Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.cer (raw, json)
Hash identifier: m9wzQwtdkoOhlZ+aWTzcZ6/XRbyuyNcZ8ELwZ6uzGcs=
Subject key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500FAFBDF9DCDEB60C9273766C190A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41000
IP: 176.74.16.0/21
IP: 185.86.108.0/22
IP: 185.176.248.0/22
IP: 193.23.224.0/24
IP: 193.33.178.0/23
IP: 194.110.243.0/24
IP: 195.170.173.0/24
IP: 2a00:b980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fa:fb:df:9d:cd:eb:60:c9:27:37:66:c1:90:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:4d:26:f4:ec:da:53:16:19:32:d3:d0:d6:
2f:10:c0:e0:0c:0c:13:49:7d:04:34:b9:df:c1:bc:
56:ff:3c:5f:22:cd:9b:de:1d:09:a1:5c:59:4c:ca:
04:d2:df:92:c7:47:7a:58:95:aa:5a:bf:03:5c:8c:
4e:45:9e:bd:57:95:f3:c0:1d:1f:75:70:f9:c1:ec:
24:cd:03:9f:14:10:7d:52:77:dc:ec:14:4b:0e:1d:
10:4a:93:c3:46:bf:44:a1:60:f6:91:bc:50:e2:27:
05:c4:5d:d2:39:ba:f0:3b:b1:00:3a:c1:5c:d6:25:
b6:ac:e3:18:62:57:ea:98:0e:e3:80:51:6c:3f:00:
92:5d:25:c2:53:da:1f:cb:c8:64:02:99:b1:8c:9e:
d1:97:c7:27:7e:7d:68:fb:dc:34:61:f3:af:ff:1f:
7d:5c:b1:ad:25:d3:7a:5c:0d:cc:0f:4c:66:e0:77:
e2:02:a3:ca:60:45:ef:05:5a:db:a2:33:85:03:0c:
ee:78:fa:af:85:d5:a3:7d:e3:3d:b0:90:40:40:9e:
24:95:e4:2f:a3:36:94:ab:13:9e:d1:74:5e:4a:ff:
5b:0f:1f:45:d2:fc:1b:36:f5:95:91:0e:09:00:6f:
5f:90:1d:ac:c6:e4:d2:e2:82:59:1f:65:e4:6d:7e:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.16.0/21
185.86.108.0/22
185.176.248.0/22
193.23.224.0/24
193.33.178.0/23
194.110.243.0/24
195.170.173.0/24
IPv6:
2a00:b980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41000
Signature Algorithm: sha256WithRSAEncryption
0a:98:54:3d:97:ec:02:69:3d:2c:0b:e5:13:8e:07:0d:57:11:
0d:e1:71:28:6b:f0:ac:9c:6b:0a:e8:21:a9:58:ca:54:c2:11:
4f:98:80:df:15:2d:c3:af:c3:ec:91:92:4d:e3:f3:35:e8:d3:
77:bc:0e:c7:82:6a:b7:06:f5:df:db:d6:86:b2:60:45:8e:64:
42:71:94:e0:fb:97:0c:76:4f:cd:4e:96:d3:d4:f7:36:72:b2:
61:9c:86:84:f4:ff:8d:0c:32:d8:33:fc:9a:6c:17:61:e2:f5:
d9:ab:c1:cf:1e:51:86:7f:d1:eb:dd:42:3c:25:12:2e:d0:2f:
12:45:aa:c6:3d:96:ad:2d:d6:d7:53:b7:93:01:c8:1e:12:0b:
ea:fb:58:1b:be:93:ee:bd:cc:04:b1:98:a4:55:55:41:77:6f:
96:3f:4d:dc:ee:c6:9a:f5:86:23:b4:b8:9e:7a:9f:80:1a:d2:
16:dc:a2:a5:28:da:aa:88:90:d2:fb:22:d7:94:f1:e9:89:d5:
0e:5a:d3:9f:20:43:0f:2c:eb:a9:4d:8d:01:70:df:71:87:6f:
46:29:b1:14:ac:fd:30:d0:97:3f:73:be:d3:66:7d:c4:0e:27:
cb:09:d8:40:f4:4b:95:54:16:80:af:5f:60:c9:d3:26:54:e3:
ee:d9:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:51:17 2024 by rpki-client on console-ams.rpki-client.org