Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer (raw, json)
Hash identifier: TS3G0fZ0d5PLTYiayAXK6J+NlW5JSzLN1zfrGhgiPIY=
Subject key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB57EE14AB9C885DC8424006B6FB31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201010
IP: 185.89.24.0/22
IP: 2a05:d500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:57:ee:14:ab:9c:88:5d:c8:42:40:06:b6:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:db:75:11:64:3c:b6:b9:db:89:46:33:9f:
24:7f:c7:a8:0f:21:83:04:28:90:60:c0:d9:7c:e3:
51:c6:80:7f:b2:e0:7d:bb:40:c0:aa:01:c5:b2:60:
bf:71:3a:bd:4c:3b:d0:7e:d4:57:22:29:f8:87:eb:
e5:cf:83:40:14:c0:77:9d:41:d9:5e:b7:c1:0a:6e:
21:63:d3:ac:64:6f:97:93:49:46:49:3b:ef:21:0b:
5e:b5:92:01:a0:1f:26:12:a8:2f:bd:dd:2f:48:70:
a8:29:93:2d:3a:33:04:e4:75:d0:77:da:dc:8b:15:
ba:5a:11:a4:68:a9:5d:d9:ed:46:87:92:1f:56:3c:
9a:c9:d5:bc:da:2e:b1:be:7c:33:c4:f8:bf:33:2f:
ca:d6:fc:8a:db:46:fa:1e:8f:db:f4:57:78:14:dc:
d7:8c:fd:37:d0:19:49:ba:a8:18:92:82:49:cd:0a:
5e:98:cd:d6:29:75:5a:16:f6:1b:f5:58:bb:4c:b5:
db:86:75:b2:67:ed:e7:59:ec:46:37:e5:0d:1b:59:
26:6d:97:76:04:b4:a2:e5:33:89:86:f4:7b:7f:18:
ca:0e:3d:61:37:92:f4:a7:bf:2d:58:43:90:3e:e4:
5c:d7:f8:5c:cd:d5:2a:e7:9f:7b:08:4e:7c:33:d7:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.24.0/22
IPv6:
2a05:d500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201010
Signature Algorithm: sha256WithRSAEncryption
2f:5b:8f:f1:bd:35:6a:83:2d:20:aa:c8:6d:63:8e:7d:71:d2:
59:56:75:a7:07:ab:c1:a6:5d:06:24:f3:1f:e6:e5:55:be:29:
70:a8:9b:53:3e:4e:91:79:9e:4a:f1:96:da:a4:d7:33:69:c1:
b2:f3:c1:0b:52:fa:8f:bc:fa:ce:ed:0a:97:4b:79:2e:39:de:
d2:8d:bd:ce:a2:2f:39:46:11:c5:d2:08:56:56:8a:ec:84:19:
0a:ff:b1:ae:2e:da:a3:2e:f9:7b:3f:3b:8c:13:7a:c7:92:27:
36:83:cc:06:d8:4d:a9:20:a2:08:f3:92:8f:db:5d:7e:c5:48:
fd:b2:83:ab:26:c9:42:2a:92:02:16:82:fc:b0:63:44:c8:e8:
73:a1:11:64:3e:43:59:11:43:35:ae:5c:18:1d:1b:de:52:3f:
1d:d9:84:50:10:ac:43:9e:24:ae:ca:b6:b9:45:e5:f3:9d:b7:
05:4a:78:0c:bf:97:38:1f:2e:13:04:03:3e:ac:5d:d1:b8:6a:
ed:69:54:32:19:b8:e8:84:5a:63:a6:62:f3:0e:3a:c7:7d:a6:
6f:f6:f8:ff:2f:ac:82:8b:3a:ce:3a:a8:ac:46:f5:17:32:e1:
cd:51:90:9a:25:0e:d3:8b:48:38:95:02:60:1a:5a:ea:c0:5a:
0c:9f:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:19:09 2024 by rpki-client on console-fra.rpki-client.org