Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer (raw, json)
Hash identifier: wI7coXHCo7WTqW5MrBxDVsa/mVg4zVU+QcJ8RxdKCok=
Subject key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726C3888091145A37776094061118F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.16.155.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c3:88:80:91:14:5a:37:77:60:94:06:11:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:7d:8d:bc:dd:c0:ac:50:83:2e:5f:6a:1f:
02:a9:7c:2b:84:74:67:cb:d7:ac:d5:80:be:e1:aa:
f6:ff:35:18:6d:84:2a:d6:1c:5e:d5:16:f4:08:8c:
76:12:3e:8e:6f:40:03:93:13:96:82:5f:a1:3d:1c:
bd:f3:c0:ee:aa:43:59:f4:0b:56:10:d4:14:97:98:
ba:84:c8:6f:0d:bf:72:40:6c:69:c3:cf:5e:a6:09:
f0:e2:3e:8b:f1:07:af:f9:0b:33:d1:0a:2e:81:8e:
83:f3:64:77:54:99:f6:e0:1d:80:ca:73:40:99:dd:
9c:82:1d:c3:d2:c1:59:a4:f8:8e:2a:9c:e1:1e:d6:
35:11:36:83:96:00:4a:08:24:9b:52:29:d2:9e:1e:
0a:b0:21:3e:c5:73:c1:3d:97:c9:cd:4e:83:a8:ae:
5f:bb:a2:af:01:14:d7:d5:75:cc:81:d6:99:17:ba:
5c:88:30:ae:08:2e:1f:65:3d:27:f1:be:7f:49:35:
ac:bb:85:f6:80:5d:ff:5a:81:3e:06:bf:e4:fd:9c:
2f:07:eb:6d:08:52:b8:a2:55:43:6a:46:f1:0a:6d:
67:92:9b:fd:82:cf:d3:2a:19:d9:5f:f8:ce:b5:01:
28:88:65:35:b7:70:6a:a2:ee:c3:7f:90:ad:72:03:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.155.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7e:5b:4a:6a:a6:0d:e9:f7:9f:87:98:92:21:15:04:b2:86:
c5:a1:33:4d:ad:4b:3e:55:9d:9a:49:d5:1b:6f:6a:c2:11:ff:
49:dd:34:25:21:1c:34:89:f0:db:44:e8:33:ef:70:e4:0e:38:
4d:50:cc:e3:a6:bb:72:b8:3f:ea:50:6a:02:08:cc:e0:8d:d4:
24:3a:3b:99:5c:f5:1a:e9:16:6f:75:cf:74:9e:21:65:dd:fd:
89:b7:f1:ba:28:d9:8f:38:18:38:ff:e9:0a:62:49:1c:71:92:
fb:26:bb:de:70:d3:f5:3f:b6:f3:b4:f5:73:2c:d0:81:a8:a7:
20:d0:39:98:2a:4d:e7:8b:63:41:da:8c:3c:ae:c1:bf:87:ac:
76:3a:a6:84:bf:d0:27:1b:db:99:6a:a8:5b:37:32:14:64:e0:
ba:41:43:5a:94:8f:2d:44:7f:05:25:85:a1:07:73:f4:dd:64:
f3:c0:6b:ad:b0:9d:a0:c8:b7:b1:5f:37:9e:e3:0a:a4:5f:1c:
70:0a:04:55:a2:48:4d:fb:ef:79:fc:06:db:b8:50:1e:f1:d3:
1f:60:e5:0c:b9:8d:e6:e9:71:0f:4d:a3:0d:7e:a1:a0:c9:48:
e1:01:9b:6f:c5:e7:5d:da:76:5e:54:1f:10:ea:df:fd:0c:ad:
73:a5:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:42:00 2024 by rpki-client on console-fra.rpki-client.org