Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
File: mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer (raw, json)
Hash identifier: yYoqggPapMGVq2oSGM4fWi2+tLIIXRfE9eNqWp4uEi8=
Subject key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A60A6CE1CD8D8970E3A2045F35A1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57986
IP: 45.15.200.0/22
IP: 2a0e:3180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:60:a6:ce:1c:d8:d8:97:0e:3a:20:45:f3:5a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:0e:c5:85:77:05:ed:8f:24:b6:96:a1:97:
dc:90:14:b3:b4:cd:34:12:67:f7:5a:0e:f9:de:fd:
51:d6:4d:64:85:e4:ef:f0:9f:30:67:58:e9:c7:f7:
82:ca:e4:37:d1:c9:a4:26:60:e4:d8:28:da:1b:34:
c8:49:7f:1f:74:73:92:3d:af:f4:3e:88:53:a8:ad:
7a:26:04:cc:25:e4:fd:b5:9a:93:7b:06:bd:89:37:
31:10:0e:7f:c5:2a:4f:43:7d:fe:e9:ba:f7:c6:77:
19:19:9b:3e:02:48:9d:3b:46:60:fa:7f:4b:70:bb:
7f:62:c8:b4:07:3c:be:62:61:ef:5f:47:06:14:49:
17:b1:4e:04:73:f7:cd:94:c0:f9:81:b3:2b:27:32:
58:08:e7:a0:cc:23:12:b2:35:fb:16:d2:b5:a9:65:
fa:c2:39:17:ad:b9:a0:6d:5c:67:c4:85:24:3f:7d:
56:2e:82:7e:ce:ba:cc:00:94:f2:24:76:e5:5c:2a:
cb:ca:1e:d0:78:1b:69:6c:cd:5d:a6:67:0f:53:87:
e6:fe:f1:3b:0c:51:43:f6:9f:6f:01:b5:41:5b:ed:
45:be:02:f0:21:4f:c1:fd:b4:9f:99:88:b1:11:83:
c2:7b:b6:bb:db:af:f0:96:3b:3f:bc:13:b6:ab:21:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
IPv6:
2a0e:3180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57986
Signature Algorithm: sha256WithRSAEncryption
5a:ca:ee:c0:e4:a7:41:25:96:3f:e2:9e:ce:dc:bf:c8:bb:6f:
ea:9c:2c:b1:b8:f3:d8:c0:a8:d0:44:ce:c2:13:f6:fb:70:bf:
7e:d5:9f:11:51:89:2d:4b:00:23:2c:5f:d5:e6:1e:18:ed:b2:
2b:b8:f6:82:5a:cc:7f:7f:de:f2:dd:56:b6:ef:4b:0d:21:d3:
78:54:e5:67:a0:53:b9:9c:25:db:c6:da:b1:51:a7:a0:0d:7d:
2f:1d:c0:8c:c9:c6:be:2e:98:14:68:35:99:e9:3e:e4:92:48:
65:c3:12:71:71:95:68:12:82:06:7c:2b:a5:61:69:9b:f9:65:
75:eb:40:54:1e:07:62:89:a5:4f:14:12:7b:a5:c2:a9:cf:a9:
ca:86:6d:39:e0:30:96:16:81:35:e0:53:ec:43:e6:3b:99:fa:
cf:70:ec:6d:b8:4e:c0:de:73:03:40:3f:a4:40:15:34:00:9e:
02:41:51:4d:ff:a4:5c:95:ea:d8:03:26:00:b2:bf:9a:b3:90:
62:26:a2:f4:cd:77:45:d5:a4:2f:72:7e:4f:1f:b0:b7:46:20:
54:f5:8e:e7:fa:71:e8:d4:12:26:a4:51:0d:7f:4c:69:64:b3:
f9:0f:0d:29:0e:cc:df:fa:8b:e6:b7:1d:18:01:ce:8a:e3:9d:
8f:4a:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:41 2024 by rpki-client on console-ams.rpki-client.org