Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer (raw, json)
Hash identifier: onkbWP3QeZ0MxBxEaerKBVG4IwluQRbL2MZb9aJpS00=
Subject key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBD55DA129DCD60A6CEF63F10E7D86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56322
IP: 91.219.236.0/22
IP: 185.163.204.0/24
IP: 2a10:c800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d5:5d:a1:29:dc:d6:0a:6c:ef:63:f1:0e:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:e1:18:14:96:f4:b4:e6:cc:79:7b:70:f9:
23:42:47:8e:54:b0:de:71:30:88:a8:cc:7d:60:29:
fd:18:8d:7c:85:ee:2c:e3:7f:df:fd:37:72:87:c0:
64:f5:7e:11:3e:fe:b5:77:d4:2d:4d:ff:13:32:df:
12:a1:d9:df:30:20:b0:04:cf:6d:78:bb:10:05:16:
4b:20:98:8e:27:51:67:fe:56:77:ff:de:e2:69:4e:
03:28:a6:57:86:b6:14:e7:8a:eb:4f:0f:23:c9:61:
23:d0:43:40:71:69:e0:ce:9f:ef:c5:49:1e:6b:17:
38:f0:c7:10:b5:38:07:f6:9e:61:d6:56:ca:7f:ce:
d7:94:cd:29:bf:11:d4:85:2f:b5:c0:54:70:34:31:
5a:4d:56:ad:99:6f:09:d1:2d:92:d0:bd:b0:38:84:
e5:cb:74:0d:d0:0b:c1:10:b5:cf:10:23:7b:ce:37:
1c:f0:5b:8d:d6:e5:24:07:ef:dc:71:ef:32:a3:19:
02:66:bf:af:7c:d5:62:8e:74:b1:3f:7d:16:3b:97:
af:59:a7:9e:73:f9:66:f8:72:ed:50:5d:26:b1:57:
c2:1f:48:cb:68:ee:d6:b3:ae:73:de:58:64:cf:3d:
f5:20:97:4c:d0:97:d1:57:2c:0b:ed:ad:99:df:fa:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.236.0/22
185.163.204.0/24
IPv6:
2a10:c800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56322
Signature Algorithm: sha256WithRSAEncryption
a1:03:1d:a6:15:16:2f:ae:cf:09:d3:e6:aa:63:69:62:79:31:
78:c6:2d:af:5f:6d:8d:29:02:2a:71:4d:f1:2a:d3:a5:15:9f:
22:55:b1:eb:05:d3:30:5e:aa:4f:ce:40:38:46:3b:53:d6:3e:
54:7e:9f:dd:fd:0d:a6:84:9c:ec:67:71:81:5a:b8:d5:7b:4b:
0b:1c:f0:7c:82:74:5e:4e:87:93:ac:22:98:32:45:08:a4:6b:
f5:9a:e8:60:4d:19:cc:bd:b1:b8:ab:73:33:e5:36:c5:0f:60:
e6:97:ca:e1:0c:d4:b0:5b:0b:cb:70:1d:f7:e5:c5:56:75:bc:
92:ba:9c:5c:09:34:ba:41:11:7b:c9:56:54:38:3e:ac:cf:b6:
4f:32:8e:1c:96:04:65:00:26:b0:76:57:9d:51:df:81:d2:9b:
2b:d4:08:f6:fb:45:c5:d6:fc:d2:4f:01:11:aa:7d:d1:03:f9:
9a:ea:25:8e:11:6c:7c:b1:f2:07:2a:ec:0b:3f:84:5a:93:60:
f9:a0:96:87:a0:fb:65:22:9f:58:26:c2:24:29:10:3e:d7:3d:
7c:9e:ef:01:5d:c8:67:b6:27:89:db:f3:ca:c2:85:f2:08:e6:
dd:d8:38:17:b7:8d:df:e8:dc:32:f7:3c:b5:ba:05:8b:71:53:
79:58:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:41 2024 by rpki-client on console-fra.rpki-client.org