Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
File: ADoNFLA-o0Lt47L0mtjKor904XA.cer (raw, json)
Hash identifier: yMe4DurhwIfW2dnD/Bq3FqyUh006K8BC+U6eZrzbefI=
Subject key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CB2D9FFDA1BC74484D16D809A9C0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.84.192.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b2:d9:ff:da:1b:c7:44:84:d1:6d:80:9a:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:b3:dd:f7:89:5c:e9:f6:79:82:c2:b3:52:
ae:d5:5d:63:d0:78:78:dc:b8:00:7e:e4:31:b6:ed:
a3:79:bc:22:be:56:ad:d0:79:a8:ae:c2:45:c0:05:
f9:ec:0b:b3:30:68:3c:5a:0d:e7:3a:04:12:14:8b:
27:6e:98:54:49:68:ac:d0:89:12:0d:dc:b2:6d:ac:
5b:1f:e8:54:e9:ec:35:00:20:b5:5e:d0:42:54:b0:
db:9d:b2:f3:47:36:6c:93:14:9b:f3:3c:54:3e:92:
7b:b1:99:07:c4:ed:0a:fa:a8:23:0e:7b:4a:d8:de:
7e:06:5d:15:dc:cd:72:48:29:74:05:70:79:37:1e:
e5:dd:fc:5d:ad:d0:b4:f1:df:ba:34:b1:d8:8d:1a:
50:38:19:f7:7b:41:1d:2d:2f:48:23:5f:af:64:38:
cc:aa:ef:bd:80:07:3d:8d:2a:27:76:94:3b:bc:62:
71:b1:da:3b:f7:ff:31:15:12:c3:49:aa:09:5a:ea:
86:06:a2:c7:5a:61:11:54:b5:40:b0:95:d0:4d:ed:
54:2f:94:de:b0:be:05:87:ba:a5:cb:46:08:87:69:
a9:de:b3:b9:b2:5f:3e:bd:76:86:0e:ca:f9:92:06:
3f:84:b2:aa:56:94:8a:ac:72:74:e0:26:96:03:5d:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.192.0/19
Signature Algorithm: sha256WithRSAEncryption
69:e2:8d:ae:52:39:09:d0:b8:0c:6a:09:6a:58:d8:7a:2e:06:
c4:ee:42:bf:49:e4:e5:70:31:64:4a:e4:df:be:c2:78:a0:83:
64:26:76:ab:c9:55:59:d6:55:f9:88:aa:24:7b:de:5e:55:0a:
2d:aa:85:85:34:b7:9b:bb:5f:d4:b3:8b:62:3f:e6:fd:be:d7:
6e:3a:4a:e3:5f:b6:42:37:d4:84:75:55:ad:41:5e:f9:be:23:
61:21:1a:92:ab:08:1e:ba:78:08:b7:eb:45:5e:b4:8b:ba:bd:
15:93:d3:c5:c4:6f:08:41:78:2e:7c:f0:84:48:bd:a3:88:8f:
e8:17:18:e4:24:52:35:a1:99:05:90:aa:55:39:32:5c:87:7d:
46:ae:64:2d:37:c1:d6:32:70:af:91:bb:ba:71:3a:15:91:64:
7b:e6:e2:51:cb:2f:46:cd:b7:48:57:e9:fd:8d:61:bc:25:0f:
d0:12:4e:88:91:45:cc:e9:23:7d:41:27:8a:6a:87:96:22:ab:
b9:ef:95:6a:25:26:7d:38:ba:48:1a:36:d2:56:c1:49:e2:f3:
76:73:04:d8:dc:89:4c:7b:7d:92:39:11:21:46:de:d5:6b:25:
7d:4b:df:9c:e6:e4:9e:8b:84:8c:79:d4:f1:17:11:33:c3:c2:
19:6c:75:c3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJTLLZ/9obx0SE0W2AmpwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDNhMGQxNGIwM2VhMzQyZWRlM2IyZjQ5YWQ4Y2FhMmJmNzRlMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsqz3feJXOn2eYLCs1Ku1V1j0Hh4
3LgAfuQxtu2jebwivlat0HmorsJFwAX57AuzMGg8Wg3nOgQSFIsnbphUSWis0IkS
DdyybaxbH+hU6ew1ACC1XtBCVLDbnbLzRzZskxSb8zxUPpJ7sZkHxO0K+qgjDntK
2N5+Bl0V3M1ySCl0BXB5Nx7l3fxdrdC08d+6NLHYjRpQOBn3e0EdLS9II1+vZDjM
qu+9gAc9jSondpQ7vGJxsdo79/8xFRLDSaoJWuqGBqLHWmERVLVAsJXQTe1UL5Te
sL4Fh7qly0YIh2mp3rO5sl8+vXaGDsr5kgY/hLKqVpSKrHJ04CaWA13JkQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAA6DRSwPqNC7eOy9JrYyqK/dOFwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzNhMjUy
YS1hZjRiLTRlZWEtYWNkYi0yZmRkMWZkOTk2NTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvM2EyNTJh
LWFmNGItNGVlYS1hY2RiLTJmZGQxZmQ5OTY1Ny8xL0FEb05GTEEtbzBMdDQ3TDBt
dGpLb3I5MDRYQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFwVTAMA0GCSqGSIb3DQEBCwUAA4IBAQBp4o2u
UjkJ0LgMaglqWNh6LgbE7kK/SeTlcDFkSuTfvsJ4oINkJnaryVVZ1lX5iKoke95e
VQotqoWFNLebu1/Us4tiP+b9vtduOkrjX7ZCN9SEdVWtQV75viNhIRqSqwgeungI
t+tFXrSLur0Vk9PFxG8IQXgufPCESL2jiI/oFxjkJFI1oZkFkKpVOTJch31GrmQt
N8HWMnCvkbu6cToVkWR75uJRyy9GzbdIV+n9jWG8JQ/QEk6IkUXM6SN9QSeKaoeW
Iqu575VqJSZ9OLpIGjbSVsFJ4vN2cwTY3IlMe32SOREhRt7VayV9S9+c5uSei4SM
edTxFxEzw8IZbHXD
-----END CERTIFICATE-----
Generated at Sat Apr 20 10:22:00 2024 by rpki-client on console-ams.rpki-client.org