Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
File: Zp7b-uhlCtvWryB7bqIlZUObSZw.cer (raw, json)
Hash identifier: 7hV5PsOFgMe/zZQy+PXS6AdBKLxpJ2lMgwaMyPEsSjM=
Subject key identifier: 66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC871538439311B4F634B50583067424F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.217.200.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:53:84:39:31:1b:4f:63:4b:50:58:30:67:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=669edbfae8650adbd6af207b6ea22565439b499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:28:84:3c:4a:75:b1:9b:23:12:db:ab:cb:
19:ce:93:58:79:4c:33:e2:a3:59:33:bc:77:e7:b2:
90:53:05:72:9f:52:3d:c7:d8:41:27:0a:3d:1d:c1:
03:04:ca:e6:03:b0:0f:23:21:37:b0:2f:eb:7b:d3:
08:92:3d:17:2e:d8:22:ab:3f:d2:75:47:ca:f5:1f:
c2:c4:c1:a7:6b:42:95:c6:fc:d5:b9:d8:31:17:d3:
04:62:38:ac:86:dc:30:f6:60:1a:21:49:0e:74:23:
59:a0:64:da:39:5b:37:44:ce:c0:e3:c3:31:e6:3d:
cc:45:e2:d9:a0:53:a5:c6:d8:f2:d5:57:e4:ec:11:
cf:f0:dd:1c:fe:58:6d:15:14:39:15:62:03:1b:40:
4e:e5:2b:05:da:b6:a1:0a:18:3e:af:15:e3:15:c9:
fb:ec:29:f5:9a:31:ea:61:87:84:a7:94:65:a6:ea:
44:ed:84:fb:98:49:ed:e5:da:45:d0:78:72:7c:85:
62:bd:b7:38:39:39:9f:84:14:44:9f:7d:75:bb:ff:
eb:f3:87:30:ed:2f:5f:eb:43:61:f8:45:46:26:43:
aa:b5:07:68:ad:ee:84:22:7f:90:21:ca:e7:4d:c5:
ba:21:28:b0:fe:b0:f2:fa:dc:1c:f8:9a:26:3b:16:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:72:11:fb:6e:ed:d3:bb:8f:24:fb:45:9b:63:c0:7e:d9:53:
c2:a0:d6:5f:b6:18:05:1a:51:10:5f:7f:5b:7c:6a:fd:0c:81:
35:bd:97:82:55:08:14:9d:96:f3:f0:53:c1:27:13:1a:1b:4d:
b5:64:55:e7:5d:94:09:3d:8b:8e:3b:c0:a2:80:66:be:e8:eb:
ff:01:9c:55:a6:8e:ed:d2:78:68:32:1e:b4:46:a6:17:46:3f:
9e:9a:f0:16:5c:1d:d8:d2:21:28:4a:50:14:e7:1a:b0:ae:52:
34:f1:95:56:dd:d0:15:6a:1d:7d:7c:11:6b:34:0c:e0:1a:99:
5e:e7:15:5a:28:8e:e5:c4:1c:b6:cd:81:32:c8:4f:f1:81:64:
6a:68:86:ec:32:d1:82:0b:cd:c7:53:c6:0b:c8:b4:6b:06:22:
01:bb:42:48:4d:44:1c:ee:d2:17:0f:0f:2f:ce:08:c2:26:16:
3a:88:30:5a:c5:06:ea:57:37:7c:f9:14:4b:e5:92:9d:08:e8:
61:9b:36:21:b4:01:63:95:34:01:92:11:47:a8:fa:2b:a0:07:
f7:ce:99:f1:02:0f:af:2c:64:ef:61:b5:e1:30:a9:04:e4:87:
05:5a:4c:b5:b4:cc:a9:ed:6e:37:0f:e5:f7:c7:06:83:1a:c6:
8a:84:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:02 2024 by rpki-client on console-fra.rpki-client.org