Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
File: zS0l92kTYIeMus6YWJC59e_PfZU.cer (raw, json)
Hash identifier: bIXM25phZRRMi1+poLXmz4JJQHeJdObSm/ZtHbUqpH0=
Subject key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF5630F85AB882BDD19B95D754FDF7F0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 08:04:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.5.28.0/22
IP: 185.209.92.0/22
IP: 195.66.0.0/21
IP: 213.185.65.0 -- 213.185.77.255
IP: 2a02:7940::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:63:0f:85:ab:88:2b:dd:19:b9:5d:75:4f:df:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 08:04:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:fd:48:81:68:5c:fe:6b:3c:1d:c0:03:d3:
b4:f7:b9:f4:e7:88:4a:b9:b3:af:ac:07:c4:1f:1b:
60:48:7f:5f:3f:0c:c6:45:6b:d4:ff:27:34:21:c6:
f8:12:31:9f:3e:c6:ec:25:2b:41:4e:d2:37:1f:5b:
70:6a:e0:4c:fc:23:b3:66:db:f7:96:9b:ad:0f:6e:
c3:0b:58:fc:aa:e7:8e:79:10:82:7d:49:b1:be:5e:
7c:1a:bf:0a:df:47:e0:cd:56:95:96:94:fa:15:18:
e3:41:64:b2:a6:79:d8:b8:51:ae:51:7d:37:ef:8f:
61:f9:be:a0:a5:07:bb:9a:03:aa:ca:20:ea:23:97:
d9:14:f2:d0:1f:46:6c:6b:b3:4e:9f:5f:43:04:7f:
dd:35:b7:40:fd:84:fd:c6:38:ac:b1:b8:7b:15:a7:
44:3b:98:48:01:ff:c7:60:77:f2:f5:cd:00:e4:72:
8c:83:a7:56:9b:8c:21:c4:cb:fa:ed:3c:cc:0f:8f:
62:3f:5e:b7:6a:a0:7d:35:44:f7:07:10:cf:23:ef:
cb:bc:30:e8:04:94:8e:6b:99:a3:7b:7b:52:f0:be:
7f:28:ab:56:6f:2f:a7:3c:7a:48:ad:97:dc:4b:1d:
d2:53:86:d3:ba:9d:69:71:da:2c:f4:2f:49:56:91:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.28.0/22
185.209.92.0/22
195.66.0.0/21
213.185.65.0-213.185.77.255
IPv6:
2a02:7940::/32
Signature Algorithm: sha256WithRSAEncryption
10:23:51:7d:9d:8b:8f:d2:1d:b5:10:86:9e:75:f6:d6:44:02:
25:ed:f1:e8:13:da:e9:6e:d9:4d:3d:5d:e0:16:84:53:0c:27:
fa:75:b4:cd:1a:47:50:8a:9c:66:f4:c1:82:df:68:0d:92:83:
f3:42:22:4c:ad:85:be:d3:20:a3:a5:1d:cc:e9:e3:38:a6:b2:
9c:51:08:82:eb:7f:e5:1d:92:bf:d5:e1:0a:0c:b4:fa:a6:d8:
e4:c0:0b:d4:08:a6:16:c1:c9:26:98:df:da:a8:08:2c:6c:ed:
3e:0c:05:9f:a9:17:1c:06:37:f5:46:04:f1:8f:f3:e1:ec:9f:
a6:b2:21:ca:1c:00:8e:d7:a5:08:6b:ae:9c:54:35:c1:d4:37:
63:d3:fd:af:4b:45:1c:94:1a:74:e4:9a:d2:d1:ef:16:90:a9:
0d:da:2f:0c:d1:47:d4:0c:75:3e:c9:70:05:ff:23:6f:14:da:
42:78:78:50:22:2e:31:3b:0d:c5:c5:9d:af:cd:88:7f:36:4e:
c3:0e:da:d0:e9:69:db:d7:47:f1:81:2c:09:c2:e5:b1:4b:fd:
83:1a:df:a7:e6:9a:f2:9f:ee:ab:79:8d:60:db:9d:74:72:43:
cf:77:37:88:8d:32:cf:29:e8:4a:03:1f:be:be:15:fe:e5:cf:
87:58:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:50 2024 by rpki-client on console-ams.rpki-client.org