50:8e:fe:ec:88:58:87:
98:41:58:f6:71:44:35:48:ee:56:e1:26:be:ce:26:4e:38:95:
54:63:f3:2b:01:e8:43:45:16:01:e0:12:50:eb:c9:87:78:72:
b6:64:8f:12:ee:ce:86:b1:a1:3f:1f:a8:76:cc:9a:f4:69:5a:
18:12:04:a0:76:14:2a:d1:80:88:a5:dc:d6:f5:be:d4:cc:14:
ac:7f:91:97:d6:75:0a:82:d9:be:ed:9f:67:08:30:18:8b:88:
fb:09:3d:21:fa:8d:88:7a:68:9c:d8:51:04:e8:a4:19:37:a5:
ee:4e:f0:e3:8f:7b:b6:f4:f4:12:53:92:7c:26:50:59:52:a4:
c4:6b:ca:b3:3e:cb:5d:12:f6:c6:43:6c:bf:33:75:f8:da:a4:
73:e1:46:97:ea:98:da:66:05:7e:83:23:d0:70:83:71:ab:1e:
9e:bc:46:27:27:90:f6:09:f6:ce:9b:a2:c3:bd:6a:59:ea:bb:
2e:17:7e:f6:ae:1c:1c:e2:c9:4d:c4:f1:e7:ad:46:c3:36:1a:
86:cb:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:37:23 2024 by rpki-client on console-ams.rpki-client.org