Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer (raw, json)
Hash identifier: 2W7eKH7hSqgFOhOFYqgL3LPDzgMm3rHHBj6fD/WipLc=
Subject key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB741FA40E6042AE056CBF5D58447
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206426
IP: 185.108.224.0/22
IP: 2a06:4c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b7:41:fa:40:e6:04:2a:e0:56:cb:f5:d5:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9735a94f31546d437b89720e844b2f12a5abf268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:c0:53:fe:49:fc:c6:4a:ec:4e:1b:b4:4e:
9d:15:4e:f6:b7:f3:42:65:60:c5:ba:1e:7d:ac:b9:
98:c8:fe:62:7a:1a:fd:d8:db:7d:4c:4d:00:56:29:
2e:00:28:9b:d1:bd:c6:21:ec:f6:35:ee:0e:8f:23:
bb:40:e8:f0:3c:6a:e2:17:b6:02:c9:f1:9e:96:62:
b4:02:a8:85:2e:65:dd:68:51:0b:b1:2b:c4:bd:c4:
09:61:c0:ac:d2:ab:ca:c5:e7:6a:ec:b6:37:f2:77:
8c:b3:c3:c6:37:58:22:0c:65:04:01:d2:9e:e9:fa:
12:db:a8:67:02:e6:9b:74:8e:08:d4:65:32:27:db:
74:2b:d9:29:8d:1a:f7:c3:ec:a1:b9:f2:cc:d2:08:
54:79:51:ff:35:73:b8:e1:3e:54:bf:62:ac:ca:11:
2e:e2:c6:6f:82:8b:95:0a:59:fe:49:86:dd:81:05:
03:c5:f6:7f:8d:93:e6:9e:e1:16:b4:13:ab:b1:7c:
f8:e9:15:fc:39:cd:35:50:b4:9d:17:d5:77:e9:c1:
a1:33:b5:27:a3:f9:9c:b9:bd:98:7a:00:26:d2:6d:
c9:98:40:b4:cc:23:42:e8:f2:88:8a:85:b3:d0:17:
e6:43:89:45:ae:9c:4f:66:20:44:d2:6e:24:a5:76:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.224.0/22
IPv6:
2a06:4c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206426
Signature Algorithm: sha256WithRSAEncryption
03:0f:79:69:0f:d4:d8:86:7e:25:e3:3f:20:75:e6:2f:d4:94:
3d:19:aa:ce:96:c8:85:9b:f0:ad:ac:ba:12:c4:80:9e:c5:49:
b2:fb:79:aa:50:3d:1d:93:0b:04:06:46:0a:45:41:e4:44:c8:
21:1e:c1:45:c0:4f:17:e0:2d:b1:ea:74:96:c9:75:f8:28:6a:
eb:8d:2f:13:8a:6b:f4:56:ed:c1:76:53:b5:f3:86:1b:d0:d1:
c1:1c:7f:a5:94:04:da:ef:53:9b:5c:88:58:a2:32:80:a4:f0:
82:61:24:4a:ce:7c:73:a7:0f:81:55:18:6d:ca:12:db:19:db:
f0:45:32:05:8b:a9:8a:f1:d8:a3:2d:a8:49:7d:b0:7c:88:bc:
dd:a5:bb:7e:f7:21:56:92:65:e2:99:d0:29:50:f6:4f:8a:93:
1d:53:75:31:f4:79:48:25:b0:07:96:f1:94:4d:71:70:83:e3:
42:d9:4b:3f:a9:2a:e3:b2:61:96:0b:49:82:4c:1b:f3:9a:80:
b9:34:ee:5f:22:9d:2d:f9:2c:e0:89:91:b2:0d:9c:83:46:9f:
64:1d:5c:07:d1:5a:13:c1:2d:ef:7d:c7:93:72:3c:51:08:73:
19:c9:d2:61:5d:64:72:89:42:f2:39:f9:2b:0b:cd:a2:4f:e5:
43:c0:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:56:18 2024 by rpki-client on console-fra.rpki-client.org