Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer (raw, json)
Hash identifier: 46zbdA7+rFZUjKtfJ/ggvt/OQok/QZKyFfPVJ7hK8LY=
Subject key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ECB04548699AF731E419B7BEB5724
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207822
IP: 94.142.128.0/24
IP: 2001:678:b98::/48
IP: 2a0a:f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:cb:04:54:86:99:af:73:1e:41:9b:7b:eb:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:d6:f1:86:7c:ca:ad:a5:17:c2:b4:4c:cb:
33:4f:d1:b1:7d:7d:8f:9d:20:b0:5c:7c:fd:e9:3d:
73:7f:60:8a:e8:41:48:05:86:39:6f:d7:6e:0c:f5:
53:e0:17:37:ac:37:24:a9:1b:37:f8:b6:c2:8c:73:
98:a0:cb:7b:31:37:1f:a6:9e:af:55:11:b2:aa:d5:
53:f0:f1:05:64:cd:fc:ef:19:02:eb:fb:42:be:94:
94:d4:2d:11:32:9f:f2:18:7f:b5:ad:24:f3:a5:78:
08:ed:84:67:6a:62:7c:c8:49:03:4d:d1:ef:9e:83:
74:c7:30:bb:f1:50:43:db:2a:f6:a1:80:e9:6f:6a:
7a:f1:4c:78:db:2e:b3:89:0d:94:cf:47:ab:88:6f:
56:a1:58:27:0d:b0:5c:04:6a:7f:7e:23:36:b0:95:
1a:a8:7a:e9:0e:7b:e2:25:66:97:d2:80:61:19:7a:
be:14:5e:c3:56:32:45:f0:f4:3d:70:92:5c:30:96:
70:47:4c:27:31:ef:87:e7:2e:74:1c:99:01:b3:97:
ce:eb:6d:97:ec:84:66:7b:25:03:ff:e2:5b:d7:9a:
7b:08:29:c2:3d:69:9a:77:0e:b9:ec:ef:ac:10:14:
48:14:be:39:4b:ae:ba:08:c1:09:6a:d0:4b:37:31:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.128.0/24
IPv6:
2001:678:b98::/48
2a0a:f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207822
Signature Algorithm: sha256WithRSAEncryption
72:e9:b0:1b:cb:d9:5a:c4:37:64:3a:82:1f:ae:f7:67:96:02:
a9:a8:f3:37:0a:a7:b8:02:a6:c3:f5:da:40:1c:71:59:c8:5a:
ab:cf:c2:51:ee:92:95:64:48:cc:8c:ea:4e:92:ef:5e:ef:3e:
f9:53:a2:6d:d0:52:11:7e:57:0c:b0:20:b4:33:f8:72:2a:f1:
f2:35:93:42:c7:a1:fb:32:2a:6a:a7:23:f5:22:7b:d7:85:39:
85:ef:71:3b:b2:26:4f:bf:34:f0:30:55:86:f7:b7:7d:92:35:
d2:6e:8a:b9:cb:7e:31:83:b8:22:1a:ca:14:38:f7:cf:e0:8b:
05:6f:6f:c9:5c:ef:ea:ff:b9:56:ee:5a:5c:c7:c0:7b:ee:01:
74:2d:2c:a6:b6:9a:9f:30:12:06:2e:39:13:64:c0:4b:20:ef:
b9:ab:20:a6:8a:7b:df:63:97:87:0f:ed:02:79:16:40:52:2c:
37:6d:f7:1a:1b:86:54:86:da:16:4c:1b:b5:b5:77:2e:41:81:
2b:fe:6d:53:49:fb:32:3b:af:52:5d:1b:7e:ff:51:03:79:79:
7b:7f:69:19:21:c4:45:75:3e:7f:b2:44:48:5b:de:ca:c9:47:
f2:8f:34:e6:9c:a4:da:0d:69:28:7c:2e:dc:4e:94:7a:5a:61:
ed:8c:1a:b4
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYzFbssEVIaZr3MeQZt761ckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWFiNTFlOGU1OGNjMTRlZDljYjM1NzMxYWYxZDAxMWRiZTJlMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJvW8YZ8yq2lF8K0TMszT9GxfX2P
nSCwXHz96T1zf2CK6EFIBYY5b9duDPVT4Bc3rDckqRs3+LbCjHOYoMt7MTcfpp6v
VRGyqtVT8PEFZM387xkC6/tCvpSU1C0RMp/yGH+1rSTzpXgI7YRnamJ8yEkDTdHv
noN0xzC78VBD2yr2oYDpb2p68Ux42y6ziQ2Uz0eriG9WoVgnDbBcBGp/fiM2sJUa
qHrpDnviJWaX0oBhGXq+FF7DVjJF8PQ9cJJcMJZwR0wnMe+H5y50HJkBs5fO622X
7IRmeyUD/+Jb15p7CCnCPWmadw657O+sEBRIFL45S666CMEJatBLNzEFywIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFGWrUejljMFO2cs1cxrx0BHb4uEuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2NlZmYx
YS1lYzY2LTRkNDUtYmE5Zi00ODhhMjIyOTljYTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvY2VmZjFh
LWVjNjYtNGQ0NS1iYTlmLTQ4OGEyMjI5OWNhMS8xL1phdFI2T1dNd1U3Wnl6VnpH
dkhRRWR2aTRTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF
BwEHAQH/BCgwJjAMBAIAATAGAwQAXo6AMBYEAgACMBADBwAgAQZ4C5gDBQMqCg8A
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrzjANBgkqhkiG9w0BAQsFAAOCAQEA
cumwG8vZWsQ3ZDqCH673Z5YCqajzNwqnuAKmw/XaQBxxWchaq8/CUe6SlWRIzIzq
TpLvXu8++VOibdBSEX5XDLAgtDP4cirx8jWTQseh+zIqaqcj9SJ714U5he9xO7Im
T7808DBVhve3fZI10m6Kuct+MYO4IhrKFDj3z+CLBW9vyVzv6v+5Vu5aXMfAe+4B
dC0spraanzASBi45E2TASyDvuasgpop732OXhw/tAnkWQFIsN233GhuGVIbaFkwb
tbV3LkGBK/5tU0n7MjuvUl0bfv9RA3l5e39pGSHERXU+f7JESFveyslH8o805pyk
2g1pKHwu3E6Uelph7YwatA==
-----END CERTIFICATE-----
Generated at Fri May 3 03:06:31 2024 by rpki-client on console-fra.rpki-client.org