Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.cer (raw, json)
Hash identifier: q00FJqRrIQ97IkkWgsTOcnRD8Rcp00Y+jy8D80ZXPWQ=
Subject key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D454BAD16665680E0F6194E6CE3512E60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jan 2024 10:23:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57424
IP: 149.62.48.0/21
IP: 185.77.204.0/22
IP: 2a03:5a60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:4b:ad:16:66:56:80:e0:f6:19:4e:6c:e3:51:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 10:23:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:2b:e4:0a:33:bf:8d:d2:73:2e:47:a1:9e:
3f:da:c5:2f:f2:36:81:6d:59:ae:75:70:25:e1:85:
81:07:ce:8d:c4:0d:47:a2:6c:5b:d9:00:dc:00:2c:
a7:e2:cd:28:a9:9c:d8:37:19:fa:b4:fc:d8:12:b8:
64:a4:4b:5f:da:c2:46:ee:58:9e:4a:e6:0c:11:cb:
65:8d:61:7e:b6:8b:36:77:06:9c:31:94:cd:ee:63:
4a:43:62:4a:1b:8f:2d:eb:69:9b:15:ce:8b:84:89:
47:d4:56:bc:c7:b6:32:9e:eb:cd:20:8e:2b:3d:d3:
c4:77:5e:8e:c5:5c:34:ba:4a:48:db:1a:50:99:09:
d1:33:21:22:4d:a9:df:24:34:fd:98:66:86:ba:82:
ce:1d:bc:bf:af:81:8d:05:ae:53:7a:51:d8:71:7d:
ec:09:ce:24:72:1d:80:30:87:62:92:fd:df:f5:47:
69:c7:6a:e4:b5:cb:97:b0:70:e2:76:7c:4d:8d:2f:
bc:dc:5a:13:1c:17:3a:3f:eb:69:3e:46:fd:8d:b2:
f1:c2:28:d0:c8:db:3a:59:80:05:d5:30:e0:32:92:
a0:0a:fc:10:06:0d:c1:ff:5e:8b:09:11:b8:b2:8a:
f9:51:dd:61:8b:2c:e4:ca:8f:08:25:c3:ac:04:65:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.48.0/21
185.77.204.0/22
IPv6:
2a03:5a60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57424
Signature Algorithm: sha256WithRSAEncryption
67:c0:d6:1a:f2:83:b3:19:ff:43:16:f8:4d:4f:31:b0:2e:44:
29:e9:d6:ae:85:2b:80:4f:7b:df:bf:19:9a:88:15:90:fc:b7:
89:cc:d9:27:bd:f0:78:c9:7d:9e:d0:02:86:1b:51:a6:fb:32:
ff:fd:49:e6:0f:49:7a:f7:fb:6a:fe:bb:3c:59:3c:a2:c4:7d:
22:26:9c:b4:22:e6:3f:39:a2:c1:e2:81:e4:9f:6d:b5:dc:99:
d7:b7:9b:33:b4:46:c5:7a:4d:e6:b4:49:8c:3d:fd:3c:26:d3:
64:3d:ff:c7:98:17:ff:88:6f:7a:34:1b:45:9f:13:13:61:4e:
a2:f4:56:3e:37:9c:bb:c4:5c:96:84:5a:ac:8d:84:72:8f:0c:
eb:e4:71:aa:30:ac:8d:71:d7:81:4a:4b:ea:ab:30:8f:37:54:
93:6e:a3:0e:77:5a:8c:f1:11:55:4c:f8:18:f4:50:98:9b:ae:
08:09:33:6b:fe:d9:3d:22:a6:c5:cd:8c:5a:2b:97:91:1c:b7:
cc:7d:35:e6:6f:b6:27:1b:70:30:26:67:33:f6:d5:e5:a7:53:
ed:80:8b:c0:e1:a6:40:ac:9e:77:a6:72:aa:c9:e9:27:b4:e3:
a5:d8:73:11:79:7a:9a:2a:46:e4:03:8f:42:d0:9b:ca:0c:7b:
06:46:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:19:42 2024 by rpki-client on console-fra.rpki-client.org