Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
File: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer (raw, json)
Hash identifier: 0f8sEDKlHpZ9hLnnNa49AtRx13QSYxl2LEy3J1heUk0=
Subject key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B71FCC5FF8F9C004AC8DB99A5B3FD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12857
AS: 28918
AS: 205867
IP: 185.55.232.0/22
IP: 188.95.0.0/21
IP: 193.28.96.0/21
IP: 194.59.172.0/22
IP: 194.147.133.0/24
IP: 2a00:b400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1f:cc:5f:f8:f9:c0:04:ac:8d:b9:9a:5b:3f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:65:98:fa:57:4e:ca:6e:c6:76:61:de:a5:
c6:a0:f3:a6:25:4e:ca:5d:45:4c:32:0f:eb:85:fc:
31:56:aa:82:87:5c:a0:3f:0e:df:c6:77:2c:13:45:
b6:9c:c9:4c:77:04:20:f9:80:81:f1:22:2e:2f:25:
72:cc:32:a2:88:37:38:1a:40:79:93:8c:68:5b:9f:
94:cd:32:45:a6:f7:bf:d3:50:8b:f9:9f:a4:9d:16:
65:5a:9c:a8:12:ff:09:c1:d7:23:fd:d8:6f:8f:05:
4a:44:10:d2:cf:08:93:90:e7:76:b5:c4:fb:43:66:
61:df:46:a0:33:82:7b:ce:89:27:e2:4b:01:26:b4:
e7:b9:d1:37:c8:a2:8b:08:18:89:54:d5:29:33:e5:
ab:40:84:50:8b:c3:d5:b6:33:d9:39:72:b0:59:50:
3d:e5:6a:50:2e:8e:0f:de:91:82:d2:3e:f9:d7:13:
34:4f:e9:d7:92:11:8c:1c:39:6c:a5:c5:d1:ba:05:
90:09:93:e1:eb:ca:67:07:e2:7f:98:2a:b1:a3:16:
8a:02:b9:07:57:e7:91:d7:64:05:e8:9d:eb:87:da:
d4:0f:8e:ed:03:4e:c6:9b:f8:6a:a3:ce:1b:96:ec:
ca:18:4c:36:54:dd:61:9b:9a:75:e5:0e:d4:18:2a:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.232.0/22
188.95.0.0/21
193.28.96.0/21
194.59.172.0/22
194.147.133.0/24
IPv6:
2a00:b400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12857
28918
205867
Signature Algorithm: sha256WithRSAEncryption
30:30:18:e0:c2:44:80:6f:58:aa:62:21:45:04:a6:0a:0c:31:
2c:82:8c:b8:73:80:ba:39:0a:ba:23:f8:35:94:e3:fb:64:68:
75:1e:45:48:42:2c:f7:1f:bf:63:8b:3e:de:5e:99:7b:5c:74:
16:7b:0e:d4:92:9d:91:4b:ac:c5:66:57:f5:b0:8b:79:7b:8d:
6b:91:be:93:b4:6e:e0:b4:39:78:7b:6c:18:9c:e2:35:a9:a3:
2e:0b:c8:57:5d:5d:3b:75:b8:a9:70:49:7f:5d:1b:33:52:6f:
19:de:68:ea:34:41:fe:e8:2a:af:20:33:c4:da:e4:be:74:1b:
69:84:43:a8:72:cc:05:0d:be:3f:9f:c9:b3:8d:bc:b2:d6:cf:
79:cc:c4:7f:44:7e:82:b2:b3:89:d4:72:63:a9:dd:b9:d8:3b:
dc:f0:fc:5e:4c:05:06:1f:1e:0d:f3:4f:67:d0:0d:68:40:f4:
9e:68:bc:bb:ba:17:fc:53:37:c1:34:14:c8:cd:4c:fb:74:f4:
93:c0:c6:17:c7:91:00:2a:56:bb:43:5a:5a:da:46:36:f5:60:
08:26:be:35:79:d8:c6:15:f0:6f:b5:2a:8a:c5:cb:3b:92:9d:
f9:ff:57:7f:91:4f:29:a6:96:eb:0f:c6:ec:20:cb:00:1b:0f:
26:9c:36:69
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAYzDtx/MX/j5wASsjbmaWz/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjhkMmY2NGMzMzc0NjVlZDM4ZGE1ZjdjYzQ1ODRkZjg3ZDRhNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneBlmPpXTspuxnZh3qXGoPOmJU7K
XUVMMg/rhfwxVqqCh1ygPw7fxncsE0W2nMlMdwQg+YCB8SIuLyVyzDKiiDc4GkB5
k4xoW5+UzTJFpve/01CL+Z+knRZlWpyoEv8Jwdcj/dhvjwVKRBDSzwiTkOd2tcT7
Q2Zh30agM4J7zokn4ksBJrTnudE3yKKLCBiJVNUpM+WrQIRQi8PVtjPZOXKwWVA9
5WpQLo4P3pGC0j751xM0T+nXkhGMHDlspcXRugWQCZPh68pnB+J/mCqxoxaKArkH
V+eR12QF6J3rh9rUD47tA07Gm/hqo84bluzKGEw2VN1hm5p15Q7UGCp3aQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFGaNL2TDN0Ze042l98xFhN+H1KdEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzgyOGIw
Zi04MGU4LTQyN2ItOTcxZC0zOGJiY2ZhZWU2Y2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvODI4YjBm
LTgwZTgtNDI3Yi05NzFkLTM4YmJjZmFlZTZjZS8xL1pvMHZaTU0zUmw3VGphWDN6
RVdFMzRmVXAwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQCuTfoAwQDvF8AAwQDwRxgAwQCwjusAwQAwpOF
MA0EAgACMAcDBQMqALQAMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAjI5AgJw9gID
AyQrMA0GCSqGSIb3DQEBCwUAA4IBAQAwMBjgwkSAb1iqYiFFBKYKDDEsgoy4c4C6
OQq6I/g1lOP7ZGh1HkVIQiz3H79jiz7eXpl7XHQWew7Ukp2RS6zFZlf1sIt5e41r
kb6TtG7gtDl4e2wYnOI1qaMuC8hXXV07dbipcEl/XRszUm8Z3mjqNEH+6CqvIDPE
2uS+dBtphEOocswFDb4/n8mzjbyy1s95zMR/RH6CsrOJ1HJjqd252Dvc8PxeTAUG
Hx4N809n0A1oQPSeaLy7uhf8UzfBNBTIzUz7dPSTwMYXx5EAKla7Q1pa2kY29WAI
Jr41edjGFfBvtSqKxcs7kp35/1d/kU8pppbrD8bsIMsAGw8mnDZp
-----END CERTIFICATE-----
Generated at Fri May 3 10:22:43 2024 by rpki-client on console-fra.rpki-client.org