Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.cer (raw, json)
Hash identifier: Yxa7yzWH6PERTe+kWiOCH3E7RQ2Qd7rlV+UOCwb0qpY=
Subject key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011FD138609285CA8966A7888AA5E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197290
IP: 46.31.128.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1f:d1:38:60:92:85:ca:89:66:a7:88:8a:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce2c505f77dca8117ef0625710744cb359736b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:a1:97:17:87:cd:51:aa:a8:8c:b1:4d:36:
36:e0:55:a7:4e:de:94:b5:41:26:91:6f:f0:cb:cb:
4b:07:c6:86:52:38:6c:05:93:72:70:1a:90:7a:a7:
04:88:56:be:b0:77:da:48:05:8a:1c:7f:24:43:64:
76:be:05:f8:8f:cf:4b:92:ed:fd:30:48:ba:94:e7:
64:12:79:9e:a1:6f:0b:0d:91:9e:00:78:fd:a3:92:
a4:d3:99:2c:75:3d:48:35:cc:78:f0:dd:3f:36:1d:
0b:94:dd:ef:d0:d8:68:63:31:fa:a2:8f:89:fb:49:
11:e3:fa:63:e2:bb:51:d7:d1:c2:9a:dc:16:00:07:
2c:dc:3c:68:c0:3c:7f:11:62:c0:a7:2d:65:2e:23:
91:81:af:61:31:c1:fc:cf:eb:79:15:ae:8e:93:01:
f1:c8:a2:d7:62:b6:2e:de:74:44:59:4e:c9:44:66:
d0:8f:6b:3b:6e:2f:e8:93:55:48:d6:63:b5:6c:a7:
82:6f:84:35:ff:85:7a:9a:bb:02:a2:2f:f9:5c:23:
8f:3d:b4:e2:fd:a8:35:e0:bb:ca:27:7f:a5:ed:87:
4d:41:d9:2c:02:38:2c:9b:21:50:35:89:f1:4a:78:
87:8a:7f:7c:cb:69:d3:7d:9e:0e:5c:e9:b5:f7:da:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.128.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197290
Signature Algorithm: sha256WithRSAEncryption
2f:22:66:92:63:0d:a1:00:47:ef:05:89:82:55:59:f3:93:f6:
f7:40:11:1a:e3:55:b3:05:61:6b:0c:8e:b0:ce:32:4e:ca:b9:
b8:20:35:5d:dc:6b:f8:bc:af:06:0b:8b:f0:c0:17:6f:b8:92:
c1:6f:76:88:3b:da:a6:c3:de:9b:e3:b7:20:f6:3b:1a:c7:a9:
5f:85:4d:9a:bf:a3:b4:fe:91:a4:89:bc:9b:91:6e:90:34:e9:
fb:78:b9:c9:b1:a9:13:3b:2a:be:bd:cc:b4:bb:eb:00:c6:ae:
9b:d7:fb:ea:84:e3:6e:22:99:1a:63:59:d8:d4:8d:df:d8:7f:
3c:b8:cd:30:78:da:61:ad:04:e7:eb:4c:6f:ce:dd:af:39:92:
8e:1e:26:ed:a6:8a:2b:ac:03:ad:ca:5e:ee:43:22:2e:4b:dc:
a5:75:44:03:9b:02:ec:3f:ab:f4:aa:e8:df:94:1c:5d:ea:51:
54:5e:fc:82:37:cb:a7:39:fa:80:9f:a2:f3:a2:52:2f:b4:ef:
bd:65:72:63:9c:75:c7:5f:11:8b:c2:60:0d:58:f7:b1:5a:86:
9a:c5:fe:08:cf:47:6a:b4:cf:35:5a:89:cb:c8:65:77:b3:13:
f2:e6:a3:90:02:e0:fe:20:66:bb:00:cb:60:39:f1:09:91:94:
22:5b:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:09:08 2024 by rpki-client on console-ams.rpki-client.org