Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
File: Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer (raw, json)
Hash identifier: 7zwKvktYOQAg0pF2StpalwdADwPgFoFNkw2tnIqP1Eo=
Subject key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019034903C821FF7852EB0A77412E5BBACC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Jun 2024 07:33:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214661
AS: 215355
IP: 2a14:67c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:90:3c:82:1f:f7:85:2e:b0:a7:74:12:e5:bb:ac:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 20 07:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:95:06:27:db:73:d8:9b:5b:8f:42:e2:76:
89:87:cf:7b:eb:5d:64:58:f4:94:63:62:a6:22:a7:
a8:ef:d3:d1:a3:09:d0:d2:b7:7d:6a:f5:02:b3:e8:
84:3d:cc:22:e5:41:7d:28:22:f1:a4:46:65:dc:45:
31:e7:ce:34:61:85:a6:15:ea:44:e3:d5:4d:f6:7a:
5c:3c:6a:e9:3f:ba:39:06:46:e1:28:da:e4:b7:2f:
05:24:66:3f:01:aa:16:1d:94:b8:84:44:3d:b4:76:
ae:90:c3:f2:60:54:bf:be:4f:5d:de:1a:0a:6d:b2:
e4:21:24:f9:87:ce:6c:70:5e:a2:34:5d:97:9b:76:
bb:0c:80:d2:d7:0d:3a:9f:37:bf:8b:93:e0:54:82:
01:db:81:50:47:c5:eb:7a:94:bb:a3:4a:ed:30:23:
1c:15:56:02:a0:67:9e:a8:69:08:7e:19:dc:60:38:
43:85:22:d7:7c:6d:e7:f1:91:32:93:64:69:ec:ce:
65:a1:5e:83:1a:d3:e1:9f:6b:e5:02:71:b8:08:b5:
7e:64:ed:8e:24:20:3b:81:b4:70:20:ce:56:ce:b7:
3d:cf:ac:14:cd:6e:37:62:53:a4:7c:a3:e2:5a:d7:
05:a2:71:73:3d:a1:8c:52:09:17:fa:19:1e:6c:c5:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214661
215355
Signature Algorithm: sha256WithRSAEncryption
4f:ce:1b:b1:a2:38:39:a8:c0:cd:57:d8:73:9f:eb:2d:1e:00:
48:3f:4c:5b:06:12:de:19:fb:66:35:88:2d:b5:de:83:ea:da:
09:70:a9:1e:1c:04:d6:ea:d4:1e:26:af:a1:03:4b:60:7e:d6:
b9:5e:f6:7b:dc:ee:1d:2a:df:24:45:1e:e0:cb:40:77:f0:e6:
49:69:20:7a:f8:cb:b5:a3:30:fb:66:05:6b:92:30:60:06:59:
4e:48:35:ce:a2:52:43:6a:de:93:72:1e:1a:55:3c:45:29:e3:
ba:66:c8:df:3b:8f:ed:be:c5:3c:3b:f8:60:d9:6a:57:49:dc:
08:76:ec:b0:a0:1c:34:32:3b:47:0f:d9:72:0f:39:7b:95:05:
38:75:85:dc:d8:25:26:48:5d:02:96:dc:77:e5:a5:7e:ff:8c:
b4:17:5c:67:45:a4:06:8a:cb:9a:2d:c6:9e:ce:45:f2:6b:a4:
12:28:65:2e:fb:ba:41:7c:98:74:98:85:7c:f3:82:26:fe:b7:
29:82:29:1d:a4:44:84:d6:e1:ea:80:81:a1:9d:c7:b1:e0:13:
84:6d:54:af:6f:70:a6:55:d2:2b:4a:b2:fc:78:5c:2a:44:85:
63:ea:0d:c6:7c:46:21:de:73:ce:27:75:8c:0f:93:b8:d9:46:
14:3d:ee:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:49 2024 by rpki-client on console-ams.rpki-client.org