Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
File: _z8mtUHwu6ilznHqU4EbRsFlerM.cer (raw, json)
Hash identifier: lCklHsN3z8GOz9odX5CaE6dJT8V9mYX2Bp2evhJHSCE=
Subject key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B590D03EE9D6A93A0A909CDEB0815
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34146
IP: 78.40.72.0/21
IP: 185.200.220.0/22
IP: 217.197.208.0/20
IP: 2a02:448::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:59:0d:03:ee:9d:6a:93:a0:a9:09:cd:eb:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:92:85:56:6e:00:43:4e:4b:2d:70:00:68:
ab:2c:c3:2b:fd:c8:58:e1:90:f8:7c:b9:e6:b1:3c:
23:d5:d7:07:d7:29:94:cd:ae:52:d3:f0:40:6b:70:
1f:9c:cb:f1:3c:ea:6a:77:b0:d3:80:1b:79:37:e1:
0a:36:02:f4:ea:59:f9:89:eb:4d:c3:3c:f6:0d:a9:
6c:cd:6d:f9:2c:44:fc:6d:44:1f:40:cf:95:5e:79:
8b:6a:44:02:80:a5:6c:6f:3b:b6:ac:a3:07:b8:2f:
d1:2c:06:60:fe:a7:f8:0f:f5:f7:e8:43:58:44:46:
66:cb:47:1e:48:56:0b:31:d6:e0:46:d7:a7:55:14:
35:fa:c0:dd:15:5a:c0:0f:6a:a4:16:93:e3:99:39:
09:81:d8:97:8e:a3:e9:0d:08:30:c9:9d:94:f1:e1:
c5:65:c5:58:da:01:ed:30:60:31:a1:eb:2a:d4:ed:
d1:ef:0a:13:48:10:ab:e0:4f:64:6f:75:ec:87:d6:
de:e9:75:db:34:65:ee:29:32:dd:c2:f3:5c:8d:a8:
20:26:a0:a5:17:d5:de:f9:09:e5:9b:ef:68:8b:e8:
e5:ed:dc:73:e9:11:eb:7c:8d:42:da:e3:2e:44:a7:
ce:82:28:d4:d6:3a:16:3c:ea:80:17:62:45:5c:93:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.72.0/21
185.200.220.0/22
217.197.208.0/20
IPv6:
2a02:448::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34146
Signature Algorithm: sha256WithRSAEncryption
21:02:dd:fe:5a:df:94:17:0a:b2:0e:9f:7c:34:c2:01:c2:31:
d7:90:ee:71:01:82:f9:35:79:3e:d1:76:00:14:de:39:ee:a1:
b6:9c:14:4e:21:cf:76:b6:29:41:b6:8a:5e:e2:1e:fa:f4:4e:
18:03:53:ed:ca:e5:7f:02:28:01:d2:22:d1:e1:ff:ea:0b:47:
01:19:58:c9:c2:af:00:5e:35:f8:40:6f:af:0a:41:d2:f0:54:
9b:8c:fc:79:a8:0f:35:c9:6d:32:b4:40:04:6c:be:3e:89:6c:
9d:15:0a:16:24:a4:75:38:33:91:b6:5e:1a:8b:89:5c:47:02:
b2:53:55:8d:24:55:df:ab:d5:59:05:4c:d0:a5:7f:02:c5:f4:
b7:77:38:5c:b7:91:fb:28:80:0b:4b:bb:8f:51:e3:af:76:77:
40:60:9c:72:8b:82:7b:c9:ee:56:88:b7:3e:2c:5d:af:a7:ce:
c4:08:b8:1f:19:92:24:27:58:8e:90:99:9a:d6:6d:f6:8f:b5:
2c:41:5b:67:f0:40:af:3e:b2:e8:94:a4:dc:13:9e:33:56:6a:
16:de:0c:13:4d:22:8a:0b:b9:3f:57:5c:24:d6:91:a0:e1:d7:
12:a5:ce:e3:7e:24:bd:b7:a4:fe:c5:c6:76:e0:f9:96:54:47:
42:6f:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:43:12 2024 by rpki-client on console-fra.rpki-client.org