Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
File: zTwRDf139XdXORwPrt7r42CGVx0.cer (raw, json)
Hash identifier: 5dkUK5/eg3jh4SMe0tmTdxiA8VBqUUyM9jNhPR/ei28=
Subject key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D185FB6F299D66DC933C90BD5DFAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43598
AS: 57019
IP: 45.84.68.0/22
IP: 193.187.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:5f:b6:f2:99:d6:6d:c9:33:c9:0b:d5:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd3c110dfd77f57757391c0faedeebe36086571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:bf:95:36:f6:16:fa:99:e9:5a:a1:1b:ed:
01:22:b2:34:1c:13:85:e2:d1:38:f8:5b:43:dd:81:
1c:91:ac:3c:ca:d7:f5:fa:82:32:f3:44:ca:89:94:
28:a8:e2:b6:d3:9b:2d:67:2e:a0:c3:22:25:8b:63:
96:16:dd:f1:da:02:b3:42:9c:73:71:13:ae:5a:69:
26:12:85:4a:a8:9e:04:77:db:ca:4c:0d:14:9c:33:
84:18:0b:90:01:f9:1c:ff:71:26:fe:0d:7f:c4:ba:
fb:5b:7c:91:16:25:a5:d8:7b:f7:92:29:36:8d:6a:
08:c6:ff:60:a6:c5:f4:be:da:1a:3a:41:7a:fd:74:
07:32:c1:eb:ba:75:2b:36:ae:9c:6f:06:2c:c6:14:
b5:19:a7:66:b7:8d:f8:ec:7f:7f:29:f4:af:ba:5a:
3d:f7:78:03:87:b9:f0:3f:6c:23:6f:d6:a7:98:4b:
c0:be:40:93:d2:97:9c:88:da:90:bd:e5:f4:f3:a6:
27:04:37:21:5c:c7:90:7a:d4:ad:09:81:f1:dd:6f:
ba:b6:c3:3c:ea:b3:72:bc:3d:f5:9e:65:ab:a0:91:
77:79:33:b6:cb:e9:6e:12:80:18:dd:bb:8f:0f:2c:
79:86:8f:5b:e9:b2:37:b2:83:97:16:c3:30:e1:8b:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.68.0/22
193.187.192.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43598
57019
Signature Algorithm: sha256WithRSAEncryption
29:cc:4e:5e:1a:65:b2:39:30:29:fb:77:69:d9:e8:8b:06:1a:
4f:42:6c:05:48:4d:86:b5:33:40:2a:7b:75:18:ab:c7:99:1c:
8b:fe:fe:3b:b7:77:e6:8c:ef:2e:6b:42:b1:7a:6d:f0:b8:2d:
1e:37:3d:33:07:19:30:73:d6:7f:81:fc:3b:38:a9:00:a9:cb:
2c:50:68:7e:60:81:a7:89:cd:e4:df:20:71:fd:d2:39:31:cf:
07:30:24:e0:29:11:72:95:c4:91:09:4e:a2:81:68:c3:36:d1:
77:30:31:94:ed:68:34:3b:01:a2:02:0d:2e:63:2c:75:68:d2:
d2:57:a2:dc:ae:15:fc:6c:06:02:d4:f7:8a:56:a6:59:8b:30:
09:57:92:3c:ab:de:26:98:32:3b:fb:10:87:d7:87:0f:36:07:
85:9b:32:2d:55:a8:11:5c:f3:a0:68:96:4b:44:ef:7d:cb:e7:
1f:9c:e6:0a:06:0c:ca:16:6f:f8:cc:db:e8:b5:9b:a3:3f:32:
9f:1d:99:f5:5c:58:52:c8:48:a8:54:b7:f8:ae:34:63:ce:36:
d1:a7:92:d8:07:f5:5a:c3:e8:d8:49:f4:94:85:7c:4b:42:c4:
71:13:c1:b3:61:56:ee:27:31:07:43:86:d1:d0:9e:35:3f:65:
18:67:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:29 2024 by rpki-client on console-fra.rpki-client.org