Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
File: ZszxnXthCIDbItQOybrgKxIBN2M.cer (raw, json)
Hash identifier: t+QBAkUVUJT2w4cWvg01o5aPU3pN7kYP5WevZbnNSgE=
Subject key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FDD478EBA9903077BB9F38E83C60F6FDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 03 Jun 2024 08:46:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58339
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:47:8e:ba:99:03:07:7b:b9:f3:8e:83:c6:0f:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 08:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:e2:3f:c0:66:9d:49:ef:89:84:2d:f9:ae:
24:a9:3b:8b:20:95:9c:8b:10:a0:98:98:16:d8:79:
f3:87:cd:64:2f:8a:df:64:3d:2f:fc:0e:e3:86:e9:
e9:52:3f:60:0d:0f:53:63:8a:a1:bc:01:99:9e:24:
37:f7:92:fe:29:ce:d7:f9:7f:7d:e6:03:d5:1c:5a:
c6:10:78:46:4b:b3:91:6c:88:1f:bb:44:0d:5b:80:
91:27:4f:84:57:58:14:f5:2b:37:eb:9d:8b:ea:66:
07:01:25:af:19:06:f9:fc:1b:25:25:1a:1c:5a:ab:
d1:96:e7:59:8f:10:89:02:0c:17:f8:e6:a6:7b:ee:
42:d8:b4:e9:6a:21:2a:50:1b:52:01:ce:08:e0:c4:
6a:d3:2b:a7:db:4a:c6:a0:13:cb:e9:ac:ef:fa:73:
89:aa:63:8b:80:8a:c8:a1:7e:65:1e:84:46:71:96:
9b:d3:7a:6e:07:92:fb:7b:b5:8c:1b:86:22:d2:04:
69:54:7d:f9:cb:4e:4a:0e:bc:fb:43:e5:e6:a5:c8:
77:0d:1e:ca:6d:31:0a:88:41:80:dc:75:4d:37:04:
df:e2:d1:4e:3d:14:a3:7c:34:f5:96:99:77:fd:15:
0d:9a:72:18:2e:dd:0f:1b:52:a5:c6:d8:0b:bc:eb:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58339
Signature Algorithm: sha256WithRSAEncryption
7c:42:88:48:c1:4f:54:1b:ff:e0:c6:43:4c:8f:28:5c:ce:a0:
3a:87:a7:91:da:2a:12:67:d6:e6:cb:ed:59:8c:fa:05:61:f6:
c5:97:fb:88:ad:51:97:ba:65:22:27:81:22:7e:cc:3a:74:c1:
08:62:a9:ad:e4:f8:97:0f:c8:a4:d9:72:32:20:17:ca:ae:30:
f4:b6:ac:2e:86:f0:27:c6:79:15:bb:de:d5:30:92:e7:2f:e2:
34:15:35:b2:f5:58:8d:04:99:66:d1:64:fe:35:54:e3:06:bd:
be:c0:e2:9c:d2:c2:fc:2d:a8:c7:47:2a:30:96:0b:48:8d:6e:
dd:3b:6a:5a:73:fd:79:96:dd:54:ec:d9:83:af:76:98:92:fa:
09:59:27:60:77:5e:ff:2f:fc:8d:67:5e:6d:4d:53:97:ab:f2:
be:b8:b5:d7:ee:a0:6c:6f:22:78:6e:8e:b9:0d:5a:3c:56:f1:
56:14:ce:84:2c:dc:a1:76:ea:6f:d9:22:3b:cb:5f:88:80:aa:
70:a4:ec:e5:c3:c5:8e:b7:0e:10:f0:07:e6:6c:b2:f0:13:40:
2c:66:c6:8d:b5:5f:de:45:9a:d0:41:ea:0b:14:70:05:31:34:
8a:d9:c7:18:de:0b:c0:f5:8c:8a:ec:28:79:0c:1c:d3:15:b7:
d0:ae:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:03:57 2024 by rpki-client on console-fra.rpki-client.org