Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.cer (raw, json)
Hash identifier: 1au1HvjdZ2hVs7KppcOQXX6g/wh3TBHUUZdwDtgZwmc=
Subject key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE43BEEAB33B41EA9D3264235C605
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 109.224.243.0/24
IP: 185.113.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:3b:ee:ab:33:b4:1e:a9:d3:26:42:35:c6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:3d:43:7a:f5:78:45:2a:c7:be:fe:3a:98:
ea:44:82:8a:6a:17:5b:5a:a6:91:fe:a3:a8:ee:0b:
34:74:df:39:2f:bd:ad:f5:e1:67:24:83:4a:0d:b5:
48:6b:72:10:03:d2:7d:e0:68:8e:36:60:d6:fe:f6:
44:5d:4a:e1:67:54:b8:8f:97:78:3d:66:65:ba:8f:
a5:6f:79:f4:f2:74:d8:5b:01:8b:47:03:f1:8a:9a:
90:49:58:bd:b5:38:cd:22:80:04:14:e1:42:b2:01:
16:03:2c:e1:49:50:1e:19:d1:78:78:fd:36:6b:e0:
63:23:a6:d5:3f:ed:1d:b3:bd:fa:73:89:8b:88:3a:
76:a0:6a:15:d2:f9:9e:5e:e4:2a:53:e7:fc:16:c1:
59:b6:14:33:5b:01:aa:aa:f0:35:46:8e:f3:5b:ee:
9c:b9:88:14:77:5f:05:25:6a:b7:b3:d0:fc:8b:99:
af:16:cb:84:e7:e2:43:06:ef:74:43:a1:00:ff:8b:
48:cd:9b:4d:da:b6:47:f1:ec:3c:ed:1e:83:11:d0:
78:39:d9:c1:b4:9e:d7:35:88:59:d0:cc:a4:ac:39:
91:3f:5c:5b:88:fd:94:78:06:e6:49:bb:ff:ff:89:
3d:dc:ff:04:e7:bb:e0:a8:eb:e7:dd:11:bf:ca:85:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.243.0/24
185.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:65:25:e8:10:ff:38:0a:2f:3b:d7:c7:7b:26:e7:80:65:6f:
fb:92:20:92:79:2a:b5:a9:66:60:52:bd:bf:08:51:16:10:e2:
1b:3e:25:61:4f:28:f2:d9:f3:d0:c3:6e:27:ce:a9:7b:d5:32:
c0:ff:01:7b:39:02:bf:a2:a1:89:ee:1c:47:d2:00:a5:11:06:
ef:95:35:20:57:62:58:89:1f:a7:a2:57:b6:6f:4a:00:bb:88:
9b:c2:54:16:7a:fe:dc:59:40:56:0d:44:d4:84:15:78:e7:68:
fb:7f:0f:5c:70:d1:d1:0e:f9:28:7d:d2:95:1e:5b:7c:48:35:
0e:62:e7:dd:ee:1e:79:ef:26:7b:1d:9d:23:8b:3b:89:8d:e5:
6e:9a:26:16:44:c9:3b:92:b1:93:24:a0:33:c8:8f:5c:f7:ee:
81:e9:ac:da:ba:cc:43:aa:5a:d0:30:d1:3a:64:aa:0a:02:1b:
63:6f:b9:f9:cd:25:21:62:50:b3:01:1b:ab:9f:c6:73:e9:bb:
28:b6:b7:cb:4a:57:35:7c:fc:eb:4c:82:09:b2:7a:0f:61:c6:
bf:5b:0e:9c:ad:ce:87:ae:2a:cb:11:f0:59:95:7f:7c:0b:38:
b5:4a:95:fe:f8:35:16:e2:9b:bb:63:6c:af:dd:1d:67:36:22:
aa:98:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:21:08 2024 by rpki-client on console-ams.rpki-client.org