Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer (raw, json)
Hash identifier: VQedpL6z1hvJ2gp07fgRtNEI2dzli5GQsO0o4mfhwII=
Subject key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DEF494BE4369C3DD3FDBE78693CF6A2E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Feb 2024 10:36:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.255.208.0/21
IP: 185.37.176.0/22
IP: 2a00:a1e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:49:4b:e4:36:9c:3d:d3:fd:be:78:69:3c:f6:a2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 10:36:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:4d:b4:83:19:1a:42:d2:7d:c2:b5:05:14:
dc:78:5e:53:60:3d:76:fe:94:9f:96:90:a5:71:99:
ae:93:3c:7a:29:f1:5d:da:17:35:d0:fe:c0:88:3f:
5a:0a:93:75:d7:d0:13:43:24:d4:d7:40:c3:68:ac:
c7:a4:69:2b:c8:cd:e7:8e:be:2f:a3:d9:88:44:fe:
85:c6:bf:67:05:f4:b2:84:86:5e:b7:d3:83:1d:8c:
5f:14:3b:3d:06:27:78:e0:e6:de:e2:b1:9f:7d:48:
71:b9:6a:dd:13:2f:c5:3c:4c:b9:e2:a2:22:42:93:
59:7b:6c:fc:c9:e0:4c:de:49:61:22:63:51:2c:a3:
ac:d6:13:32:69:37:65:c7:4e:01:f3:6e:c9:a1:10:
25:99:80:0e:35:39:8e:a5:eb:44:d3:a2:d3:35:1b:
70:89:a8:b1:4a:7c:4a:a7:0d:92:01:7c:3b:31:cb:
96:4e:b4:99:f7:ad:eb:bd:67:2a:b0:f0:ac:6f:f8:
95:ed:e1:4d:ed:d0:ab:5d:30:49:68:4f:4a:f9:65:
c1:ce:75:de:d4:9a:9c:ee:0e:53:09:92:b8:86:e8:
0e:2a:9f:75:f7:1d:f9:c1:77:e1:b4:10:53:72:15:
37:d2:96:7c:7b:b1:84:eb:c7:64:b9:cb:dc:ab:49:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.208.0/21
185.37.176.0/22
IPv6:
2a00:a1e0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:84:f0:55:97:1a:c7:d8:7b:5e:d0:44:a4:31:91:52:31:75:
5f:eb:50:89:3e:8b:81:7e:ce:15:6d:ef:b5:f5:78:4a:ab:8b:
e9:ef:1f:c5:fb:77:21:5b:5e:99:88:52:46:24:be:9b:6b:02:
0c:cc:3e:87:61:89:19:74:eb:37:dc:e6:38:b5:53:b5:af:5e:
fe:a3:05:af:24:0f:c1:8e:4e:1b:a6:8c:cb:bc:10:15:62:6a:
15:24:10:8a:47:9f:3f:b8:da:77:64:6c:84:c3:ff:68:5f:5a:
c3:f8:ed:9f:46:ff:bc:e8:41:06:07:6a:c4:94:d3:65:de:12:
10:cd:01:d3:98:60:2d:29:ef:34:4d:f0:fe:17:03:f1:3c:ba:
ea:da:c3:48:f2:65:d8:7c:ef:17:b6:92:ee:2c:78:29:69:b0:
4e:53:99:d7:4d:87:36:6a:4b:6d:0c:7c:90:9b:89:2b:79:29:
75:80:3a:71:09:14:91:02:fd:67:90:69:cb:a8:f8:fb:f8:41:
98:e8:48:a4:8d:e7:b8:88:a8:3e:86:79:05:20:ab:ec:3e:77:
cf:05:ab:86:c7:bb:07:2f:95:c8:7e:43:fc:64:b9:21:76:73:
b1:65:6b:76:0b:b5:3d:a1:74:67:ee:ae:00:92:a2:19:a7:47:
e8:49:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:36:26 2024 by rpki-client on console-ams.rpki-client.org