Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
File: ZeuO9EGD-OOpyIenviaz8HE8E70.cer (raw, json)
Hash identifier: Xh8yyoyf/mLxJE0vwj0oRpc4TV8H6b3N0qxBntWuJEA=
Subject key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0BA57715FAD3BA55C265A9F8F5A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34711
IP: 195.64.178.0/23
IP: 2001:67c:2a44::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0b:a5:77:15:fa:d3:ba:55:c2:65:a9:f8:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:12:c4:59:45:65:29:08:4a:64:10:b0:e0:
e2:aa:af:f8:5e:ef:a2:bf:bb:e2:47:ef:d9:7f:4a:
95:13:1f:9c:08:5f:9a:28:72:09:37:0f:38:b2:b2:
0b:9f:49:29:a8:51:eb:05:cc:37:bd:de:2f:8f:89:
74:81:ad:3a:e3:38:41:df:5f:c5:f2:0b:43:c8:e3:
c5:a4:13:31:8a:62:e6:83:61:55:bb:62:6c:29:b7:
a0:14:85:1f:44:db:b1:5a:1f:7f:32:31:83:af:cb:
b9:7d:d2:fa:4e:55:51:9a:5e:fb:32:a0:e7:b1:0d:
4b:61:25:3e:9d:b5:07:66:c3:95:73:38:c8:d9:5a:
75:a7:fe:8b:8e:76:4f:3e:ff:e1:3e:e7:44:34:b0:
ff:c7:ba:37:c6:55:83:7f:95:c2:e7:0c:03:16:a0:
3c:51:86:b6:19:1d:ed:08:37:48:3b:45:8d:c0:09:
69:fc:41:72:5f:92:d8:87:61:4a:d2:69:6c:9e:94:
57:1a:a5:12:a1:de:f3:aa:1d:7b:c1:7d:be:04:bc:
08:95:0c:cf:90:b7:96:f6:09:41:25:89:cd:b6:28:
0e:bc:ed:97:15:c9:81:43:6f:51:30:8e:3f:a1:4e:
52:74:5b:2a:b6:13:57:eb:18:18:cd:9d:82:9a:22:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.178.0/23
IPv6:
2001:67c:2a44::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34711
Signature Algorithm: sha256WithRSAEncryption
60:94:c9:e8:29:db:8d:f1:7b:68:5f:7c:a8:66:04:fc:d4:4a:
8a:d8:99:ea:d3:2f:cd:84:5f:f7:5e:15:64:0c:89:90:c2:52:
fe:63:a8:31:51:56:03:b5:52:95:bd:fd:2d:d8:d6:6b:51:d0:
4d:47:7f:39:53:41:2b:e2:da:f9:68:b0:1d:9a:ea:fb:fd:96:
a2:fe:3c:b9:07:6e:dd:bf:7c:c6:68:18:f9:65:b5:46:05:3b:
48:23:26:92:88:5a:71:e1:e3:20:ed:3b:b5:89:4e:4a:09:b2:
e1:07:0c:5a:3c:98:ec:4c:75:85:68:1f:f2:fb:c5:86:78:f0:
56:95:d0:47:f7:0f:c0:42:6e:b1:22:36:c0:dd:a3:49:28:00:
60:54:39:0b:37:8e:85:53:48:44:3d:40:bc:1c:66:13:15:36:
fa:ac:d4:5e:03:ad:e6:e7:86:a0:fc:fb:9b:f2:df:e4:06:1e:
5f:cd:b2:5d:6c:8f:f9:25:e5:3d:a8:c2:1c:7a:68:c7:79:3b:
5f:21:b7:cc:41:d4:3d:67:0f:a7:53:06:01:16:40:05:d2:ae:
65:78:60:96:e3:87:4f:ec:a6:96:ae:6e:4a:c2:1b:13:96:8f:
ec:73:e5:bd:94:17:22:b1:d0:4e:63:30:ce:8a:43:2f:8b:d5:
19:52:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:06:36 2024 by rpki-client on console-fra.rpki-client.org