Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.cer (raw, json)
Hash identifier: bwiSx9oLBdxMv/cljQsES86pZFDw9R8dSgbnGK5yLnY=
Subject key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7257091508BDD4CC7FC490CD7EF91A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201246
IP: 103.58.8.0/22
IP: 185.80.16.0/22
IP: 188.114.120.0/21
IP: 2a05:7980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:70:91:50:8b:dd:4c:c7:fc:49:0c:d7:ef:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:65:24:0e:0e:fb:01:36:91:e3:f3:77:60:
8e:11:9e:e5:a1:d7:02:f3:a7:58:1b:09:29:4e:b1:
8e:d1:47:b1:af:d5:78:ad:56:18:7f:9e:d7:28:22:
b5:31:ed:78:19:d9:16:49:fc:10:f2:5f:e7:aa:e4:
9b:05:b9:c8:9c:74:95:74:a8:9a:96:ef:fd:1f:66:
46:ac:67:6e:4e:11:cb:e2:28:5b:d9:46:0d:f4:5a:
91:01:86:56:96:32:85:b7:8c:c3:ea:a7:7c:1c:7c:
f6:29:cc:8a:0e:7b:52:b9:27:9f:67:43:97:2b:5f:
57:db:eb:1a:52:14:6f:86:44:45:b4:61:23:5e:07:
4b:95:f4:11:9a:f3:84:4c:4e:a7:ab:de:2b:04:dd:
d7:49:71:cf:eb:2f:e9:d3:64:db:b0:4a:e1:0d:a6:
35:2e:8c:55:0e:40:3c:aa:b4:d3:4b:e2:6f:d0:e4:
5e:5d:4e:07:96:c5:53:25:78:49:6e:59:2a:7d:73:
47:2b:74:a0:87:b8:d2:0b:ef:58:f0:b8:c6:cd:02:
a3:5f:5a:bd:38:51:f1:2b:5e:64:d4:c4:f9:b3:8f:
0c:a8:4b:82:c4:3c:69:87:fc:97:19:51:d1:ad:9e:
08:5e:e3:77:6a:c4:6d:61:0b:4f:0f:36:04:44:b2:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.8.0/22
185.80.16.0/22
188.114.120.0/21
IPv6:
2a05:7980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201246
Signature Algorithm: sha256WithRSAEncryption
7a:de:2e:24:91:78:ba:4f:27:cc:a1:3c:45:de:15:e1:2f:9c:
f0:87:15:3e:68:87:0d:d9:e4:53:74:72:6b:80:91:23:e1:0a:
2b:82:3e:10:0a:86:12:1a:6d:8a:78:17:05:c8:c1:a4:b7:aa:
99:43:36:60:37:be:a0:7c:9d:54:63:36:5e:b9:59:e7:66:7f:
19:67:b8:aa:b6:06:09:58:a4:f8:8a:93:16:b3:48:c5:1b:52:
e4:5b:a2:ff:85:9f:78:f6:3e:50:7c:6c:94:4c:2c:bf:80:43:
55:0d:e4:98:f2:81:e9:38:98:28:27:f6:4e:a1:7f:f6:d9:2d:
8a:b0:60:b2:17:e6:86:00:4e:54:a0:d6:96:72:a1:e2:55:56:
83:c3:c7:ae:b7:c6:bf:20:08:47:b9:db:69:ba:fe:77:93:0c:
57:f6:b8:ae:22:6d:a7:1c:8a:55:26:36:51:ed:06:e9:cb:c3:
98:f3:c3:a9:a1:94:30:e3:9f:6e:4b:47:eb:da:96:1c:9c:3c:
7d:e8:ae:b2:e0:e2:4e:87:7d:4f:ee:a5:50:80:7d:08:f1:35:
8a:28:23:b0:e4:ba:f6:70:3f:bd:2b:70:8b:10:88:82:60:38:
09:db:ae:58:69:2c:88:7b:1d:26:de:a3:46:f5:f8:35:00:92:
d5:09:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:46 2024 by rpki-client on console-ams.rpki-client.org