Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer (raw, json)
Hash identifier: Ju++l/wEET5xpILVdOGZpWLGwgimbZmbI+wwv/av48Q=
Subject key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906D37C84E1B97D73D3C81A87A19272EF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jul 2024 07:34:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31182
IP: 193.8.139.0/24
IP: 2a14:5ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:37:c8:4e:1b:97:d7:3d:3c:81:a8:7a:19:27:2e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 07:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:25:e0:7f:c0:34:a6:1c:46:f4:cd:ff:7a:
34:63:de:b8:69:72:16:c7:19:5b:23:7d:6b:e3:74:
6f:4a:06:3f:7f:e7:10:e6:d7:a9:06:67:8b:7e:39:
92:4d:10:0a:70:b1:a1:4e:cb:b0:ab:82:53:11:95:
89:b5:07:56:2e:92:28:16:f0:79:53:d7:1a:9d:2c:
ad:f3:37:02:39:91:5d:bc:9c:d2:eb:4e:68:f1:cd:
cf:5f:bd:a2:4b:f0:d9:f2:d0:5b:7b:c5:c3:51:55:
70:31:05:b6:98:3e:70:5b:d3:19:5d:f5:a5:a4:9b:
2a:be:46:fc:01:8a:bc:3b:e5:52:49:79:52:0e:40:
80:02:a2:75:83:b7:fb:98:07:bc:5a:1d:db:69:d7:
c6:64:12:d1:57:1e:9b:96:9c:93:e3:5d:80:00:16:
44:f5:3f:12:01:69:cc:f9:11:a6:19:2e:5b:d5:28:
47:ca:08:11:56:b5:31:bd:45:bd:b4:01:0e:3b:45:
76:05:e0:a4:ef:32:c6:7a:23:b0:7e:e4:69:17:9b:
b4:f8:6c:8c:83:4e:9c:3c:70:16:dd:83:90:6c:49:
bc:4a:15:c9:62:9a:79:d5:39:67:09:08:ec:01:ad:
bd:7f:1f:d6:b5:c4:bf:03:97:04:3a:f9:c9:fc:f7:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.139.0/24
IPv6:
2a14:5ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31182
Signature Algorithm: sha256WithRSAEncryption
05:70:4d:d1:6f:3f:3f:e7:9d:04:e3:5e:17:b3:3a:50:01:9b:
c9:62:5f:66:91:90:04:4f:7e:56:82:80:86:5e:e4:4b:c8:b6:
34:74:39:ef:1f:50:d7:ff:c2:7f:a6:d6:93:92:37:42:39:77:
58:44:71:ea:d0:26:47:40:fe:8f:af:4a:db:24:63:93:72:db:
6c:8a:1c:a8:51:b6:a2:dc:6f:b9:6c:93:90:f6:23:d8:1f:4d:
b5:de:54:e1:86:09:5b:39:02:f2:c3:db:0a:e5:f2:31:c4:01:
e9:bb:33:19:fa:1d:1b:06:da:96:04:25:14:e7:a3:2c:98:90:
e5:70:1f:4f:0a:d5:fd:ed:7a:5c:9a:4c:84:39:52:67:83:bb:
90:6d:98:8a:8f:67:3b:81:cb:05:f1:d2:71:55:04:ce:f3:e5:
60:dc:2a:68:b5:de:3a:86:d6:c7:81:d7:ab:54:89:fe:c4:93:
a0:32:dc:1d:72:7c:8c:e6:56:6f:86:ae:e8:26:ee:75:df:12:
2d:c1:18:00:28:b5:66:33:2d:f6:04:3d:24:13:ea:92:fb:bf:
96:6d:8e:d7:d6:71:c9:db:7f:ab:c5:6f:9d:19:16:a0:1b:03:
4a:23:d6:1c:36:79:4f:1b:e4:bd:46:bf:d8:b0:8d:a3:0a:6d:
f8:a7:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:52 2024 by rpki-client on console-ams.rpki-client.org