Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.cer (raw, json)
Hash identifier: THMUuypjYHscWkUANXvx16+gqgCxFGcgYEAX8IFui+I=
Subject key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CC6ABFB7172118F446E5042B6319D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213362
IP: 185.163.49.0/24
IP: 2a10:5100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c6:ab:fb:71:72:11:8f:44:6e:50:42:b6:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:a8:d4:bc:08:c5:5d:b7:47:e9:53:80:a0:
0c:52:e4:33:ae:c1:f7:fe:7b:4c:a1:d1:f7:49:e6:
c0:35:92:01:c6:14:a9:af:41:4d:04:ee:89:42:b3:
70:7b:02:0f:00:d1:47:18:b2:94:e8:d0:de:81:aa:
eb:5c:d0:fa:de:02:64:bb:e1:4e:41:79:40:3d:de:
8e:17:c6:97:80:ad:52:fa:72:bc:f3:6e:cf:ad:73:
24:76:a0:21:6f:73:af:59:26:eb:52:e6:a8:b7:18:
db:b5:de:21:bc:4a:71:b2:1c:48:b5:e4:9b:6d:fb:
4f:9d:34:20:70:6b:75:c4:02:77:ad:73:86:0b:5e:
e3:f9:19:54:13:31:71:90:8a:39:3c:f0:79:e0:0a:
13:27:2e:f4:be:3e:4b:46:c9:ed:f9:0d:f2:b8:c5:
94:97:a1:8a:f1:9e:80:0f:6c:f5:12:37:1c:01:84:
c5:bf:46:e1:3a:c0:ec:65:ab:2a:3a:09:63:9a:bb:
40:7f:82:94:ba:8d:8d:54:5d:dd:4a:73:88:b6:00:
b3:aa:cd:6c:e1:78:c5:4b:fc:42:4f:aa:a0:fd:4d:
19:ba:2a:f8:8c:a5:e1:0d:f0:7c:14:d4:77:f3:91:
c9:25:a4:13:a7:e2:1a:24:07:32:4a:4a:12:09:38:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.49.0/24
IPv6:
2a10:5100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213362
Signature Algorithm: sha256WithRSAEncryption
69:e4:8c:ee:cc:83:4f:96:e9:db:27:bf:45:d1:78:f2:34:aa:
90:fd:3d:9b:fa:65:65:cd:f5:f0:ec:3f:fc:b8:bd:0d:d4:8e:
ee:96:51:6f:12:fc:d9:8b:e9:a4:5d:0e:e4:d4:e7:83:25:71:
0d:9b:ef:61:f4:5b:57:59:fa:1f:2a:6f:02:52:39:9d:50:19:
f8:d9:fb:71:ef:fc:de:dd:8a:36:e6:b4:b8:71:12:82:a9:80:
25:15:f9:e4:31:48:95:87:70:72:82:24:d5:6c:46:cc:a4:36:
9a:36:8c:5c:b5:5a:d5:31:cf:23:44:93:5a:3b:da:65:19:53:
6d:08:8b:6e:4c:cf:71:7f:06:60:71:0a:26:b1:3d:e4:62:fa:
9c:a8:65:40:72:93:fc:f7:5b:64:16:12:d2:a5:69:4a:33:d2:
e1:03:c8:5c:e5:a1:66:ef:38:32:79:b7:53:ec:b5:ef:2b:71:
40:d4:34:7f:6a:9f:9f:54:85:de:16:55:1b:3e:79:66:ce:39:
80:be:00:6a:8e:d0:15:2d:bf:dd:95:f8:e4:8e:1d:18:74:e8:
9d:7a:a8:dc:74:66:18:02:50:f7:52:1e:58:16:e4:bc:31:3c:
04:7a:71:c6:8e:3f:13:2d:17:f3:78:ec:07:bf:9b:02:aa:5a:
5c:10:a9:04
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJTMar+3FyEY9EblBCtjGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjM2NDAxNzMzNDJmYWU4YjNkMmM4Y2MxZjliNWRkZDE0OTQ4OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0qo1LwIxV23R+lTgKAMUuQzrsH3
/ntModH3SebANZIBxhSpr0FNBO6JQrNwewIPANFHGLKU6NDegarrXND63gJku+FO
QXlAPd6OF8aXgK1S+nK8827PrXMkdqAhb3OvWSbrUuaotxjbtd4hvEpxshxIteSb
bftPnTQgcGt1xAJ3rXOGC17j+RlUEzFxkIo5PPB54AoTJy70vj5LRsnt+Q3yuMWU
l6GK8Z6AD2z1EjccAYTFv0bhOsDsZasqOgljmrtAf4KUuo2NVF3dSnOItgCzqs1s
4XjFS/xCT6qg/U0Zuir4jKXhDfB8FNR385HJJaQTp+IaJAcySkoSCTivywIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFI82QBczQvros9LIzB+bXd0UlIk/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2VkYzE3
YS00MjdmLTQwYmYtOWZmNC1iZTJiM2VhYjRkNzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZWRjMTdh
LTQyN2YtNDBiZi05ZmY0LWJlMmIzZWFiNGQ3NC8xL2p6WkFGek5DLXVpejBzak1I
NXRkM1JTVWlUOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuaMxMA0EAgACMAcDBQMqEFEAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBcjANBgkqhkiG9w0BAQsFAAOCAQEAaeSM7syDT5bp
2ye/RdF48jSqkP09m/plZc318Ow//Li9DdSO7pZRbxL82YvppF0O5NTngyVxDZvv
YfRbV1n6HypvAlI5nVAZ+Nn7ce/83t2KNua0uHESgqmAJRX55DFIlYdwcoIk1WxG
zKQ2mjaMXLVa1THPI0STWjvaZRlTbQiLbkzPcX8GYHEKJrE95GL6nKhlQHKT/Pdb
ZBYS0qVpSjPS4QPIXOWhZu84Mnm3U+y17ytxQNQ0f2qfn1SF3hZVGz55Zs45gL4A
ao7QFS2/3ZX45I4dGHTonXqo3HRmGAJQ91IeWBbkvDE8BHpxxo4/Ey0X83jsB7+b
AqpaXBCpBA==
-----END CERTIFICATE-----
Generated at Fri May 3 11:59:53 2024 by rpki-client on console-ams.rpki-client.org