Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.cer (raw, json)
Hash identifier: LrBlbp0f4Q2ERrhY80zMeLUFw2XxV+vNM8PbGiknvCo=
Subject key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4E0A54ED6443F3419ED5EC3D4319
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.124.232.0/22
IP: 2a06:b600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4e:0a:54:ed:64:43:f3:41:9e:d5:ec:3d:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:1b:aa:5d:76:79:d3:e0:5b:88:a5:3f:2f:
d1:dc:fd:f1:b8:f3:ac:b4:a3:41:a6:60:d5:b8:18:
aa:c0:db:7c:24:24:d6:b9:bb:2a:29:2b:7b:9d:e6:
7c:53:ec:56:6d:62:19:c6:d1:37:c7:13:7f:71:43:
76:e0:7a:9d:64:db:b1:da:47:67:85:af:ac:80:7e:
6e:57:3b:e0:21:f2:bc:90:cb:d4:0c:24:ec:66:36:
b8:d1:13:f2:7e:a8:35:bc:c1:1d:be:02:24:c0:37:
4b:d2:ca:8f:7b:b8:4e:59:49:a6:43:c8:d6:10:b1:
32:95:44:3f:c9:c4:5d:77:54:ec:16:ae:7a:97:da:
74:bc:05:bf:1e:7d:5e:a4:6f:5b:5a:c8:ad:f5:f1:
92:df:67:3b:92:a5:ea:c3:2f:5e:55:bb:2b:60:cd:
4a:cb:44:ab:87:61:6c:78:a3:f9:d2:af:e8:45:b1:
e2:87:3b:b9:90:31:0a:a3:e7:74:43:b4:64:7a:43:
4c:50:7a:ee:6e:b7:ff:72:7f:84:4a:18:c5:87:20:
3b:cd:bb:6d:14:e8:1d:54:41:a0:27:01:97:8f:45:
52:e9:b7:1b:54:6f:5c:74:52:72:8a:5e:ce:5a:38:
26:2c:86:c1:e4:06:ef:ad:7d:d7:34:4b:27:e2:fe:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.232.0/22
IPv6:
2a06:b600::/29
Signature Algorithm: sha256WithRSAEncryption
0e:eb:9f:ae:30:2a:a2:fd:ca:47:36:ef:74:fe:5c:f2:59:57:
b5:c2:4b:38:b5:30:42:8e:49:3f:97:c2:66:c1:6d:50:0c:69:
c4:e3:dc:14:2f:b2:b9:a5:6a:40:3a:13:a5:34:be:19:e5:ea:
43:2f:96:82:af:d3:93:4c:08:f0:fc:f8:bf:59:f7:dd:ec:3b:
07:41:a8:59:c6:7a:8f:2e:07:0a:14:31:28:12:2e:2c:19:de:
e4:cb:d6:ff:09:67:5c:a1:26:90:fd:ef:6b:60:8d:ec:bb:1f:
9e:e4:f5:e0:54:e8:d9:40:47:a8:dc:e4:99:40:7f:93:eb:93:
be:4f:f8:69:0c:cc:9e:f5:ad:e0:40:7d:ae:15:cc:f0:3e:dd:
e5:9a:96:96:7c:68:92:47:f6:e4:63:36:a6:cb:8f:a1:24:8a:
da:ad:7f:cf:d4:2a:5a:40:3f:2c:37:0e:da:2b:25:15:5b:74:
3e:40:c9:79:8c:a1:c3:24:2e:8d:6c:a4:b3:15:47:5a:e0:bd:
10:29:37:6a:33:df:4f:12:42:37:70:8c:c2:0b:24:14:73:82:
ee:05:42:55:2e:28:6e:2b:a5:25:0b:38:ee:79:e3:49:fb:86:
94:f4:ef:55:36:c1:f8:5b:0e:9f:d3:02:09:f0:ca:c3:75:ba:
7c:57:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:06:35 2024 by rpki-client on console-fra.rpki-client.org