Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
File: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer (raw, json)
Hash identifier: udxN4A06vYxDfPiBBfbBJ9HSizrBWSy+gcNzmCwFQLE=
Subject key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DB184FF14C7A4C7F7E94EDCA65D7926F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 Feb 2024 10:44:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25530
IP: 62.113.32.0 -- 62.113.57.255
IP: 185.171.80.0/22
IP: 2a0a:b100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:84:ff:14:c7:a4:c7:f7:e9:4e:dc:a6:5d:79:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 16 10:44:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:68:e2:64:4e:20:68:d2:60:a8:ec:35:47:
c0:a3:f7:23:63:f3:8b:ab:25:37:08:c8:05:9f:c1:
f7:83:d3:d1:0f:41:0b:aa:15:14:a2:b5:d9:03:ad:
69:21:1d:fb:01:8f:7f:3b:e5:69:79:67:ef:d9:12:
44:00:da:e0:18:64:8f:5c:5a:12:9d:94:eb:2a:7c:
a5:96:be:8e:c1:15:cb:9f:09:ce:7a:d5:85:d6:20:
fe:18:a1:21:26:49:e1:14:cb:9c:40:83:a4:19:46:
f0:84:8c:36:3c:57:92:9e:e2:13:1e:d0:85:85:69:
c6:ee:1f:bb:71:a4:9a:09:c7:0c:02:95:6a:34:81:
0a:64:5e:0c:fd:79:3b:27:d5:60:8f:d2:ab:93:f0:
21:19:57:f2:c3:e7:60:96:8f:e9:13:fc:8b:27:46:
3e:57:06:ce:d9:18:da:91:a9:d1:d7:bc:9b:ef:72:
56:6c:51:9c:ef:4b:6a:9a:0f:78:80:80:35:ce:71:
7b:32:13:fc:ff:23:9f:8f:3f:a2:b4:1b:9c:02:a2:
d8:02:79:c4:da:f2:32:16:ad:a5:1c:e7:72:34:b7:
16:bf:06:90:96:8c:21:ef:61:64:1d:a2:b7:af:0b:
3e:bb:3e:5b:c7:a3:34:d9:fb:95:31:e5:39:2c:cf:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0-62.113.57.255
185.171.80.0/22
IPv6:
2a0a:b100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25530
Signature Algorithm: sha256WithRSAEncryption
17:29:5e:6e:22:62:03:1d:76:17:45:fb:e5:59:6b:07:37:02:
f9:52:bd:77:bf:a1:d9:d0:50:10:2c:fc:44:18:94:32:8b:bf:
1e:cb:fa:5a:e2:04:ce:fa:97:ac:fe:0e:74:20:f3:1a:aa:4c:
c0:e5:79:f0:48:5c:29:95:ed:8d:75:f0:80:22:c8:56:a9:a6:
46:29:3c:9a:aa:d4:b8:6d:c0:7b:d7:d6:a7:77:94:bd:81:b1:
be:fe:a7:50:29:33:f8:a0:db:ca:4b:e9:64:2b:d4:31:4f:cb:
aa:3f:0e:77:0f:c1:c9:83:34:da:04:92:46:47:22:94:91:22:
80:2b:c4:e7:9a:5a:4b:86:b7:5e:cb:b3:11:b9:6b:10:53:aa:
77:1c:6d:4d:a5:e0:d8:c3:83:8c:da:c3:c7:ae:51:a9:71:f4:
6a:37:b3:d2:bc:14:9c:fa:e1:c9:16:4e:fd:a4:e0:a0:94:49:
ed:a4:06:01:34:42:1d:77:de:c0:6e:68:a8:21:4f:a2:4b:e5:
17:89:86:30:1d:3d:f3:63:cd:96:75:76:fd:d9:58:6b:af:73:
4c:5d:9d:28:bc:a6:9a:e4:7b:54:49:1f:45:d1:f1:e3:a6:95:
eb:d9:fa:24:0a:1f:a0:27:83:40:4e:2d:a1:0d:59:6c:6d:c2:
dd:51:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:21:01 2024 by rpki-client on console-ams.rpki-client.org