Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer (raw, json)
Hash identifier: NTPGZTtKKcp/tkNMQxd1HgIuCWsNOC4X6TTnQ/+xLuU=
Subject key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D7872076B0A50212AA88930AA59F13C47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 08:45:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.72.164.0/22
IP: 2a05:3b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:72:07:6b:0a:50:21:2a:a8:89:30:aa:59:f1:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 08:45:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:fa:9f:ae:97:c0:56:cf:20:8c:4f:6e:e1:
ec:92:d2:cf:6b:14:12:4b:22:61:41:fe:aa:90:84:
db:18:7b:42:d7:17:8c:e8:c6:b6:fb:71:69:03:82:
05:d8:32:f5:6c:40:b0:61:9a:77:0e:02:d3:b7:7a:
81:37:ea:5e:ab:7f:b1:fd:aa:0e:59:7e:e2:cc:9a:
7a:9a:8f:a1:4c:f2:48:e6:38:59:49:93:78:4b:ac:
f9:a5:82:8d:e0:82:21:8b:5f:50:e5:c3:69:92:3c:
47:5e:77:b6:10:17:11:13:c3:05:71:d9:61:13:c2:
f3:33:87:8a:b1:59:e7:e1:d1:2b:f1:fb:fd:76:7d:
cd:e0:6f:b7:22:72:42:0c:ab:25:e9:a0:3d:af:ba:
0a:f6:82:6f:be:ba:03:6a:25:21:8d:05:22:fd:99:
5b:8b:63:f3:a7:9a:36:bf:df:19:f9:30:9d:39:0c:
56:6b:c6:59:86:d8:8c:c5:6b:8c:52:7c:ae:9d:ee:
3f:d9:93:05:33:b1:af:a8:0a:33:ad:c3:a9:33:9f:
c9:ad:ef:30:2f:97:e5:87:02:d0:a1:9d:c5:d1:29:
c3:e7:bc:8a:b4:0c:21:b1:d2:1f:ab:90:d0:2d:5a:
b8:5c:33:74:b6:f7:e4:65:20:d8:f6:17:25:78:f4:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.164.0/22
IPv6:
2a05:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
82:d5:62:fb:b7:d1:13:9f:1b:0d:fc:ec:80:bc:10:5f:b2:a9:
00:05:89:b4:17:62:29:93:cb:4b:43:78:d5:a3:ea:ba:aa:a3:
be:1a:a7:62:13:b2:61:b4:06:14:a7:a8:01:de:f0:44:f7:56:
37:8f:d1:52:85:cb:82:e2:ef:bf:65:5a:0c:3f:36:2a:31:e7:
4a:8d:c8:e6:37:cf:bb:f4:27:68:bd:b4:e6:26:c2:c2:8b:7f:
60:86:29:27:99:fa:0b:7d:ad:df:e9:61:fe:3d:3a:fa:1a:dd:
67:49:0e:75:2d:ff:ec:57:a7:08:06:38:c7:a1:0b:d9:8c:12:
ed:08:11:70:a1:72:02:6a:d7:af:8f:9a:59:62:38:40:6a:ca:
87:5e:66:95:6d:96:8c:c2:fe:2c:9d:1a:02:87:94:cd:1e:87:
0a:6c:45:6f:ca:6f:f3:c1:9d:91:a4:6a:c7:4e:4f:b3:f6:7e:
47:5b:dc:42:a9:35:9f:ef:b1:8e:a3:e3:c0:ee:be:bd:d6:39:
c7:89:80:cf:f3:5b:f7:ba:99:f1:69:05:83:7f:a5:b4:d0:e7:
cc:f8:57:ff:93:10:33:60:18:1e:d6:46:94:cc:e1:da:45:f6:
e3:ed:63:15:3c:fc:78:13:1c:07:95:e0:a5:e4:2e:95:75:92:
9f:72:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:22 2024 by rpki-client on console-fra.rpki-client.org