Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer (raw, json)
Hash identifier: SujJeFGv6sMnXD8NUyUTEAAOCkPyFh0nO7GHPCjs2y8=
Subject key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F5E2E07A9A695FEC43EE3429B08ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2048::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5e:2e:07:a9:a6:95:fe:c4:3e:e3:42:9b:08:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:de:6c:93:a0:db:7b:79:de:08:f7:6a:7e:
5a:04:5e:ee:42:68:70:04:df:0d:b4:38:90:5c:af:
dc:a0:65:71:40:4a:e9:8b:ab:8f:a7:35:48:be:3e:
8b:0a:71:3c:80:a4:f4:31:d8:56:4e:99:d3:f9:04:
74:3d:cb:44:0e:cb:db:36:69:8b:08:5d:d2:f7:57:
69:1a:26:b4:c7:b3:b8:be:dd:35:79:06:74:de:c3:
a7:6d:69:da:f5:6c:ee:46:73:59:b9:68:ab:12:4e:
7c:72:42:a3:48:a7:32:65:4f:3f:6a:28:57:8a:3d:
66:60:bb:73:93:17:4c:31:2f:10:f5:f7:f9:f2:79:
55:31:cd:23:31:a7:97:94:ed:9b:f2:02:c6:a4:95:
00:2b:f5:56:a5:a8:ac:57:39:24:19:02:3d:82:f7:
d0:2a:24:c9:62:c6:d1:a4:5e:fb:49:33:6e:f5:63:
85:83:f0:0a:4d:40:07:0b:95:ec:65:ad:85:f8:fe:
06:88:93:bb:f7:f4:f3:17:30:36:96:2e:84:fa:63:
20:68:10:7b:67:bb:0d:7f:34:92:f5:25:03:b0:fb:
70:d6:13:45:e8:6f:85:1d:84:13:48:e2:d2:03:49:
9d:ce:43:10:13:e9:9a:db:ac:8a:11:a2:c6:89:3a:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2048::/48
Signature Algorithm: sha256WithRSAEncryption
8c:3c:2d:8f:39:f0:5f:20:59:a4:7b:b4:8e:36:34:28:53:3b:
34:e1:14:85:b5:1b:d2:88:26:21:9c:d5:13:d7:53:8d:99:13:
42:08:36:6f:f0:52:b4:5e:ae:5b:ef:f6:52:8b:c2:b8:e3:5c:
07:d5:52:de:21:c4:88:47:e0:ad:5b:3f:bc:d3:74:fd:2d:5a:
22:14:56:54:02:05:36:ae:21:79:5e:1e:8c:e2:cb:60:e7:43:
ac:3e:45:b9:b6:99:ae:98:da:f7:c5:fd:05:a6:8c:61:ed:6c:
80:37:da:50:10:c2:aa:43:93:9d:45:3d:22:31:81:67:f9:ee:
54:5b:16:13:06:0f:f7:af:e2:19:f4:99:84:06:86:f1:af:a2:
53:85:bc:bd:62:14:c9:34:6a:45:4c:cd:e3:dc:db:aa:ac:c2:
65:dc:0b:58:cf:f5:10:85:fd:64:a4:cf:f5:79:fd:58:eb:1d:
50:df:19:a1:d5:21:ca:a9:03:63:ae:38:29:dc:7d:f6:7e:d0:
b1:0d:64:c2:a4:a1:7b:ef:58:c1:58:9b:e6:02:81:ea:f2:b3:
92:0f:da:53:76:cc:93:59:d9:90:f2:c3:44:8b:05:af:6d:20:
50:ad:a9:d1:7b:09:7f:95:dd:6c:ee:c8:0f:76:20:7a:cc:e1:
b7:98:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:42:03 2024 by rpki-client on console-fra.rpki-client.org