Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer (raw, json)
Hash identifier: XzuSuH5u9NnRal9BacUZrKggA3A+9Rm5k6BBTmDXQmo=
Subject key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D9BA90B4B7207DA35A851A3E9C008
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.212.90.0/23
IP: 178.212.94.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:9b:a9:0b:4b:72:07:da:35:a8:51:a3:e9:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:bf:7f:08:3e:73:de:a2:db:9d:3a:af:ce:
ff:b2:ab:81:64:af:79:fb:6a:c6:de:f7:a0:e4:e9:
28:ad:ac:02:92:2e:a4:d0:4f:06:5e:b2:24:39:ad:
c5:0e:b9:aa:d4:9b:ee:a5:86:1d:46:f2:6f:b4:a7:
0d:5d:87:9a:dc:ca:9c:42:3a:fb:1b:ac:87:5e:f8:
99:28:ac:73:51:4f:83:b1:d4:40:a1:ea:69:ed:ef:
c2:29:e0:db:2e:a6:df:59:e2:60:be:8d:c3:57:47:
99:36:35:2c:d2:1c:58:3c:4f:b1:5f:dd:30:01:83:
74:6a:9a:36:34:75:b8:5e:be:e8:25:f9:d3:f3:b1:
26:95:da:ee:44:2d:da:1e:37:ed:0f:41:51:7e:07:
c3:ca:fd:5b:6a:1a:05:4c:c2:ac:c2:98:97:aa:52:
af:7c:f0:b6:10:cb:8f:7d:92:b6:e2:c2:37:9a:dc:
4e:f7:93:7d:e5:d3:ff:42:5d:81:2d:04:bf:44:7e:
e7:c1:15:32:46:2c:da:f1:0c:48:c9:51:14:4f:d4:
6d:4c:5d:90:37:9a:71:95:53:f3:22:c1:1f:55:9a:
63:f6:28:4b:3a:a1:64:0e:f9:96:46:cd:c7:1f:91:
8f:47:14:d2:be:83:ae:76:81:c2:2d:e0:91:68:ca:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.90.0/23
178.212.94.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:b2:02:b9:4e:84:3b:f1:1a:fb:a6:aa:a0:7c:23:49:36:a0:
89:59:38:14:41:cf:0e:cf:51:e5:05:db:47:7b:ec:4f:c3:97:
23:92:ac:0e:ab:8b:72:22:71:ad:60:35:eb:59:e0:9f:48:ef:
32:23:85:60:a4:7f:c6:28:1a:a2:4e:bd:6c:b1:f3:4b:9d:2b:
05:73:b5:6d:70:9a:b5:ea:b0:29:5c:a9:04:ff:84:07:d6:4d:
66:06:27:0d:b0:90:ac:67:3a:54:41:c1:3c:c5:2e:73:4e:c1:
f5:47:05:b6:c6:a0:bd:9a:78:b1:af:d5:c4:bf:c7:5c:f5:2a:
97:04:80:e9:0a:6e:19:bd:f6:54:f8:5e:2b:76:6d:15:a1:59:
5a:39:8a:96:50:69:0a:73:b8:82:1d:e9:a6:60:ad:32:c6:39:
70:8a:b1:a8:5d:42:72:0d:a8:20:67:f5:9a:74:33:2c:0f:82:
b2:77:bb:9a:dc:83:aa:28:c2:11:34:17:84:8a:32:44:c3:6e:
45:f4:37:9d:7d:98:b3:c0:ca:6f:fe:a5:ca:e7:c8:43:8a:1b:
79:8f:c2:13:3c:8a:b7:36:f4:42:c8:53:4d:79:78:11:5f:d9:
3b:1b:75:18:fb:7d:30:28:f5:b8:ae:20:50:cb:b5:14:69:2e:
b7:c3:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:19 2024 by rpki-client on console-ams.rpki-client.org