Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
File: zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer (raw, json)
Hash identifier: T83jL9RwwUQ3paybTzce1ZjIRQe9frrAUS3Z7p4DOs4=
Subject key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB5260E0BBE9528D57CAA8405C4EC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 145.250.128.0/17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:52:60:e0:bb:e9:52:8d:57:ca:a8:40:5c:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:e8:16:d2:09:cf:09:43:7d:91:4e:b9:0b:
4b:35:1f:d2:37:83:a9:2c:47:3d:cb:b1:61:c7:c3:
2d:6c:39:17:49:4e:bf:2c:f4:88:24:8b:c2:30:d3:
28:d6:e2:70:b0:00:78:26:c8:2b:40:35:9f:6b:02:
2d:c4:04:b6:53:0d:f7:27:05:78:75:95:09:c6:bf:
80:57:e1:9f:cf:a0:16:7c:2f:e2:11:65:7e:d1:2f:
22:6f:38:aa:3d:c1:cc:61:25:6e:92:58:72:e4:ae:
30:ff:d7:99:c6:3e:86:84:35:4e:c6:2d:57:61:15:
45:0e:ee:e0:43:b9:9d:3e:2c:be:12:bf:e4:da:d1:
3b:0b:b3:0b:60:fa:c7:6c:7e:40:87:8f:98:fa:75:
b7:01:a4:6c:07:18:64:fb:bd:ae:6b:ed:f5:69:78:
2a:61:6c:fd:2c:63:01:06:59:b3:74:b7:21:4f:65:
57:16:44:1a:37:b9:46:e5:54:15:42:71:df:a6:54:
2b:d5:b9:78:ff:c4:62:7e:49:4a:8a:41:85:41:82:
a2:7c:9a:e1:50:6a:48:7c:50:5f:f2:e8:63:d2:ae:
4b:58:fa:60:89:51:04:5c:4d:85:fd:3f:3a:60:42:
7c:8a:af:06:ba:ba:3d:98:ac:24:5f:66:f0:05:1c:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8e:f4:60:eb:b6:f4:87:2d:e0:1d:c4:f2:23:76:a3:1a:6d:54:
fe:41:72:1f:39:22:15:a4:7a:34:79:22:8d:e0:65:57:f2:e4:
3f:4a:bd:56:43:10:fd:c5:2a:3a:d8:42:76:18:49:a0:76:07:
c9:8d:9b:c3:b4:31:b7:8b:b4:84:4c:ac:5f:94:8d:93:c5:39:
90:20:30:85:b9:d3:b2:4e:42:e0:e2:78:f7:bf:2c:12:10:c7:
69:79:e9:32:d9:51:eb:c3:01:80:d7:a3:c9:90:98:ce:9a:b7:
e4:3e:25:35:db:b5:19:73:9a:8d:05:af:7c:fc:b8:e4:a5:0a:
e9:05:08:ef:aa:7f:8f:0a:dd:b3:96:7c:6b:00:d2:1a:05:be:
05:2c:ed:9e:8e:a2:e6:7c:68:ec:94:a4:a7:03:12:55:a0:4e:
77:3d:c7:1b:eb:45:93:5a:ec:c1:1e:09:a8:9c:58:77:4e:50:
3e:2d:f0:17:fa:fd:62:3e:75:90:09:74:f9:c2:6c:56:82:95:
a9:4d:46:2a:c1:ea:08:99:1b:87:43:8a:e6:bd:32:50:0f:bf:
ce:cd:6b:13:e6:a2:bf:67:61:16:c0:90:94:27:4c:f7:82:17:
7e:f6:15:e6:30:15:5a:e6:14:e9:ca:2c:ad:00:d8:b7:08:18:
e3:a2:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:02 2024 by rpki-client on console-fra.rpki-client.org