Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.cer (raw, json)
Hash identifier: hmIv19/WVk01y8qWGiUW4sfJT7V2lAV2zs2mGD+TsRY=
Subject key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500552F55D7395768F2A2556BAFD9BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.186.88.0 -- 193.186.103.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:55:2f:55:d7:39:57:68:f2:a2:55:6b:af:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:c3:81:34:8b:3d:f8:0f:94:61:29:51:55:
b1:06:03:0e:ff:f7:d9:65:d6:d8:cb:6e:f4:05:58:
df:4e:96:80:a0:e5:07:45:75:c1:76:c7:3a:e0:90:
77:bd:b8:18:2f:16:e8:e6:fb:03:15:43:79:b8:f7:
18:26:56:96:8c:48:cb:aa:ee:e0:23:a1:d8:1a:e6:
fb:65:18:e2:7f:9c:72:f5:99:5e:da:83:b2:2d:f0:
0b:6c:fc:6f:1e:44:65:d4:4a:d9:54:fb:5b:c9:30:
7e:b7:e4:d0:26:18:07:9c:59:21:f7:01:56:02:ef:
1c:6a:50:f4:51:cf:31:bc:d4:98:74:46:d2:2a:e0:
f7:7c:f2:e1:a3:ad:b7:28:6d:37:95:1d:e7:28:de:
35:75:c7:e7:6f:39:75:17:f9:3f:a8:f9:30:0e:db:
19:f8:b3:1c:05:a0:59:9c:e2:93:64:a2:eb:ba:e2:
70:02:16:27:47:e8:a9:fc:a8:3b:9b:30:81:97:55:
f8:b1:75:e3:92:ef:a6:b0:62:87:47:d6:49:ee:79:
b7:43:04:01:ae:32:9a:8d:2a:80:11:a5:81:a3:0f:
bb:8b:ca:1f:48:31:5a:77:bd:5f:3b:2c:dc:dc:70:
9b:be:4e:51:42:44:73:18:3d:04:a1:0f:ed:a7:59:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.88.0-193.186.103.255
Signature Algorithm: sha256WithRSAEncryption
9c:f1:cb:08:97:f5:03:ad:83:cc:d8:83:32:5d:e0:7b:a8:7f:
2a:b6:aa:df:c6:48:ee:c1:8a:d8:6b:d3:55:df:ad:8c:0a:0b:
2e:4f:4c:3f:26:c7:8c:66:04:d1:0d:27:04:0c:ac:b5:78:47:
43:db:46:68:3f:90:d1:5f:5f:4c:04:65:76:0d:ba:97:f6:dd:
81:fc:6f:f1:15:f2:ea:85:46:11:b0:f5:6e:dd:f3:60:a1:95:
f9:df:18:4d:1e:b9:b2:1b:54:6d:f7:cb:41:67:e9:40:6f:2c:
43:10:18:a7:c4:8a:14:14:a4:cb:60:10:b9:18:29:fd:c5:92:
2c:3c:cd:21:b3:b0:18:98:3d:79:92:86:4f:84:19:f9:80:8e:
e1:f8:ed:37:a0:53:6c:0c:df:36:a1:65:da:ad:2b:b3:0a:8d:
f4:18:27:27:00:c4:86:e8:79:29:55:f6:48:e3:90:a6:4f:c7:
2e:2d:35:03:57:b6:50:0a:17:d4:4a:82:a7:b7:fb:b6:c4:13:
81:52:51:25:37:c8:7d:8e:3e:b5:d4:1d:10:e0:8e:7e:8f:2c:
93:e3:a8:7d:29:de:88:dc:9a:f9:b3:98:8f:6b:d1:f9:9d:9f:
f9:48:9b:fa:e2:20:dc:94:d8:ab:cc:26:93:d8:75:c6:4a:f1:
99:31:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:21:05 2024 by rpki-client on console-ams.rpki-client.org