Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
File: zf9bPNry6tG8MwlBG_lJLNmHr7o.cer (raw, json)
Hash identifier: 70bMhVsU1Q7Ly4a1WfMMGhIPEUQIvc1jBXFYgmnWJkg=
Subject key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FE770C874608C61F96135234477661C63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Jun 2024 08:07:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.246.128.0/20
IP: 193.247.112.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:70:c8:74:60:8c:61:f9:61:35:23:44:77:66:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 08:07:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:80:d0:05:84:c7:e3:c4:bb:b9:53:f5:b3:
86:c0:ff:dc:5a:91:4e:89:2f:93:63:f3:d4:ba:9b:
db:64:c8:5c:27:8f:83:8a:64:21:d1:a9:84:74:bc:
17:f5:d0:dd:13:67:82:ad:13:25:0a:73:c1:97:0e:
17:8a:0e:d2:85:ef:fc:71:54:e5:fc:85:10:e7:12:
48:99:90:1a:52:12:99:7d:a2:f2:8d:c4:6e:1b:4c:
f4:56:5b:78:2c:4e:76:71:8d:e4:19:ce:b2:dd:f8:
17:5f:88:7e:05:a0:43:3b:25:9a:fc:dc:58:20:f0:
5f:53:fc:3b:c2:22:43:12:92:58:ba:74:5a:10:35:
aa:6b:ff:10:9e:39:6d:03:d2:48:62:5c:ce:a1:f1:
5a:ac:0d:38:8c:90:cd:f7:29:41:c1:f0:33:65:df:
60:e9:f6:2f:38:23:64:7c:7c:bc:b9:47:bb:10:72:
d8:e3:a2:18:58:31:eb:cb:72:de:8f:53:22:19:8f:
90:88:85:be:b3:04:eb:c5:68:59:cc:68:4c:80:f9:
03:47:3d:e0:c3:61:3a:e4:53:16:7c:80:96:38:55:
b2:02:33:c6:ff:e3:2f:87:cd:ef:14:f2:6b:a4:4e:
36:54:d3:eb:8a:54:bb:22:54:04:60:0b:12:30:9b:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.128.0/20
193.247.112.0/21
Signature Algorithm: sha256WithRSAEncryption
68:84:6c:cb:d2:a4:85:a3:8e:76:d4:de:49:b4:19:48:b1:bf:
d2:0c:f6:4b:59:92:e4:08:bb:8f:1a:d5:a1:5c:dc:ea:9d:06:
89:fa:bc:d9:2c:9c:fb:8c:fd:0c:ed:97:5b:73:4e:76:aa:b7:
40:80:47:83:fe:e0:4b:d7:75:a7:23:08:45:d9:a6:ce:2a:7c:
d5:ef:6e:c2:78:f3:53:e6:25:bc:12:a1:9d:05:87:26:99:f9:
4c:b9:35:a7:72:70:89:b8:28:e3:4d:cf:75:dd:cd:49:4c:7a:
b8:4e:da:6d:c8:52:1d:24:86:cc:85:12:8a:b1:8e:0d:2e:56:
78:41:84:c7:ea:a9:be:0b:21:73:a4:fd:f8:ae:a6:64:d3:ba:
c3:e8:0d:29:3f:46:e4:27:08:07:18:1a:1d:cf:8b:45:34:73:
b0:e1:d8:04:59:11:29:44:2c:8b:ef:e6:46:47:7e:59:04:b4:
de:a2:bb:a3:6e:12:79:b7:fd:56:71:79:55:1b:23:83:4e:92:
5b:10:59:51:82:ac:16:e3:ca:12:ca:3a:df:c3:05:36:39:b3:
2e:fc:64:ab:e2:ce:45:36:6a:37:22:b8:a1:3b:30:18:f2:c4:
fb:90:99:09:12:0c:bd:2e:a4:c3:76:8a:b0:4b:6d:57:82:44:
69:e3:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:56 2024 by rpki-client on console-fra.rpki-client.org