Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
File: zNHiiTDXen65iRtvq7spFe44hao.cer (raw, json)
Hash identifier: Z9+fQ2ihy7U+OMRe7lHW5MEhoXp2okMFFdm0YGCC79Y=
Subject key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7078D184987AEC96A6CA00E5DF24D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 152.88.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:07:8d:18:49:87:ae:c9:6a:6c:a0:0e:5d:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:a6:c1:d9:21:cd:09:ad:f5:33:b2:59:d3:
a2:0a:50:32:0c:0b:9e:0a:d9:ea:ea:1e:1d:a6:e7:
72:25:19:c9:00:76:3c:25:84:33:1d:35:cf:ff:cc:
38:64:48:a5:13:36:76:52:47:8e:11:37:85:a3:0f:
8b:c3:31:4b:b3:e6:7a:71:a1:90:22:a3:64:0f:d6:
95:f3:9e:7b:be:63:a0:2c:51:2c:60:b4:f7:90:1a:
95:b1:d6:89:43:dd:35:84:fa:7a:d6:5d:6b:20:8c:
79:be:d5:b5:52:44:98:8a:56:62:72:f1:12:0e:c5:
79:50:25:59:e5:23:7f:d6:28:8d:30:0c:d1:c6:8b:
7f:b0:9c:06:25:75:fa:b1:2a:90:bb:1c:98:a0:17:
7f:48:ef:21:c6:8b:0f:a8:74:4d:70:39:ce:75:b0:
2c:da:92:7c:de:be:aa:3e:18:f5:19:2e:f5:ad:7c:
bc:e4:59:11:d8:a4:6b:01:06:b0:02:5e:9f:d7:3f:
2a:81:5a:b4:d2:fc:35:a3:35:a9:18:0f:a2:15:32:
72:74:d1:b2:43:9a:4b:c1:2e:29:bb:a2:9c:55:01:
df:0b:55:c0:63:d1:fa:a1:ba:cc:87:32:e8:2b:f5:
7e:66:65:c4:d6:b2:70:f7:a4:4a:93:85:85:91:03:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:00:66:db:d7:b3:c4:ea:17:37:a4:04:ab:1c:40:c3:6b:72:
ce:b2:8d:e9:95:fb:66:52:bf:4f:34:1b:4f:df:73:9e:a7:ee:
00:1f:53:65:b5:cc:a5:96:dd:4a:98:88:01:4b:29:a4:09:3f:
d4:38:03:4c:76:7c:41:02:da:d5:2a:28:14:95:20:b4:f8:16:
84:86:51:91:43:2e:5d:c7:65:32:8f:89:7c:9b:53:76:10:54:
51:29:1b:00:0a:d6:ce:09:87:2d:03:8a:09:be:5b:c3:56:73:
07:e6:37:59:c8:0b:ca:cc:01:66:e9:b1:13:9c:ce:1d:95:4d:
de:73:1d:7c:63:cf:39:cb:c8:c9:82:6e:5d:13:41:bd:82:b8:
14:87:f3:a3:00:fc:ba:c4:fa:7a:d8:8a:f0:38:46:1f:ca:66:
be:6b:88:e3:9f:92:74:71:36:b4:0b:69:18:f3:0c:3b:ff:8e:
e6:f3:63:f4:95:58:45:fe:c4:74:d3:37:a0:67:4c:ea:3c:a9:
5a:15:b4:33:5a:6c:3f:3e:20:29:cb:d7:5e:8e:27:c4:87:02:
ac:36:88:0e:31:4b:9e:ef:86:37:f8:3f:33:94:f7:42:44:84:
f4:5f:a9:4c:c9:79:a5:86:5f:c2:f5:9c:55:b4:38:97:68:86:
3f:09:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:33:07 2024 by rpki-client on console-fra.rpki-client.org