Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.cer (raw, json)
Hash identifier: 30g8GQhuS08O19Muh11fQ/XCac1hM/prUb4OAcyAecU=
Subject key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420686090F38683B4430CFF1E1C16AFA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200701
IP: 77.244.0.0/20
IP: 185.212.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:60:90:f3:86:83:b4:43:0c:ff:1e:1c:16:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:8d:9a:50:5e:97:97:1d:c4:34:94:f1:e4:
2a:03:d3:4a:d8:ca:12:9c:d4:73:49:89:b3:42:ab:
50:f0:3d:7b:6a:11:7d:0b:04:29:71:be:af:33:7d:
87:ae:16:00:b3:9e:61:5b:cc:2f:2a:74:d0:14:de:
f6:2a:96:18:64:b6:9d:9e:61:e5:1a:62:88:9b:a0:
cc:9c:8e:ea:d9:83:37:fd:3f:49:b8:2f:6c:7c:54:
e1:37:91:cd:24:be:63:21:63:72:e6:4a:9b:24:37:
92:a4:16:b9:ab:79:bb:fd:6b:d4:00:65:72:1c:0a:
4a:12:e7:98:99:74:e9:1b:ec:0b:84:a8:57:c9:44:
c3:2c:29:71:da:c7:75:ef:ca:5a:32:d8:77:24:57:
a5:20:57:7c:b8:c8:85:ad:30:02:a2:a1:be:ba:d5:
a0:fc:b0:68:5c:16:e3:30:4d:e4:53:f7:2d:30:7c:
8f:af:2d:a7:2a:0d:2c:81:5b:e5:32:db:80:90:55:
14:0c:14:40:95:aa:a4:db:c4:bd:4c:7a:ff:69:f2:
16:d1:7b:3b:79:4a:a0:88:a0:4a:1a:32:09:ce:8f:
fb:2c:ef:56:7e:4e:65:89:1a:f2:44:13:74:8b:a0:
17:e6:d4:98:6c:1b:ff:b5:20:ec:fd:9e:17:b7:25:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.0.0/20
185.212.24.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200701
Signature Algorithm: sha256WithRSAEncryption
30:e9:f9:bd:41:7f:4d:c2:01:8c:a6:f6:5c:ef:9e:5c:71:05:
f1:da:4e:15:bf:54:bd:c7:47:e2:9a:df:26:17:ad:ce:c8:92:
71:26:b4:60:21:29:a1:29:40:c6:72:df:dc:a1:ed:2f:7e:83:
33:23:af:d9:47:19:b6:a4:bd:e4:e9:7b:ca:d7:cd:fa:0f:2f:
93:91:5c:b2:39:fa:fb:1f:90:bb:f8:2f:b3:e9:ea:09:8d:8c:
43:df:d6:2c:c0:cc:1f:5b:30:90:88:43:b9:3f:d2:21:62:1c:
a7:c7:f7:0d:79:f0:d0:5f:5d:5c:f7:1a:80:25:9f:ca:d3:a5:
0f:60:01:c4:57:2f:49:6b:41:76:a4:b9:f2:10:21:c6:12:6a:
29:3d:b1:18:70:32:99:16:6f:f1:28:87:fd:76:c7:14:76:85:
e9:dc:ee:f5:7c:de:72:4c:ad:f2:9d:ba:04:ae:72:f9:0d:13:
42:7f:54:23:54:96:43:b4:f4:90:d5:2e:e2:ee:5e:3b:dc:4b:
0f:5b:89:29:e2:5b:d0:80:f0:16:a2:3a:19:64:4c:65:b3:38:
b6:89:15:14:cf:f6:af:62:a9:01:f7:51:35:4b:ae:99:23:55:
d4:81:fc:d3:aa:3b:8e:bd:58:05:38:a0:c6:86:69:22:6c:04:
0a:1d:ad:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:07 2025 by rpki-client