Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.cer (raw, json)
Hash identifier: hltLpUFKCWf+GS1WClW3sq7wkPAQIgbGVs2q8ItEAws=
Subject key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D407E9DE7CA6BE0694AA6695B18C5210F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jan 2024 12:00:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.146.120.0/22
IP: 2a07:5080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:7e:9d:e7:ca:6b:e0:69:4a:a6:69:5b:18:c5:21:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 12:00:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:db:cb:32:37:ef:71:d8:74:35:a2:cb:59:
17:1b:eb:4f:74:2b:22:59:21:7b:17:e7:49:46:53:
1f:ea:7d:05:1a:6f:91:12:c3:eb:ab:35:18:f3:8f:
6d:e4:af:32:a0:5b:14:38:14:f9:22:c8:a4:5d:7f:
ff:e1:3b:29:8e:38:14:d3:bc:de:17:0e:bd:27:59:
44:0c:4e:23:d7:62:1c:d6:83:ea:bd:1e:a5:e2:dd:
99:d8:87:d5:c1:5b:a9:b9:1c:b7:d8:59:81:05:27:
53:88:e5:39:fe:95:b6:dc:c4:92:d2:3e:93:8c:c9:
dd:4a:1e:03:d1:4d:e2:21:05:f1:50:72:8a:27:0e:
7c:73:49:da:7e:da:c2:28:b0:59:eb:db:9f:04:c3:
ae:3b:2d:63:bc:80:c6:dd:b3:e2:1e:ef:1d:fa:6c:
c4:d5:cd:ab:6d:c9:23:42:b3:cd:31:61:8e:23:5b:
c2:97:64:d1:dc:15:52:32:35:43:23:00:86:b7:d0:
f6:20:b7:70:a6:ee:bb:23:28:9b:14:67:98:fd:27:
56:8b:2f:d8:a1:ea:f4:a2:03:fe:c1:bb:43:e8:9f:
cb:db:2e:93:cd:6e:4b:69:76:cc:13:19:fc:79:d3:
cd:23:99:61:05:69:5b:a4:20:b8:b4:18:8c:c5:80:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.120.0/22
IPv6:
2a07:5080::/29
Signature Algorithm: sha256WithRSAEncryption
59:ce:a9:a4:af:55:a1:71:18:25:50:e3:ad:5b:d8:07:bb:2f:
eb:7d:ec:de:b6:0b:08:01:08:05:95:b1:a8:27:3e:2d:72:72:
e8:d9:f4:0e:4d:40:29:a9:08:86:b9:7f:ad:91:c5:8e:04:59:
a6:ef:fd:0f:5c:91:d8:6b:2b:48:ea:ec:66:0c:0e:22:de:d5:
d4:71:3d:91:b7:eb:b5:41:a3:3d:cc:46:9a:cf:90:98:52:fc:
18:3e:88:8a:2c:4e:34:39:74:fa:7f:e2:49:da:9a:ff:9e:70:
1b:2b:1e:9b:d9:b6:44:c0:a9:8b:6a:64:47:3f:83:0d:6c:32:
28:d5:55:9e:15:9a:6f:88:ea:f3:38:cc:16:30:1c:4e:f7:2f:
82:de:81:10:1e:2c:88:41:60:8f:1f:4a:17:86:5b:2a:d1:ae:
37:bb:13:29:40:58:ed:e6:b7:6e:86:16:5a:09:07:d5:3d:6f:
6d:31:95:0a:3d:0d:20:a3:da:2e:e0:f5:3d:16:73:41:6b:86:
20:27:ce:b2:7b:ea:3c:47:1b:4a:5f:38:a7:32:86:bf:c1:8b:
62:38:65:61:a3:7d:b2:6f:7b:4d:75:06:93:c9:ab:5c:d3:6b:
cb:b9:fe:7b:a2:a2:bd:16:9e:1e:ff:bb:34:0d:39:0a:87:68:
8d:f1:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:11 2024 by rpki-client on console-fra.rpki-client.org