Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer (raw, json)
Hash identifier: eOyxJk4iLgatcYwP/dEm9qeV8Td1mdPEDtNZrUiBPJE=
Subject key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC96C1943788A87AAF2D4F2D90D5C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.62.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:96:c1:94:37:88:a8:7a:af:2d:4f:2d:90:d5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:76:bb:9d:b9:04:38:07:fe:da:3e:31:5f:
b0:d3:0f:fa:66:6a:f7:67:2b:e7:38:a2:62:ad:f6:
23:2f:3f:5c:62:e7:2b:82:30:57:0c:9b:59:85:a6:
3c:e2:00:ea:ce:61:1f:35:66:b2:93:5f:10:d9:89:
83:4e:6d:db:49:49:37:99:c8:14:71:79:67:23:aa:
5c:01:4f:a9:7c:89:d5:79:df:61:1c:ee:3f:ed:fd:
60:5b:e9:35:9b:8c:fd:8f:ea:52:e7:38:ef:b5:67:
30:23:ea:9e:59:a5:9a:e9:8d:39:a7:3a:52:ba:41:
a0:f6:4c:70:33:e0:61:5d:46:ea:05:34:42:98:7a:
71:15:30:66:19:20:56:07:f2:3b:a4:4d:c7:fb:d5:
c8:96:3a:30:b7:d4:76:2b:a8:e1:0f:49:88:66:b9:
89:7d:7d:f3:13:f2:5f:00:93:4b:06:b0:63:08:7a:
e5:5c:51:29:66:3f:be:2d:7a:4a:a7:ba:64:84:bb:
89:bb:c6:0f:2c:3f:96:12:7f:bc:b5:ba:70:bc:84:
4d:0a:d6:ae:35:ce:e5:df:c3:2d:55:05:c7:3b:0c:
33:b5:28:4f:e8:33:ce:44:88:f2:eb:2c:c1:05:79:
7b:91:58:95:0f:39:97:0d:6c:04:36:f0:07:e2:64:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:3b:3a:c9:95:a2:0d:96:1b:08:5e:eb:3a:75:ef:a8:62:3c:
b0:4a:2f:7e:e2:4d:f2:0a:c5:f5:6b:5a:83:30:c9:21:ac:31:
b1:52:9e:75:a5:78:da:b4:8c:ce:98:50:9a:7d:2c:36:a9:da:
7c:f9:09:18:82:f6:f1:1e:13:b4:bc:d8:13:a7:66:e2:c9:47:
fa:f2:6c:b1:cf:e0:00:36:4d:ef:95:4f:bb:ea:97:6c:17:3f:
9e:fc:ab:34:e9:33:1b:b1:9a:01:c8:2d:bd:29:11:fa:fe:f8:
9b:09:8f:4a:73:aa:a2:bf:00:c2:82:1e:89:4e:b2:29:63:5c:
87:9c:e8:f7:00:a5:dd:04:0b:82:53:12:f2:01:07:b7:11:81:
e2:c1:38:86:a7:bb:60:52:d0:d2:58:d8:08:1e:d3:d6:61:20:
c4:56:96:75:31:ac:2e:20:08:a0:0f:21:14:4a:2c:eb:37:ed:
9d:10:99:5a:b3:3d:a4:0e:cd:4c:5a:fc:e4:3b:36:92:88:b4:
de:bb:cb:64:c4:10:50:74:e9:40:b2:7e:c1:40:82:f3:aa:5b:
b6:55:27:f3:75:9c:5a:61:90:77:e1:36:99:38:d3:fb:03:05:
0f:21:82:61:59:e2:c9:ae:87:b0:66:cc:b8:d4:2b:83:60:f8:
dd:60:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:05:17 2024 by rpki-client on console-ams.rpki-client.org