Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
File: fz4LJ7jk15j5K53hV_HaWkPNSeU.cer (raw, json)
Hash identifier: ja+BCC3Pzurf7mi+Y+sJ16v5RhueetdX+kgOqSQsPTs=
Subject key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492401AC0811DCCF2451D9CAF4B15AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208316
IP: 193.72.144.0/22
IP: 193.73.238.0/24
IP: 193.168.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:40:1a:c0:81:1d:cc:f2:45:1d:9c:af:4b:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:92:fa:67:73:76:82:ae:0c:fd:de:56:9b:
5e:e3:d4:dc:53:e5:74:37:8e:68:64:00:25:d3:74:
29:72:43:4f:40:ef:fe:7d:f4:60:29:ae:fa:3d:c0:
cb:d6:41:11:b8:2e:c9:af:0b:e3:bc:7a:ba:14:06:
0e:f0:4e:cd:35:5d:e6:47:5e:85:79:ec:fb:10:bc:
10:20:dc:93:c9:2b:28:e2:8b:30:0e:7e:fd:8a:d6:
0c:85:78:12:30:35:f5:bd:77:93:0c:3a:75:66:8f:
3d:db:67:90:b5:3b:09:df:64:17:74:67:89:98:de:
70:98:fe:e0:3d:91:2a:f2:a7:82:ec:4f:7b:04:80:
77:de:9b:3f:56:54:5c:11:6f:6f:26:a6:e8:24:30:
0c:49:c1:b4:10:a3:0e:da:86:83:4c:4e:f5:fd:4c:
27:15:3c:d1:ce:97:4d:6d:e5:59:48:8d:fd:60:1c:
c9:cb:a4:9a:24:9e:09:12:16:18:c9:14:3e:b7:5f:
6f:6b:40:ce:bb:68:cf:11:85:64:1d:15:6f:00:b2:
61:f6:90:bd:be:83:01:a3:4d:59:08:5f:c0:4c:95:
64:41:a9:04:69:16:af:eb:59:1d:f5:66:77:ef:a2:
cd:b7:92:a5:c1:1e:fe:cb:1b:f3:2a:03:68:34:a1:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.144.0/22
193.73.238.0/24
193.168.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208316
Signature Algorithm: sha256WithRSAEncryption
2a:bf:f7:ac:af:d6:a3:20:a8:37:e6:ad:19:03:91:b0:00:0b:
71:6d:2f:4a:bc:bb:76:4f:71:02:06:9d:04:fd:3f:8b:94:e1:
a0:98:38:a0:95:53:ea:8c:27:e8:91:1c:60:ac:ca:97:58:2c:
d4:0d:83:bf:ee:cd:50:d5:9b:be:60:33:29:15:49:24:77:47:
11:29:10:ba:35:75:71:4f:b4:9c:cc:27:01:1c:b1:73:22:89:
75:68:92:74:38:df:84:65:13:a6:1b:63:b3:19:a3:1a:ab:02:
1a:da:5d:b9:67:09:86:6d:c2:ec:92:d8:9f:ab:bc:e4:6b:06:
f2:f8:1c:d5:73:47:86:f5:2b:e5:db:10:7a:7e:47:38:15:d3:
4b:c0:8e:3e:5b:c8:9f:e4:13:a0:7f:51:59:2b:9c:d2:8a:ed:
97:f1:dc:35:24:ed:e5:c5:4d:33:bc:30:9c:6d:7c:24:84:b7:
6f:f7:82:d7:39:e0:76:7b:34:80:1e:0a:f9:4c:6d:c8:05:0b:
43:aa:d8:cb:84:dd:3d:93:68:1f:40:8d:af:38:ea:9e:7b:0a:
63:56:f8:2b:bc:af:81:5d:fa:91:ef:c9:76:fb:cd:bb:3f:6c:
5f:e9:37:6c:1e:a7:62:46:11:c4:02:54:fe:97:14:9e:ca:69:
cb:10:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:24:45 2024 by rpki-client on console-ams.rpki-client.org