Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.cer (raw, json)
Hash identifier: 1ID1RpufSGdRdNkgGvdkgLE6BHOoWjJ5KcDdxZRq9PY=
Subject key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCD15D456A2E4DDB34B12C22AEF5F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57422
IP: 176.100.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d1:5d:45:6a:2e:4d:db:34:b1:2c:22:ae:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cff374657f57078f3ca2c71109d35927c2248681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:3d:8f:f4:7c:8d:c5:8e:2d:a3:13:21:b7:
93:0c:a9:32:cd:f2:77:34:ef:76:4b:b3:06:8a:47:
82:89:bb:7d:46:0f:62:a9:e2:df:c2:f9:b5:20:3c:
06:12:30:6b:94:39:69:ee:98:27:64:44:39:0d:70:
af:e9:c7:64:f9:b2:3d:f1:5d:48:27:df:8a:ca:83:
e3:b9:eb:7d:e4:64:f8:5d:4b:e8:00:b9:c2:4e:e3:
26:67:b5:62:cc:c5:3f:68:20:3f:89:1d:7b:f8:14:
37:36:00:d3:b4:d1:52:1c:89:a3:34:f0:2c:56:9d:
65:90:e0:5d:e6:fc:9f:1f:d8:ce:f9:bd:6b:1e:20:
cd:0d:b3:35:6c:ce:3f:f5:c8:b2:16:7b:a9:65:02:
c4:68:3f:4b:7a:8c:e1:b2:69:e8:34:88:bc:e5:7e:
e7:2a:8d:c0:9a:a4:56:20:52:5e:bc:53:6d:16:ca:
76:5d:1d:f4:b1:d4:69:02:ab:c0:e9:28:09:99:17:
d3:7e:0d:2d:a4:5a:6a:96:09:4c:ab:68:10:21:0a:
3c:c6:39:e4:7b:ae:03:f6:f0:89:a8:8a:35:9b:4e:
86:86:a5:d8:73:58:21:2a:28:e7:b1:94:fb:1f:13:
6f:50:8b:f3:33:aa:05:d1:fe:a3:ea:21:52:bc:9c:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57422
Signature Algorithm: sha256WithRSAEncryption
62:a6:84:5a:f4:df:6f:e6:6b:0b:08:e8:ed:ed:ee:15:aa:6a:
01:26:88:66:fb:1f:4c:89:eb:ad:ed:48:1e:49:93:51:11:cd:
ef:bb:1f:8c:ac:0a:a2:fc:ce:12:8f:10:0e:5d:da:75:ba:a2:
7a:16:2e:09:10:05:3a:15:e1:e4:5e:8e:98:c6:b2:d5:8a:46:
96:af:b7:20:4b:35:d5:7c:ba:d9:32:ea:33:20:0c:cf:e6:59:
61:16:04:cf:07:89:0f:72:fd:ad:9c:f1:40:55:10:4d:7e:fe:
42:df:a8:91:86:df:ce:c4:5a:4e:8c:37:ac:6e:b9:22:4c:b3:
9f:23:c4:30:ca:86:50:d2:30:37:10:1b:94:ee:7a:1c:d0:a2:
bb:a3:58:30:11:f2:3e:93:34:b2:b4:24:46:9e:2c:6c:77:09:
90:56:2b:0e:d2:53:fb:0e:de:ed:e5:a7:37:45:0e:16:57:ee:
9a:97:a2:83:7c:92:1b:9e:80:69:0b:87:15:96:2c:a0:1b:5f:
0a:2f:78:01:5c:83:c7:6a:52:96:a9:a0:8d:56:86:fa:21:db:
e2:c9:83:fc:bc:4f:d7:15:88:24:50:ae:de:d5:40:80:a6:c9:
73:f5:bc:8e:b8:28:16:ac:dc:cb:08:32:89:ca:35:a1:72:28:
57:33:fc:a6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzJvNFdRWouTds0sSwirvX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzNDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmYzNzQ2NTdmNTcwNzhmM2NhMmM3MTEwOWQzNTkyN2MyMjQ4NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUg9j/R8jcWOLaMTIbeTDKkyzfJ3
NO92S7MGikeCibt9Rg9iqeLfwvm1IDwGEjBrlDlp7pgnZEQ5DXCv6cdk+bI98V1I
J9+KyoPjuet95GT4XUvoALnCTuMmZ7VizMU/aCA/iR17+BQ3NgDTtNFSHImjNPAs
Vp1lkOBd5vyfH9jO+b1rHiDNDbM1bM4/9ciyFnupZQLEaD9LeozhsmnoNIi85X7n
Ko3AmqRWIFJevFNtFsp2XR30sdRpAqvA6SgJmRfTfg0tpFpqlglMq2gQIQo8xjnk
e64D9vCJqIo1m06GhqXYc1ghKijnsZT7HxNvUIvzM6oF0f6j6iFSvJxJFQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFM/zdGV/VwePPKLHEQnTWSfCJIaBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2NkMjE0
Ni03ZmJlLTRlNWQtOTNiYS0zZWEyZWJmZTg3MDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvY2QyMTQ2
LTdmYmUtNGU1ZC05M2JhLTNlYTJlYmZlODcwNy8xL3pfTjBaWDlYQjQ4OG9zY1JD
ZE5aSjhJa2hvRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFsGQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDgTjANBgkqhkiG9w0BAQsFAAOCAQEAYqaEWvTfb+ZrCwjo7e3uFapqASaIZvsf
TInrre1IHkmTURHN77sfjKwKovzOEo8QDl3adbqiehYuCRAFOhXh5F6OmMay1YpG
lq+3IEs11Xy62TLqMyAMz+ZZYRYEzweJD3L9rZzxQFUQTX7+Qt+okYbfzsRaTow3
rG65IkyznyPEMMqGUNIwNxAblO56HNCiu6NYMBHyPpM0srQkRp4sbHcJkFYrDtJT
+w7e7eWnN0UOFlfumpeig3ySG56AaQuHFZYsoBtfCi94AVyDx2pSlqmgjVaG+iHb
4smD/LxP1xWIJFCu3tVAgKbJc/W8jrgoFqzcywgyico1oXIoVzP8pg==
-----END CERTIFICATE-----
Generated at Fri May 3 09:43:31 2024 by rpki-client on console-ams.rpki-client.org