Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
File: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer (raw, json)
Hash identifier: /KibcLQt/lbSBYIrO7CCF1ODAqUvtJJ4vYtzgQy/sQc=
Subject key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA295A6BC8FC4278A935835C938D97CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211651
IP: 185.251.69.0/24
IP: 2a13:1700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5a:6b:c8:fc:42:78:a9:35:83:5c:93:8d:97:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:30:e5:12:3b:7d:43:b9:2b:b9:cb:89:2d:
43:20:52:2b:37:b2:22:e2:35:11:f8:b2:0b:d7:b5:
47:75:41:96:78:7b:1b:43:70:1b:8b:f9:28:61:10:
50:32:b3:98:de:85:e3:e4:ad:0b:43:56:f6:8f:de:
27:69:f4:39:a3:33:b5:1a:dc:6d:f4:9a:78:48:04:
e4:1c:e7:ad:35:ae:0a:42:34:52:41:f2:cc:fe:ef:
98:77:9d:20:16:9c:be:4c:b6:0f:c3:63:56:43:20:
92:b9:96:2c:7b:43:0b:28:92:46:19:98:e7:f0:f8:
43:f0:7f:f9:b3:0d:b1:2f:90:41:90:ea:16:98:c9:
11:b3:14:1d:54:61:2e:3d:2a:b2:6b:11:07:6c:78:
7c:de:c8:cd:21:1a:42:b1:8b:9e:da:fd:6b:2d:30:
f5:b5:eb:38:81:da:84:07:74:50:98:00:9a:73:05:
01:ad:f8:0c:05:6f:12:28:b2:e5:59:1b:5c:79:4c:
ee:b5:85:7b:0b:f7:30:ba:8e:44:f3:f9:5a:60:0b:
fd:70:4e:7f:a2:64:5f:70:84:99:ad:93:f4:b8:a1:
a4:4f:37:94:23:a3:1c:9d:99:6c:21:c7:e4:ab:d3:
1d:f3:f2:3d:24:28:5e:e0:6f:57:83:06:38:e1:3c:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.69.0/24
IPv6:
2a13:1700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211651
Signature Algorithm: sha256WithRSAEncryption
13:52:20:5f:2a:cb:3c:8b:c5:ad:f7:34:f8:12:09:cf:43:18:
1b:0e:6d:d7:e9:01:e2:74:f8:b7:91:fe:28:d0:29:49:4d:75:
9e:35:61:b6:81:86:e3:08:33:b9:91:55:5c:6c:c6:63:9e:32:
2d:d7:85:2a:08:ed:bb:c3:6f:94:44:b5:86:ff:67:7b:30:e8:
22:b8:5d:d7:08:7b:e2:51:96:50:69:cb:2f:48:bd:b0:10:29:
aa:45:35:fb:9b:55:07:15:ff:b4:51:5b:2c:f6:8c:a4:94:68:
51:c5:6f:72:f1:8f:ce:4a:83:eb:ef:ab:79:a7:42:94:42:b7:
db:10:7a:cc:17:99:15:9d:36:8e:41:e2:3a:f1:9a:e8:1f:23:
91:c7:8f:38:56:da:89:55:df:c4:14:2a:9e:04:7e:55:91:fa:
d6:7f:e3:ae:09:59:e0:84:e5:b2:05:f1:78:ed:dd:93:7f:72:
cb:e5:ff:c6:71:9a:83:f1:70:1d:98:90:42:39:89:46:26:3b:
9c:1b:4e:25:99:c1:ea:fe:8f:56:1f:d2:b1:b4:92:06:44:20:
34:bb:05:17:84:02:fd:18:19:21:64:f5:4b:5b:11:9c:17:c8:
a1:f3:e7:56:03:c4:f5:59:05:d3:13:eb:35:c0:b9:19:79:5e:
3e:7d:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:42:10 2024 by rpki-client on console-fra.rpki-client.org