Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer (raw, json)
Hash identifier: 67MRqfEbi6GqGKKEk4Xc+96YjbWF088uLfA5xcqpbhc=
Subject key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B772EF473E44F122E115B473D312A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.33.124.0/24
IP: 2a10:a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:77:2e:f4:73:e4:4f:12:2e:11:5b:47:3d:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:0b:e9:3b:f6:b0:49:fd:bc:5a:4b:fd:2d:
fe:39:7f:69:3e:21:6a:74:20:8a:26:f9:cc:76:42:
a2:aa:c4:96:59:76:8c:77:f6:ac:52:31:31:5b:c2:
87:b6:b6:8b:1a:24:e9:9c:90:81:8d:bb:b5:9f:a3:
b4:0e:da:77:14:42:f3:75:83:73:ab:ef:86:47:2d:
e0:85:57:68:bc:df:10:77:57:ce:2c:77:3b:a7:d1:
dc:ed:05:b0:fe:f5:ce:17:02:b9:8e:a9:87:1d:8f:
21:90:e8:82:e2:a1:fe:bf:17:6f:16:63:6b:b6:eb:
b9:47:92:15:b1:4e:4a:9e:c8:c0:a7:25:e4:4f:61:
4e:f8:9e:16:56:49:07:a5:6d:d2:0f:ba:0e:ee:cf:
b1:2c:b7:88:b1:9e:11:ce:64:9a:ac:45:e7:ba:aa:
d7:12:7d:c2:f5:72:97:6f:86:d5:4d:bb:51:28:0b:
fb:7e:5b:70:c3:fd:94:91:17:46:d4:29:83:78:c8:
2c:7c:a6:21:bb:26:a9:7a:ab:f1:23:58:79:8c:d8:
eb:d9:0b:88:74:fb:52:86:bf:47:21:ba:64:89:98:
93:d8:e1:21:5c:69:ac:e9:55:7c:b0:6f:6d:62:41:
67:33:ed:b9:1a:ac:44:d1:00:2e:61:3d:09:49:7b:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.124.0/24
IPv6:
2a10:a80::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b9:32:fd:50:e1:d9:31:de:5e:77:e2:e5:34:8e:25:a0:02:
1c:3e:23:2d:ae:9b:a9:6d:56:2e:6a:b7:ad:37:42:61:cf:81:
df:a0:00:ff:fd:d0:ee:e0:5a:93:2e:da:16:10:eb:02:bf:47:
ee:19:1e:40:0e:d4:fe:76:db:34:31:46:48:ac:ad:32:e9:2a:
c8:00:a8:f0:03:2c:e3:f4:58:a7:65:8c:09:64:e5:05:7d:8b:
c5:47:c0:36:08:ca:70:4d:6e:68:ef:95:c0:ff:94:35:77:9c:
cb:9e:02:35:d5:bb:cc:6d:93:2a:7c:72:fc:3b:bd:6c:d4:c5:
ef:ca:00:66:5c:68:8f:a2:d0:41:67:6f:a2:80:7f:be:36:b7:
67:1e:7e:86:2d:16:7b:c3:b3:59:95:70:03:54:32:21:96:e0:
7a:cc:f3:2f:91:26:16:e6:04:e5:c5:d6:36:8d:52:08:e0:06:
08:6a:39:03:8d:ef:35:e4:62:10:5a:87:0f:d3:80:7a:68:d0:
15:09:b0:70:78:27:bd:03:38:cd:c0:7f:53:91:5a:5f:b0:c7:
17:40:56:28:b4:08:4c:bd:a1:47:30:f8:15:d9:11:70:44:66:
b4:5e:c3:48:e3:93:1e:3f:cc:e5:67:8c:e3:fd:09:d0:eb:e1:
5f:4d:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:55:25 2024 by rpki-client on console-fra.rpki-client.org