Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer (raw, json)
Hash identifier: jYomQvE3b0KA/1Lb52wLjGfTtZs493eDHVCIC3LkoAY=
Subject key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275070420004784B2887A47C51B1AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41041
IP: 89.207.16.0/21
IP: 2a02:fa8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:50:70:42:00:04:78:4b:28:87:a4:7c:51:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:83:45:93:be:70:6e:26:ed:f6:96:dd:72:
ed:cf:b6:09:71:2c:9f:9d:1d:9a:84:89:9b:11:1b:
db:5a:12:57:f7:54:61:23:07:47:a6:0b:20:f2:6b:
78:d5:1a:58:d2:40:8d:cb:d8:4b:02:88:29:1b:c0:
a3:63:a1:cc:2c:d6:c1:21:c4:b1:15:30:a9:fa:21:
bd:9c:63:a2:f3:23:d5:8a:01:a2:24:c9:d7:ee:1a:
41:ef:b3:3f:c3:e1:31:a4:93:54:ac:42:93:f9:c1:
9b:fe:1c:9c:4c:ee:1e:28:ce:6c:95:91:58:93:64:
db:a6:2b:10:09:83:86:72:42:75:79:8f:75:e0:20:
d2:0a:83:06:0e:ba:25:59:58:3e:7a:91:32:66:ae:
5b:be:db:a7:0c:67:b7:83:e1:90:3b:81:d9:6d:f1:
8c:6e:14:57:2e:94:8f:2a:39:0a:47:5a:ac:c8:47:
ca:f0:f0:4e:ce:98:7d:ae:58:13:73:82:b7:7b:03:
04:3f:70:a0:9b:82:c0:95:a0:f3:7d:1c:6f:66:aa:
ca:88:4f:b6:ca:0b:f9:94:1b:cc:b1:a0:41:fe:ec:
ea:cf:55:4b:31:12:bb:22:c7:4b:54:f3:b2:2f:f8:
88:39:dc:7c:19:37:a1:49:28:a0:0c:15:29:6b:c5:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.16.0/21
IPv6:
2a02:fa8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41041
Signature Algorithm: sha256WithRSAEncryption
8e:0e:f9:69:b2:16:88:6a:00:4b:c1:5a:f3:2c:90:5d:0f:12:
5a:af:69:08:a8:bf:7c:b0:ac:09:2f:74:d9:5a:8a:f4:af:54:
55:10:5e:52:16:70:8a:d8:42:84:df:3b:84:52:3f:4a:eb:71:
2e:f3:a8:c9:a8:e7:6a:31:be:af:10:e2:5c:5f:d7:0f:78:fa:
37:d1:e7:48:ac:2b:d7:96:ab:9f:5f:f3:27:ae:35:8a:2e:3d:
f8:f2:e4:6f:97:6f:5c:54:f0:d6:50:71:c9:2b:d9:89:ed:4d:
97:de:f6:fe:7f:f6:b6:e3:33:67:b5:50:85:46:a6:e2:78:2c:
62:9b:d5:37:73:1e:84:ec:52:32:a5:e8:25:56:4e:ed:12:b5:
6e:59:64:ac:27:c7:f7:5a:10:93:ad:fb:e3:e6:03:ac:6e:20:
85:e0:15:4d:94:dc:70:57:c8:4a:84:bd:6a:e4:a3:f2:52:0c:
74:ff:6e:9d:29:62:8e:03:06:50:d7:39:10:6a:22:03:52:4e:
dc:d9:a1:ee:26:02:ad:be:ca:73:a4:5a:7d:0b:a8:c2:57:fd:
9a:2e:25:95:7d:31:94:1b:39:75:2e:7b:9d:fa:79:93:87:02:
cd:c7:37:14:b2:c2:ef:02:47:aa:5c:2d:25:b3:43:07:b4:f0:
4b:98:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:25 2024 by rpki-client on console-fra.rpki-client.org