Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.cer (raw, json)
Hash identifier: Z+GDeRHTqDJ+rsjJ19F10dNZhqKTNYlFT+n5Mg8RZII=
Subject key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCC8A1D840994920B2E509206C86D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8395
IP: 185.109.112.0/22
IP: 195.170.32.0/19
IP: 2a04:dbc0::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c8:a1:d8:40:99:49:20:b2:e5:09:20:6c:86:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:bb:80:94:e7:34:70:67:15:4a:91:d5:38:
39:db:01:19:4c:e4:90:ef:af:d6:32:17:0d:27:14:
ad:0a:24:c1:73:75:9c:67:58:36:e4:d7:26:48:a5:
f2:b5:bf:97:5b:32:8e:8a:0c:a2:24:76:a3:57:ad:
36:f8:c2:21:c9:1c:03:38:4f:c1:54:5e:b5:10:f3:
a2:06:15:c1:0b:26:f3:a1:b3:66:54:b2:41:9a:c3:
5e:d5:54:29:18:2b:e4:aa:0c:07:e7:5a:91:3b:36:
84:17:fe:7c:fc:de:03:5a:26:90:c5:47:12:38:45:
e0:70:a2:f9:77:7b:d9:18:74:03:bc:40:96:d2:33:
97:02:5a:ec:c4:2d:40:12:cc:b8:30:6d:01:eb:6f:
d1:2e:11:b4:08:30:47:a9:b0:10:f6:ec:a7:c8:57:
3a:32:17:7f:f0:2a:d4:29:d9:f1:dc:a2:90:4c:9a:
2e:7a:d5:2c:c2:dc:76:0a:06:d7:f0:27:51:ca:63:
7d:3f:f5:df:93:a3:9e:53:a2:4b:b5:6e:6d:84:bd:
8d:51:ab:0f:ca:e9:a5:d6:51:a8:f1:a5:0e:e8:48:
54:39:6b:ac:1e:48:5a:55:42:5c:0e:4f:73:23:fb:
f5:41:91:68:a0:b6:51:c6:a3:1b:af:08:47:2f:a9:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.112.0/22
195.170.32.0/19
IPv6:
2a04:dbc0::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8395
Signature Algorithm: sha256WithRSAEncryption
7b:5d:7d:58:3d:89:bf:14:95:67:b1:c3:a3:bc:77:60:59:cf:
c9:3e:6d:02:16:0a:3d:ff:ab:a8:ee:51:ff:87:46:a9:e5:bb:
6d:bb:e4:f4:50:68:8e:2e:03:21:2c:a5:d4:98:d5:10:15:7d:
3d:45:19:9c:8f:25:c1:9a:6f:1c:aa:04:67:0f:43:b2:9d:99:
9e:4f:1c:15:84:96:c4:d7:41:dd:7a:4e:60:10:d9:65:9b:57:
13:a0:2b:8e:0b:ec:1f:6e:99:e7:c8:81:2e:cf:70:9a:53:fe:
01:ac:4d:75:7e:d9:e9:2d:d3:ac:33:3a:54:e0:16:56:01:63:
64:21:53:08:87:e3:f7:07:be:00:b8:9c:f3:d5:a0:68:e1:64:
25:0f:13:34:0f:ec:53:58:c5:e1:46:a8:15:51:8f:15:47:65:
0b:a8:72:0b:a4:9b:7d:e6:1e:2b:ee:e0:e8:85:f4:06:d5:7f:
d6:a5:8a:ec:02:66:88:e5:82:ee:ed:44:cb:9a:37:bc:7a:dc:
41:41:fc:74:b5:63:f1:11:d1:e0:dc:07:8b:27:5b:47:0c:c9:
f6:35:08:26:a8:c3:96:a0:3a:bc:b5:5b:5e:f3:f6:08:05:79:
0b:d5:19:49:af:18:40:12:c2:7d:a5:c4:b8:d1:5f:18:4b:0e:
91:08:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:41 2024 by rpki-client on console-ams.rpki-client.org