Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sz1t_kjW1qQKpDaUGJDW61z4t24.cer
File: sz1t_kjW1qQKpDaUGJDW61z4t24.cer (raw, json)
Hash identifier: Lbx7J2ccdvzvubo4zbJScuf1MgBqYmvX7YI4n+UvVmU=
Subject key identifier: B3:3D:6D:FE:48:D6:D6:A4:0A:A4:36:94:18:90:D6:EB:5C:F8:B7:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D073B913B0811E71FFD3DC1810B9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/55d5f0-041d-45f4-8552-f9403e78d09d/1/sz1t_kjW1qQKpDaUGJDW61z4t24.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/55d5f0-041d-45f4-8552-f9403e78d09d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204511
IP: 185.197.116.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:07:3b:91:3b:08:11:e7:1f:fd:3d:c1:81:0b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b33d6dfe48d6d6a40aa436941890d6eb5cf8b76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:5d:fa:29:69:d4:18:b3:55:7d:47:d8:0c:
98:c8:cf:c5:20:06:d6:11:03:7a:7c:e0:34:a1:e8:
07:0d:82:8f:1a:a6:25:9a:13:27:36:57:83:df:0a:
b3:74:bf:1e:8f:06:2e:ad:c3:87:db:04:31:4f:74:
a7:9f:8c:4a:a1:6e:d1:e7:ad:de:22:19:58:08:d8:
e0:af:65:5e:f4:b5:f9:a2:ae:46:e9:6f:87:7c:15:
98:04:3f:cd:5c:1f:b2:df:b4:fd:b1:79:1a:cf:f5:
ea:76:34:9f:25:24:ef:1a:ac:9e:32:85:8c:54:ec:
29:79:21:aa:df:e2:a2:e9:ca:ab:71:5f:57:c0:e0:
a1:e6:18:7b:cd:bc:6f:e9:61:6f:26:fb:da:c7:59:
07:b8:2f:b6:d2:02:db:3a:6c:04:a5:dc:5f:bb:10:
12:44:93:d6:a3:67:bf:57:78:91:0f:72:e8:73:e0:
d0:68:9e:b8:83:e9:3f:bd:1d:bc:fa:88:63:d8:70:
94:a7:e1:74:97:da:d6:67:29:f2:32:fd:00:fd:dd:
77:fa:20:c1:bd:28:58:67:9e:bf:cf:f1:2e:6b:88:
b9:0f:1a:64:b2:fb:60:12:1d:08:90:61:b7:e6:0a:
a9:6b:8f:71:10:fc:e8:ef:ec:2e:0b:5e:19:7d:64:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:6D:FE:48:D6:D6:A4:0A:A4:36:94:18:90:D6:EB:5C:F8:B7:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/55d5f0-041d-45f4-8552-f9403e78d09d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/55d5f0-041d-45f4-8552-f9403e78d09d/1/sz1t_kjW1qQKpDaUGJDW61z4t24.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204511
Signature Algorithm: sha256WithRSAEncryption
2a:2b:f5:04:58:cc:e7:32:2b:38:31:c0:b1:1a:0a:93:0f:ab:
0f:10:85:a9:f3:46:13:0d:28:e0:95:09:41:cc:5a:55:9c:69:
16:d0:05:ae:cd:11:d8:2c:44:d6:0b:1a:81:76:8b:ee:7a:40:
c3:8b:d9:31:8a:c1:de:27:82:8a:1e:7b:4f:92:2a:b7:e9:30:
6a:96:6d:bd:0e:78:13:c8:67:34:81:1e:8b:2f:24:a2:1e:35:
ce:a9:da:10:16:d0:cb:16:ed:d1:15:aa:30:e4:91:78:06:bf:
02:53:a9:08:c1:90:d2:28:f9:8f:2f:0f:da:f1:7a:7c:e2:7c:
af:f5:2c:6c:32:16:2f:d2:0b:f0:9a:7c:8c:ed:4b:d8:01:78:
89:93:67:b3:f6:33:bf:8a:24:30:a8:59:5c:bf:bb:5f:00:00:
0f:5e:92:eb:a6:34:1d:eb:e1:04:c2:16:45:05:32:e6:43:ac:
57:c0:3b:92:2f:22:09:9b:09:23:5f:a0:f9:5a:03:5c:7a:1e:
dc:00:36:c2:e2:0b:0f:67:39:cf:0a:99:0a:dd:bf:cf:6e:ec:
0d:b8:72:1e:27:13:2a:56:77:3c:35:18:7c:3f:54:ba:45:ab:
7a:08:aa:9d:c2:2c:53:ab:69:13:bd:95:b2:52:5f:dd:cd:97:
e9:c8:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:47:04 2024 by rpki-client on console-fra.rpki-client.org