Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
File: z81z-CwmDahzhtz3vibVxURVJvo.cer (raw, json)
Hash identifier: 3/Y0nVyc3nkVXbm/oUfyuJPjr9wgt+2pKfwC4ov+NQY=
Subject key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD4C93FDBB476D86A5C18FA1B2C56B62E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Feb 2024 07:06:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35246
AS: 49181
IP: 2.57.36.0/22
IP: 45.144.40.0/22
IP: 2a09:d2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:c9:3f:db:b4:76:d8:6a:5c:18:fa:1b:2c:56:b6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 07:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:89:89:6a:21:30:e1:69:69:fc:fc:7b:ef:
cd:f3:3f:cb:38:46:ed:76:b7:73:60:f5:e9:aa:c3:
4c:5a:82:7e:33:ad:aa:02:ae:4f:bc:3f:5e:b1:ef:
94:41:93:e7:2d:df:a8:32:d7:de:d0:ae:5c:eb:59:
25:62:97:4b:c7:71:cd:c9:b9:70:1b:0a:36:4f:0c:
62:1d:de:94:a7:d6:77:63:e0:08:ad:f8:d2:20:5b:
c7:2d:7f:a1:a7:92:24:35:24:fe:8f:c2:0e:89:2c:
c6:d0:1e:07:a1:ef:3d:16:c8:54:92:2a:08:98:ce:
cd:05:98:1a:d3:1d:8e:f5:68:49:22:b1:f4:6e:91:
6d:5e:82:ff:6c:ab:ee:29:3a:7a:89:b7:cb:0d:2b:
19:19:5b:36:9f:51:b1:8a:5e:79:47:2c:7b:0a:11:
82:da:cf:4a:25:11:e7:13:dd:be:a1:ff:19:83:cb:
9a:4c:2f:a0:82:eb:b7:d1:e3:35:ae:e5:c3:f8:15:
c8:3c:ee:e1:90:dd:48:b3:09:dc:d4:28:28:0f:ae:
a7:ee:f8:fe:64:f2:ea:d3:e0:bf:64:74:fc:9c:df:
57:bf:21:35:15:8c:df:fb:e2:a0:b0:e7:5d:c3:be:
af:27:10:ab:55:e1:4d:f1:08:52:86:57:8e:04:5d:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.36.0/22
45.144.40.0/22
IPv6:
2a09:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35246
49181
Signature Algorithm: sha256WithRSAEncryption
9e:57:84:51:60:01:91:ad:8a:85:84:bc:90:3f:0f:56:70:23:
0b:6a:dc:07:5a:5f:fb:69:f0:f1:42:32:ff:b5:06:1a:78:08:
fd:51:a2:46:7e:be:37:0a:35:8c:29:c0:df:13:f6:f2:cc:4a:
bb:72:15:29:5a:ba:cc:44:84:74:88:72:ef:e2:83:c5:d3:23:
ee:d4:13:3e:bb:7b:a4:3d:b9:04:d6:0e:69:a2:4f:54:12:54:
d8:6a:62:dc:e5:5a:50:0d:b7:dc:98:e8:b2:f6:81:fd:bf:49:
9e:3e:c4:21:f3:af:5c:d2:c8:92:f0:19:ff:df:ee:84:0c:c8:
4b:7e:66:f5:c4:36:be:c6:70:53:59:9a:51:53:2e:bf:8e:0b:
d2:b6:f1:f5:38:b6:a6:b2:cb:56:9a:a5:a2:22:95:43:51:87:
30:24:18:a5:22:d1:d0:62:34:4b:36:52:c2:2c:85:4a:60:86:
56:7c:84:c0:87:b8:e7:fa:9e:39:2d:92:d9:a0:66:bb:5d:88:
6d:d0:fa:3d:09:8c:cb:be:b7:b6:9a:29:c0:8e:da:04:82:d8:
00:73:9a:60:31:c7:7d:41:c8:96:71:6b:7a:d7:85:1d:ef:dd:
4f:85:87:f0:14:f2:c4:c7:cb:fd:00:bc:c5:6c:86:37:86:ac:
e4:d5:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:20:27 2024 by rpki-client on console-ams.rpki-client.org