Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.cer (raw, json)
Hash identifier: S9jAXY7ttTKMyww9AauUQ4uve7BS+nOzlLoJDAzqx4g=
Subject key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801C8183733CDE56F4BA78015A9CC56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15654
IP: 212.28.0.0/19
IP: 213.143.128.0/19
IP: 2a02:e68::/32
IP: 2a03:2580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c8:18:37:33:cd:e5:6f:4b:a7:80:15:a9:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:ac:4c:bd:60:49:7b:4d:cb:a3:19:1b:94:
89:4e:12:f4:ac:db:95:07:0c:cc:05:0a:5f:5d:cd:
47:6f:94:dc:56:82:b6:95:f5:45:b6:39:52:72:68:
f9:37:5d:80:49:f8:8a:25:9d:4b:c5:b6:d5:35:93:
bc:dd:7d:67:26:af:69:fa:80:a4:cf:73:12:84:81:
59:63:e8:00:ac:96:a0:23:6c:5b:80:8e:e4:0b:4d:
42:98:3b:95:4a:50:11:7e:c8:55:0b:25:e1:de:d3:
b5:3d:4f:17:50:db:56:55:00:79:69:70:f3:5c:9d:
4d:cf:3a:d7:fa:22:1f:0d:a4:e4:78:99:38:dd:f8:
c4:98:28:53:9f:03:9e:59:04:6f:99:a6:62:13:11:
8e:82:04:3f:5f:dc:4e:92:17:42:80:2e:19:3d:a0:
be:37:9d:46:4e:7d:43:03:5d:7f:75:30:ab:a8:0c:
95:2d:9c:25:0d:88:e6:86:01:bc:82:d6:07:53:6e:
98:18:17:45:ff:31:76:83:5b:0f:e2:c6:80:d3:0a:
a6:51:4a:33:b2:f5:57:d6:06:e1:12:ce:45:6c:bc:
71:36:43:5c:09:bc:fd:7d:1f:02:82:dc:02:93:fe:
a5:bd:5e:3e:28:35:ba:05:cc:d7:fa:cf:ff:77:eb:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.0.0/19
213.143.128.0/19
IPv6:
2a02:e68::/32
2a03:2580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15654
Signature Algorithm: sha256WithRSAEncryption
9e:3f:23:9e:f6:af:4e:27:4d:8e:2f:05:a0:06:74:a6:22:7f:
57:38:ae:1f:f3:ce:ca:87:00:bc:fd:0d:bd:b1:dc:c0:9d:b5:
77:5c:6b:d6:c7:b0:c6:0a:49:9d:56:cb:f1:fc:94:22:94:2f:
fd:e0:4d:0e:a7:f6:a2:48:aa:47:7e:78:7b:72:98:c6:3b:58:
98:31:98:15:5c:bc:50:e2:56:09:00:f2:93:02:68:eb:03:4d:
78:4e:fe:5f:45:de:dd:b0:72:c5:99:cc:82:39:44:18:68:25:
14:5b:85:2f:8b:3b:0e:b1:95:d0:d8:98:72:3b:af:17:34:06:
fe:dc:98:f2:40:8c:a7:64:a1:f6:ed:72:d3:1f:e1:dc:af:26:
a1:ff:6f:d5:3d:30:22:9f:d5:b4:37:fb:e1:02:40:2c:1f:3d:
56:52:87:8a:97:19:bd:0d:df:93:47:ef:28:97:86:0d:44:0a:
66:91:3c:81:3c:fc:d0:de:28:c1:8c:28:01:8a:a5:eb:45:ca:
fd:d5:89:51:65:43:ba:42:9c:57:58:46:0e:c9:d2:19:c2:d2:
99:74:96:47:f6:e8:0d:63:7c:83:61:4e:90:20:84:86:db:c9:
c1:3d:30:fe:73:9d:df:9d:de:1b:77:5d:ac:12:c6:e8:12:e8:
2e:e0:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:20:45 2024 by rpki-client on console-ams.rpki-client.org