Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
File: zGUyZJpq70cUhBucj1RmDYibBik.cer (raw, json)
Hash identifier: iQltn7C5NbzU8x0AEmZK3zX1SK5B9XBkk8RU5I1Nmis=
Subject key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CE826D80A696D7F2CE38F02AE205BD8C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Jan 2024 08:18:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.234.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:26:d8:0a:69:6d:7f:2c:e3:8f:02:ae:20:5b:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 8 08:18:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:ea:1b:86:9a:e1:14:19:88:f0:6a:da:23:
08:fe:37:82:dc:37:a4:fd:0a:da:ed:2c:01:4c:27:
24:bf:7e:3b:f4:56:56:fe:da:0e:f1:3e:10:f2:6c:
fa:d7:6a:7c:ac:85:ed:1b:90:09:f9:50:87:c4:b3:
bb:cd:2d:f5:76:7f:57:48:98:65:f4:4d:62:30:8e:
1d:c1:89:41:43:c1:f8:0c:d7:6f:d8:cd:56:c7:36:
d6:98:bb:53:ed:46:39:08:bd:d0:84:c2:e2:f8:48:
01:2c:9f:54:e9:f6:19:88:3e:fe:b7:b7:42:be:a4:
5d:1a:c2:d7:94:f6:66:60:f0:f0:8f:b5:08:f7:68:
53:cf:45:f2:55:67:5f:5d:e9:ed:51:9e:ab:b2:6b:
71:8f:4d:66:6b:da:5a:29:f9:a7:a6:c1:c8:37:57:
fa:b1:04:cd:8e:cd:f1:60:82:b8:d3:59:d0:c1:af:
6c:61:b0:ac:cb:5e:f2:7e:d5:19:74:6c:30:26:19:
96:3a:eb:88:a7:d1:23:2b:ed:2e:c3:4f:44:26:9c:
14:82:db:27:7d:0c:21:90:1e:85:1e:16:03:c5:97:
fc:5d:42:f2:18:10:ab:7b:f8:9b:b5:60:bb:f7:e1:
8d:97:25:21:7b:df:35:18:42:35:c8:71:8b:b5:ee:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:50:3c:81:b9:1b:bf:7e:93:f1:4d:fe:c0:22:c3:96:f8:9d:
92:29:eb:6a:cf:04:5c:8c:b3:52:94:ad:fc:c7:e9:16:9e:8f:
51:f7:5c:cd:ea:81:7b:f6:94:fc:56:d9:a2:f0:a8:d5:51:bf:
80:ed:ef:d7:b2:d5:02:66:bd:fc:c0:dd:2a:3d:5c:f7:60:96:
11:3e:e3:79:d3:5e:5d:7a:8f:90:78:aa:c3:16:a3:a8:29:7f:
fd:19:fd:a2:c8:f0:42:ae:49:92:42:0a:2f:15:5f:d7:f0:8a:
5a:74:58:cc:9f:04:e6:5b:38:5b:b2:13:dd:3b:cf:d2:fe:a8:
bf:8b:25:ef:aa:2f:3b:e1:42:58:c4:c5:d9:fe:87:42:00:50:
b6:d6:ea:83:63:3a:c2:b1:91:0a:06:57:47:2d:4f:5d:85:44:
62:09:50:36:98:6d:45:47:42:00:22:59:a1:63:bd:d4:89:c6:
cf:f3:2f:e8:be:83:f8:13:66:6b:6b:15:19:b4:bb:65:da:e7:
dd:c2:3e:61:d2:bb:5b:b8:7b:30:1a:a6:95:2f:38:60:d9:f5:
95:9a:95:39:75:c6:ad:dc:44:89:81:73:46:28:eb:03:83:1b:
ed:1c:af:e4:e5:21:45:23:af:98:f5:66:b2:57:9f:cd:98:7b:
10:73:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:05:20 2024 by rpki-client on console-fra.rpki-client.org