Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.cer (raw, json)
Hash identifier: 9GBTPVE42DmEtqsy0L9nzl0WEE4+mrqAWOYS95Tf9v4=
Subject key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC3BDF992399678E780F727DD621D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210238
IP: 81.22.224.0/22
IP: 185.132.228.0/22
IP: 2a06:e580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3b:df:99:23:99:67:8e:78:0f:72:7d:d6:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:ac:90:89:f7:13:16:b3:8d:99:5d:b6:16:
2c:44:2b:a3:0d:54:3d:88:19:6f:7e:77:9c:52:86:
14:cf:aa:a6:0f:2a:e7:82:00:0e:2b:a3:06:f7:48:
b8:49:08:fa:fc:dd:ce:17:53:7a:2d:83:65:25:d2:
dc:6c:96:34:c3:9d:2a:95:e0:06:3d:0e:97:74:78:
4c:e1:20:3f:85:b6:59:49:18:d4:53:0e:2d:a6:a3:
b8:7f:e0:a7:0b:f7:5c:4f:84:4a:21:b3:12:63:3c:
6a:b6:fb:a2:c8:19:13:7c:0e:e8:e2:72:13:45:2b:
cc:20:aa:32:b8:e2:92:ca:fb:be:d7:15:7e:95:93:
7a:00:7d:3d:5d:fd:bb:4c:c9:e2:c2:e9:57:8e:e2:
15:b4:e0:43:7f:00:ad:57:f8:91:8d:f0:77:9f:91:
9b:70:7d:32:b9:51:1b:9e:67:94:72:10:e2:3a:39:
5e:7f:08:67:7b:69:a9:07:ae:c7:f1:61:df:99:9f:
56:ab:e2:a1:db:d5:a4:f0:62:10:7d:4e:5a:bd:81:
c5:89:83:15:24:86:df:43:c6:74:bc:65:2a:87:7f:
52:d5:f2:4b:5c:0b:03:c7:b2:df:db:09:48:90:a8:
a6:ab:ea:13:0e:33:f2:c5:95:b5:f5:dc:99:e8:be:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.224.0/22
185.132.228.0/22
IPv6:
2a06:e580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210238
Signature Algorithm: sha256WithRSAEncryption
35:83:49:ad:6d:85:f5:1b:58:b6:8e:c5:28:c9:c6:52:5a:a1:
1c:16:f3:08:af:ac:a5:f7:ca:d0:b1:c9:39:84:e1:bf:4a:e9:
c3:61:46:66:16:21:b7:69:ae:65:06:42:29:15:52:48:6f:02:
80:b2:0f:ca:ad:a7:7f:8c:ce:73:95:67:00:d3:fe:5b:a4:a7:
e6:88:47:c9:bb:98:6a:1b:ad:a5:79:05:db:80:7d:10:72:89:
93:7a:30:ad:4a:36:5e:f9:35:3c:14:e8:6f:d0:dc:1b:c2:c2:
0c:17:f8:0b:b0:87:e3:fa:92:e3:d2:e3:a8:29:a9:84:8b:e3:
c3:c0:0a:82:da:2a:65:4e:c0:01:7d:af:38:f9:0e:e1:75:e7:
c6:5e:ec:b9:ec:5e:bc:59:43:77:cd:72:2d:d4:40:aa:c8:c9:
ec:45:df:ae:5e:13:7e:c2:bd:ec:7c:a8:76:8b:0b:25:a7:c5:
1e:3a:26:f7:96:4c:46:d0:84:44:f6:e4:1a:61:ee:29:fb:05:
74:0f:d3:0c:06:e4:f9:2d:26:ba:1b:f7:3c:81:72:48:11:ca:
9e:26:9f:2c:16:ba:bd:7b:e7:60:77:20:2b:8e:50:17:88:e1:
fa:0d:81:a7:31:41:ae:0c:05:50:e7:32:e2:65:2a:ee:92:68:
44:cb:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:23:44 2024 by rpki-client on console-ams.rpki-client.org