Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.cer (raw, json)
Hash identifier: oEvBy/GFjkfkjRQImXakf9Rpuy/yZKBp1T2YOvOAIuQ=
Subject key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29C75B9AA86844B465A480DDBCB541
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29513
IP: 37.60.184.0/21
IP: 46.31.208.0/21
IP: 89.251.48.0/20
IP: 146.66.144.0/21
IP: 193.105.225.0/24
IP: 194.180.228.0/22
IP: 217.64.48.0/20
IP: 2a01:1c0::/32
IP: 2a06:15c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c7:5b:9a:a8:68:44:b4:65:a4:80:dd:bc:b5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:83:c1:cb:3b:fa:23:85:1e:e0:f3:07:14:
e8:4e:12:9f:d1:8a:70:43:7b:88:a6:09:88:24:06:
cf:4c:4f:18:48:eb:79:94:a7:18:23:84:dc:79:83:
6b:43:4e:78:dc:bd:25:fc:b1:63:05:1c:76:6f:b0:
e9:7b:49:db:fd:19:d8:cd:d4:11:ff:06:4f:70:33:
45:f3:36:87:a2:bb:c6:53:2d:05:d4:25:94:d8:b1:
a9:a8:f1:d3:48:76:36:b4:39:86:b1:40:ae:58:be:
a5:ff:54:23:40:3e:59:c2:69:83:9c:39:45:d8:a5:
ac:67:ef:74:2c:45:a4:50:d0:e0:de:97:c3:06:ba:
9a:78:79:cf:9f:6d:1a:69:24:82:61:0e:47:71:49:
1d:f5:8b:12:86:b7:3e:36:d6:2a:14:b9:c6:b2:f8:
2a:6f:00:fb:f0:16:10:bd:e4:db:8d:68:b8:a6:17:
42:66:b3:9d:32:e4:c8:81:e6:71:38:87:31:fe:44:
45:42:08:a5:78:48:ba:37:63:a3:f1:52:48:31:46:
86:fb:dc:11:81:9b:95:4d:91:c8:1c:ec:47:4d:fa:
be:01:08:e2:50:4c:2a:f6:6b:e8:74:7a:07:b5:90:
8d:68:f1:40:3a:46:2f:59:b9:15:1c:4e:92:85:fc:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.184.0/21
46.31.208.0/21
89.251.48.0/20
146.66.144.0/21
193.105.225.0/24
194.180.228.0/22
217.64.48.0/20
IPv6:
2a01:1c0::/32
2a06:15c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29513
Signature Algorithm: sha256WithRSAEncryption
05:cb:bb:aa:15:db:34:82:d1:38:9d:89:57:eb:a0:de:a1:43:
ab:f5:42:fc:ca:e7:15:d1:f0:9b:cb:c4:f6:bc:08:fa:7f:1c:
9a:79:08:69:62:23:53:ee:94:28:50:27:42:2d:d8:76:db:db:
69:64:32:41:0e:92:58:e3:41:ad:39:e7:b8:8d:af:c9:06:48:
40:f3:2c:7b:4c:7d:e2:5b:96:27:f5:2b:37:6a:db:e7:f6:d4:
c4:c0:e4:3d:6d:33:04:b2:8d:54:e5:ab:f7:71:f1:e0:20:27:
28:81:2f:38:9d:84:01:2d:41:f8:33:d6:3f:38:ff:76:12:7f:
8a:c5:69:db:21:89:97:e1:07:9b:43:25:c2:0b:35:09:34:3c:
c1:53:83:e5:18:15:f1:25:13:df:09:25:55:3c:a2:46:0a:4b:
55:12:55:98:e8:0d:80:c1:70:9f:43:88:db:37:7e:df:bd:10:
20:85:58:da:ad:22:3a:3d:99:3a:d3:71:6b:d5:01:53:7a:e2:
b2:90:cd:9c:0a:3b:1d:c2:dd:4a:7d:2a:ba:36:04:70:f9:5e:
e8:86:ae:d4:0d:1d:e5:e0:9d:e5:af:bc:27:ec:a0:4c:4b:9a:
6e:35:ed:8f:5d:2a:1a:f3:65:97:f9:43:68:4d:18:00:ac:d8:
d9:8a:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:42 2024 by rpki-client on console-fra.rpki-client.org