Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.cer (raw, json)
Hash identifier: fOZKj2B1b0vM88JwzeotqzV6n5B00ucECovUFerb7dg=
Subject key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8F855CF65F3A8ADAFC34D2FE815DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213362
IP: 185.163.49.0/24
IP: 2a10:5100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:f8:55:cf:65:f3:a8:ad:af:c3:4d:2f:e8:15:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:a8:d4:bc:08:c5:5d:b7:47:e9:53:80:a0:
0c:52:e4:33:ae:c1:f7:fe:7b:4c:a1:d1:f7:49:e6:
c0:35:92:01:c6:14:a9:af:41:4d:04:ee:89:42:b3:
70:7b:02:0f:00:d1:47:18:b2:94:e8:d0:de:81:aa:
eb:5c:d0:fa:de:02:64:bb:e1:4e:41:79:40:3d:de:
8e:17:c6:97:80:ad:52:fa:72:bc:f3:6e:cf:ad:73:
24:76:a0:21:6f:73:af:59:26:eb:52:e6:a8:b7:18:
db:b5:de:21:bc:4a:71:b2:1c:48:b5:e4:9b:6d:fb:
4f:9d:34:20:70:6b:75:c4:02:77:ad:73:86:0b:5e:
e3:f9:19:54:13:31:71:90:8a:39:3c:f0:79:e0:0a:
13:27:2e:f4:be:3e:4b:46:c9:ed:f9:0d:f2:b8:c5:
94:97:a1:8a:f1:9e:80:0f:6c:f5:12:37:1c:01:84:
c5:bf:46:e1:3a:c0:ec:65:ab:2a:3a:09:63:9a:bb:
40:7f:82:94:ba:8d:8d:54:5d:dd:4a:73:88:b6:00:
b3:aa:cd:6c:e1:78:c5:4b:fc:42:4f:aa:a0:fd:4d:
19:ba:2a:f8:8c:a5:e1:0d:f0:7c:14:d4:77:f3:91:
c9:25:a4:13:a7:e2:1a:24:07:32:4a:4a:12:09:38:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.49.0/24
IPv6:
2a10:5100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213362
Signature Algorithm: sha256WithRSAEncryption
22:d9:80:46:31:8c:68:a6:61:a3:30:7c:d0:ec:94:c9:cf:b4:
5f:8b:09:b6:2e:85:b6:32:28:a5:5c:b6:84:3a:8a:32:e2:f7:
b6:01:d9:6c:96:de:a5:da:c2:7e:fc:8f:49:f6:0d:b5:45:1f:
46:69:88:63:77:71:c1:60:c1:e3:a1:d1:9f:94:16:a9:ca:a9:
b1:91:51:c7:8d:e4:47:70:9c:47:b7:03:61:9c:19:3b:06:68:
9f:f3:75:08:c9:b1:6d:aa:53:61:51:d9:b4:2f:32:31:a2:d2:
a7:dc:55:c5:0d:ec:39:1b:3b:25:5d:84:4c:65:6b:ff:8f:71:
ce:9e:61:21:eb:a9:3a:ce:27:de:75:c2:83:fe:5e:7d:a8:6d:
c4:5a:32:1e:7c:87:9b:89:ea:ae:f1:e5:ae:2e:2b:2e:02:ac:
a7:cb:7f:90:2f:17:f9:b2:8f:8f:a0:50:60:d0:2b:ae:6f:98:
33:a5:17:c3:5c:4b:43:18:b1:86:37:9f:e5:7d:9a:64:0f:6d:
57:60:e8:d1:ae:f7:bc:e2:82:c4:2d:71:a5:40:1e:7f:b3:94:
dc:55:ee:51:61:50:7d:5b:2a:65:ed:66:7f:ba:84:db:46:85:
f6:9e:53:d3:b9:f5:4b:51:c7:00:1b:01:90:bb:56:73:54:b9:
37:13:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:16 2025 by rpki-client