Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
File: ZbfWaZg1v-moCB38EU3xv20hXac.cer (raw, json)
Hash identifier: tBnI1nwvp09GU4eQ2DWmZqYkagOb68iaIL0avi+2WGY=
Subject key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DC1AE5CFCB27BCB933ED14357941C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.9.208.0/22
IP: 195.216.160.0/19
IP: 213.182.192.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c1:ae:5c:fc:b2:7b:cb:93:3e:d1:43:57:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:15:d6:4b:b4:d8:10:52:ae:32:e6:56:22:
a5:da:87:35:7f:63:1c:50:eb:64:b7:0f:8b:db:7b:
cb:6e:d9:fa:2b:61:43:49:ae:5f:6d:0d:4a:6f:22:
40:51:45:fd:71:8e:7b:50:d9:45:a3:91:16:8b:8c:
88:ec:5f:1a:0a:9d:cc:c1:bf:ee:61:18:bf:88:cb:
0b:5c:6d:43:82:4d:2a:eb:e5:74:a2:ba:a4:0f:9d:
da:cf:2a:0f:d8:b1:a0:6e:bd:1b:c3:7a:fb:0f:83:
4f:e6:12:64:00:7d:eb:28:82:de:d7:e1:90:da:61:
87:1d:55:47:92:20:fb:f1:df:28:2a:ea:4d:e2:d6:
ca:73:3e:5f:20:d2:bb:25:e8:f0:cb:16:57:d4:d9:
e9:dc:f2:19:70:61:cf:82:65:c8:2c:95:a8:13:88:
c4:00:b9:a9:ab:5e:6a:6f:75:2a:d6:c3:cc:37:45:
8e:30:7f:e5:1e:b7:1a:bd:af:60:b5:2b:db:0e:9d:
e6:94:3f:f1:21:03:90:80:99:b4:f5:d7:0a:e1:5a:
6e:f4:40:3f:f1:ac:26:0a:64:40:4e:40:06:ab:81:
e2:53:93:2b:bb:6f:75:4f:c9:8d:21:64:e7:f8:99:
25:2e:88:81:21:f9:f1:08:e3:30:df:51:d9:4a:db:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.208.0/22
195.216.160.0/19
213.182.192.0/19
Signature Algorithm: sha256WithRSAEncryption
49:20:a0:5f:45:18:f4:08:d4:bf:55:cd:08:c6:ec:ff:e5:f9:
bd:e6:6a:c0:4b:d3:61:d2:f8:07:ab:9a:40:93:8e:96:94:14:
0a:2b:07:1d:e0:ef:58:1c:ca:87:59:16:c6:61:eb:f4:4d:b2:
12:ec:3e:a9:47:12:1c:93:4b:7f:ad:36:e2:0b:87:13:74:11:
62:3b:7f:ff:61:e2:6d:45:49:59:49:94:f9:89:00:3a:c6:8e:
88:29:6c:40:be:a4:6e:4c:6f:ff:f3:a7:8c:3a:18:4f:ba:fe:
9f:f9:a8:5e:c2:49:9d:a3:cb:e7:16:87:b7:02:8b:44:e7:b2:
f5:79:54:02:70:70:9a:ba:34:28:7b:44:6d:e8:69:27:6e:86:
fb:17:d2:d5:04:f6:4f:80:33:08:53:1d:59:26:c3:10:00:29:
c0:69:a2:90:7a:1a:45:50:1d:2c:ae:43:98:0f:13:15:fa:1e:
d1:c3:87:04:f7:90:78:07:8b:1e:c6:f4:64:27:a3:bf:1f:23:
99:6f:fe:83:f6:08:8b:2b:62:fb:fa:78:a7:1e:55:5b:3b:20:
a5:f4:df:18:6c:db:d1:2c:d6:05:59:6d:67:a8:7a:51:43:61:
7a:9f:55:22:17:3a:e0:f4:14:7b:53:c5:b0:ec:60:f0:ad:ee:
95:60:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:36 2024 by rpki-client on console-ams.rpki-client.org