Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
File: ZszxnXthCIDbItQOybrgKxIBN2M.cer (raw, json)
Hash identifier: Z7c2m8WCnHs0I2j9cZgUf7/pphXE+w9ydOVyWak4zn8=
Subject key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FF33726C1062EA63D82D73CFCD5F960
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:40:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58339
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f3:37:26:c1:06:2e:a6:3d:82:d7:3c:fc:d5:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:40:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:e2:3f:c0:66:9d:49:ef:89:84:2d:f9:ae:
24:a9:3b:8b:20:95:9c:8b:10:a0:98:98:16:d8:79:
f3:87:cd:64:2f:8a:df:64:3d:2f:fc:0e:e3:86:e9:
e9:52:3f:60:0d:0f:53:63:8a:a1:bc:01:99:9e:24:
37:f7:92:fe:29:ce:d7:f9:7f:7d:e6:03:d5:1c:5a:
c6:10:78:46:4b:b3:91:6c:88:1f:bb:44:0d:5b:80:
91:27:4f:84:57:58:14:f5:2b:37:eb:9d:8b:ea:66:
07:01:25:af:19:06:f9:fc:1b:25:25:1a:1c:5a:ab:
d1:96:e7:59:8f:10:89:02:0c:17:f8:e6:a6:7b:ee:
42:d8:b4:e9:6a:21:2a:50:1b:52:01:ce:08:e0:c4:
6a:d3:2b:a7:db:4a:c6:a0:13:cb:e9:ac:ef:fa:73:
89:aa:63:8b:80:8a:c8:a1:7e:65:1e:84:46:71:96:
9b:d3:7a:6e:07:92:fb:7b:b5:8c:1b:86:22:d2:04:
69:54:7d:f9:cb:4e:4a:0e:bc:fb:43:e5:e6:a5:c8:
77:0d:1e:ca:6d:31:0a:88:41:80:dc:75:4d:37:04:
df:e2:d1:4e:3d:14:a3:7c:34:f5:96:99:77:fd:15:
0d:9a:72:18:2e:dd:0f:1b:52:a5:c6:d8:0b:bc:eb:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58339
Signature Algorithm: sha256WithRSAEncryption
8d:23:e6:7d:e4:f0:78:7a:33:94:5d:dc:5f:c1:b5:65:05:6d:
b7:b6:90:51:14:4f:23:30:4c:14:33:f5:1e:88:75:ab:9d:85:
58:33:c6:06:e5:2a:e1:1e:c2:ed:fd:96:f5:d3:d1:a3:25:3d:
c3:81:dc:9e:1d:f0:2a:f1:6d:88:89:a6:28:7d:50:8d:b5:1d:
5f:f7:e4:81:c8:d1:3e:86:40:02:70:a8:34:4d:4a:26:70:90:
78:2d:e1:7b:8b:d7:f4:b7:0d:3a:3e:45:02:3a:65:4b:5e:66:
28:ff:f7:0a:0d:b7:bf:07:cf:0d:90:5d:76:07:80:c7:44:1c:
d8:31:88:23:c4:be:ec:80:5f:5f:17:c3:fc:35:fd:43:08:55:
8c:ee:af:0f:78:4f:3a:79:a2:7f:0d:f2:f8:76:cf:aa:d9:3d:
d3:eb:ee:7b:c0:5f:93:c0:8c:ce:f6:8d:32:8c:a9:fc:8c:12:
0c:e6:4b:f5:4b:b9:a5:99:40:1c:ef:93:65:52:db:8d:bf:2c:
d7:e5:9e:09:81:83:73:66:05:a6:93:f9:4a:b4:58:7e:f1:34:
81:05:95:b0:1c:8a:9f:5c:f6:e2:ee:fb:ff:2f:5c:54:d7:5d:
50:bb:f3:c3:82:0d:c3:3e:79:77:42:e3:4c:09:e9:7b:cf:eb:
01:aa:62:f3
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZQf8zcmwQYupj2C1zz81flgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmNjZjE5ZDdiNjEwODgwZGIyMmQ0MGVjOWJhZTAyYjEyMDEzNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkjiP8BmnUnviYQt+a4kqTuLIJWc
ixCgmJgW2Hnzh81kL4rfZD0v/A7jhunpUj9gDQ9TY4qhvAGZniQ395L+Kc7X+X99
5gPVHFrGEHhGS7ORbIgfu0QNW4CRJ0+EV1gU9Ss3652L6mYHASWvGQb5/BslJRoc
WqvRludZjxCJAgwX+Oame+5C2LTpaiEqUBtSAc4I4MRq0yun20rGoBPL6azv+nOJ
qmOLgIrIoX5lHoRGcZab03puB5L7e7WMG4Yi0gRpVH35y05KDrz7Q+Xmpch3DR7K
bTEKiEGA3HVNNwTf4tFOPRSjfDT1lpl3/RUNmnIYLt0PG1KlxtgLvOt93QIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFGbM8Z17YQiA2yLUDsm64CsSATdjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FjZWNm
ZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEyOS8yLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNl
Y2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZlMTI5LzIvNjZDQ0YxOUQ3QjYx
MDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA4+Mw
DQYJKoZIhvcNAQELBQADggEBAI0j5n3k8Hh6M5Rd3F/BtWUFbbe2kFEUTyMwTBQz
9R6IdaudhVgzxgblKuEewu39lvXT0aMlPcOB3J4d8CrxbYiJpih9UI21HV/35IHI
0T6GQAJwqDRNSiZwkHgt4XuL1/S3DTo+RQI6ZUteZij/9woNt78Hzw2QXXYHgMdE
HNgxiCPEvuyAX18Xw/w1/UMIVYzurw94Tzp5on8N8vh2z6rZPdPr7nvAX5PAjM72
jTKMqfyMEgzmS/VLuaWZQBzvk2VS242/LNflngmBg3NmBaaT+Uq0WH7xNIEFlbAc
ip9c9uLu+/8vXFTXXVC788OCDcM+eXdC40wJ6XvP6wGqYvM=
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:06 2025 by rpki-client