Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
File: zQYCONBmjUWgQWGKxd92f1mgxK4.cer (raw, json)
Hash identifier: RB+urELbRM/JoXuiuI3Yl1arrCGiAAZplewHQWkWRqg=
Subject key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99C756A12AA32B542BC9765FEB341C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201618
IP: 185.68.220.0/22
IP: 2a05:1d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:c7:56:a1:2a:a3:2b:54:2b:c9:76:5f:eb:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:66:e2:b0:f8:31:8c:36:59:d9:a8:7c:f2:
a0:8f:53:84:7a:ac:28:8e:95:32:81:b6:f6:eb:44:
dd:99:ae:fb:03:0a:ce:12:c2:21:1d:95:dd:dd:57:
8b:9c:18:60:35:d3:a4:4b:7e:7e:59:d5:8a:e5:ab:
17:e1:4d:63:dc:77:ce:f0:07:33:87:ff:01:b3:18:
39:ce:bb:85:56:13:6a:61:9e:97:91:31:ed:c7:d3:
d2:20:cc:34:34:3d:68:53:8c:8d:42:97:9e:7b:e7:
d4:b6:e5:c6:fc:db:21:f7:32:9e:ab:24:81:2b:e2:
f3:a0:72:8d:d4:f4:c6:20:22:4c:db:8b:93:03:db:
e6:f3:e7:00:59:ae:d5:f9:e6:44:5c:4d:59:a9:60:
63:63:71:a5:cd:0c:1b:95:19:e2:ec:26:84:58:16:
30:06:92:e7:8a:ab:86:30:39:0d:07:77:af:36:26:
59:5d:5c:b5:36:14:68:7d:eb:82:0d:1e:15:2b:30:
74:79:73:32:0c:6b:dd:63:5a:5b:20:dd:ab:3c:d0:
01:04:e9:9e:86:a6:47:70:04:40:eb:49:06:3a:dc:
af:57:46:a2:19:44:01:1d:e6:49:d8:df:92:1c:03:
bf:9b:47:66:63:0f:81:68:b0:ce:a8:5c:dc:c4:60:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.220.0/22
IPv6:
2a05:1d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201618
Signature Algorithm: sha256WithRSAEncryption
3b:1a:21:e6:20:ed:0a:66:e6:a8:ba:1d:e3:17:84:4b:84:55:
41:9e:8e:7e:68:a6:33:c4:3a:18:3d:91:8e:19:03:79:0c:1b:
6d:9f:d8:66:5f:1b:ce:e0:86:33:64:a3:b3:5f:0c:28:8c:3d:
f3:b9:e9:06:65:0a:f3:ea:72:c1:98:1c:cd:32:b9:9c:ee:f5:
4e:4e:d1:66:7c:65:ba:c6:8c:96:8a:78:ef:b8:5f:63:ff:9b:
ed:c6:57:d2:3d:23:cc:39:e3:74:22:96:c8:0d:e4:9e:0a:89:
82:ba:39:e5:b9:f7:ec:33:c4:f8:db:37:f4:c5:4d:a3:c2:7a:
18:10:9c:5c:01:1b:13:0c:08:d0:8c:dc:93:25:ef:ef:cc:a3:
d4:f4:50:7f:78:7c:34:c6:d7:a4:3a:d4:67:3d:b3:bf:7a:ef:
82:e3:01:92:2f:8e:2e:ba:90:83:84:b0:e8:51:97:8b:95:ee:
c4:54:87:5b:10:d8:c0:f4:4c:58:d4:a1:50:ce:8c:eb:56:7a:
e2:51:ab:93:11:f0:9f:e6:75:b7:67:0b:50:98:1c:8f:a2:0f:
f7:09:bb:48:e9:e6:70:3d:bc:e5:fe:62:43:98:45:ba:0b:23:
55:4a:f5:ae:59:5a:73:db:78:e2:5d:f0:c1:b4:dd:c3:d3:2b:
17:77:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:49 2024 by rpki-client on console-ams.rpki-client.org