Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
File: ZboV1Huk9EgnZEctjZcUah67v4Y.cer (raw, json)
Hash identifier: BP+getN2BBkKM5NHBL1bXIkZM6T7wYIPqfGYLEVCzt8=
Subject key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC06107BD5DB6CCD98A2B0ABFB0588131
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Feb 2024 08:00:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.235.174.0/24
IP: 185.38.103.0/24
IP: 188.227.204.0/22
IP: 195.69.225.0/24
IP: 195.88.202.0/23
IP: 2a02:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:61:07:bd:5d:b6:cc:d9:8a:2b:0a:bf:b0:58:81:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 08:00:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:ec:a6:7c:91:81:c3:cc:21:40:80:5e:c4:
7a:f5:ef:d4:fc:30:fb:82:74:14:17:76:c6:7e:d8:
1a:de:2f:fe:fd:0f:85:37:06:7e:87:c7:f0:c7:9b:
c1:4f:2b:05:0e:d1:4b:3b:80:4d:75:f3:8e:70:36:
c6:69:92:b1:33:54:7f:64:fd:d5:ce:2f:af:5b:11:
6c:1c:c7:9c:28:e5:f0:d5:ca:95:b5:95:21:b4:18:
2c:d2:f9:de:29:0f:56:4c:dc:03:57:42:c2:8a:d3:
30:42:7d:2c:11:e4:7a:dc:fe:ef:d1:60:03:a1:1d:
45:54:c7:11:b3:2f:83:7d:9a:d9:15:ca:51:81:fb:
c2:b3:8a:3b:e3:be:26:0e:56:4f:95:58:db:68:ba:
66:76:0e:f4:5e:c3:42:f1:1e:09:cd:e8:b0:3d:c7:
e0:57:fc:7d:20:cb:d1:7d:28:b8:4f:05:39:3a:c6:
15:c7:a1:45:82:9f:e8:a9:b8:7f:50:bb:38:40:96:
42:64:62:96:da:d0:45:03:c8:87:5d:f6:8f:ca:bd:
14:36:ba:6e:ed:c6:38:2a:3e:86:2a:4e:db:c0:36:
11:6e:68:77:d4:55:f4:cb:02:21:fa:95:50:14:79:
e5:e7:ab:eb:b3:9e:44:2e:0a:56:89:4d:10:67:42:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.174.0/24
185.38.103.0/24
188.227.204.0/22
195.69.225.0/24
195.88.202.0/23
IPv6:
2a02:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:22:0c:9e:46:15:1b:bb:f2:23:85:db:9a:80:3b:bd:eb:c3:
81:46:70:40:a5:b0:67:d9:26:4f:fc:39:27:9d:80:7a:45:59:
35:54:76:68:78:03:1f:fd:6e:ad:ec:36:61:14:a4:fc:0a:a3:
e4:37:a6:94:a9:46:45:14:ce:77:01:6b:89:a1:8f:8d:69:cf:
9d:3a:03:47:6f:2c:c5:60:33:89:be:ef:63:43:89:92:a3:e5:
69:72:d9:b9:2e:f1:b9:69:77:e7:ce:5e:7b:dc:e0:5a:84:d4:
72:e2:90:be:04:c7:a3:b8:8b:8f:02:73:94:35:d5:d9:45:f3:
95:00:98:3e:02:31:70:e0:dd:47:e0:70:14:8c:4e:88:00:da:
bb:d9:80:e4:85:a4:58:ac:09:bb:32:08:ad:49:25:9b:32:d2:
34:2a:4a:ae:41:72:ed:02:c6:b5:45:a1:9d:f0:db:8f:03:92:
e0:42:bb:5d:e2:62:98:9e:f6:41:7e:c4:95:0e:fa:d9:83:df:
55:a6:c7:ed:23:a6:29:e2:83:72:50:6a:6d:2c:f1:73:b9:b9:
7b:b3:f5:38:9c:53:5d:69:f0:92:e0:70:26:73:bb:b4:b6:09:
27:61:fc:32:0f:0d:67:bf:b7:3c:8d:2a:7a:3b:2c:5d:47:7e:
d6:f8:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:24:29 2024 by rpki-client on console-fra.rpki-client.org