Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer (raw, json)
Hash identifier: GZu0WvmQsvMxSUbAUQXdp1Bu1YtCyCLm5ZtDb+b7+lU=
Subject key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6FFCB7C798D97AC789B222676CC17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.253.80.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ff:cb:7c:79:8d:97:ac:78:9b:22:26:76:cc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:77:e3:91:7e:69:b6:4d:ca:9f:f4:df:22:
c1:27:fe:45:e8:1e:47:cf:27:e3:eb:2a:17:20:8e:
d2:ad:bc:fd:b3:0e:33:65:d6:c6:7c:bb:6e:e4:b1:
f6:b4:68:8e:50:02:5b:46:fe:12:5c:ac:6f:e7:e8:
80:67:6c:e8:7e:93:63:0a:61:50:29:a2:2f:3a:bd:
a2:af:73:8c:ea:18:02:f7:ce:89:0a:0f:94:b1:0e:
2b:e2:11:69:e0:fd:c7:44:a0:f8:3b:b9:3f:cb:3b:
5a:93:6a:a7:4a:a0:62:21:24:87:8f:29:44:09:93:
14:81:a3:51:61:5b:60:38:ff:f1:b0:f3:e4:d1:b6:
8c:35:74:6a:5e:d5:4f:c2:da:4f:fa:f8:37:dc:4e:
a2:14:a0:b5:1c:73:08:8b:65:3a:80:c2:86:94:24:
6f:bb:7a:ce:0f:87:db:76:b7:db:45:c1:c9:47:48:
e9:a5:81:5e:c5:7a:c1:07:a4:09:6d:23:c0:fb:96:
da:a7:13:79:85:c9:16:0d:b0:62:aa:e9:5b:65:4a:
74:74:b8:d5:5c:bd:4d:ea:4c:28:b2:08:fe:da:98:
1a:7f:d2:ad:92:a3:41:17:56:94:a7:63:4e:3c:14:
6d:79:62:68:ae:13:e9:58:26:22:4b:5e:89:92:72:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.80.0/21
Signature Algorithm: sha256WithRSAEncryption
92:c9:6a:72:8b:a5:50:88:d0:c5:01:e5:8d:13:20:54:e0:81:
82:5b:68:ba:7d:14:3b:cb:b3:b3:7d:af:cb:05:34:6d:9d:40:
9a:60:ea:05:0e:c3:53:48:5d:49:f4:51:41:1d:93:12:93:1c:
fa:47:0b:e2:73:81:54:ce:99:0c:11:8e:ca:10:68:64:16:4a:
90:49:2a:cd:d9:8d:1d:c0:35:f5:85:16:08:b3:c1:5a:1f:5b:
9f:67:f3:1d:19:e6:a5:56:0a:8f:23:5a:fa:62:ee:9c:e3:43:
5b:4b:57:f6:75:9f:b5:11:0a:33:24:74:5d:80:02:66:81:5f:
da:23:25:b7:6e:7d:3c:f8:83:0e:8b:ae:7b:46:c0:81:ea:7e:
73:a9:3b:37:15:92:3f:f7:15:93:5a:5d:74:dc:92:98:89:a1:
02:0c:d9:2a:87:44:19:31:bf:99:1f:3a:aa:82:d3:02:64:1f:
38:5b:d0:bc:ab:2b:2e:03:6a:da:b4:19:5c:04:d6:73:37:52:
54:f4:9e:f1:1b:3a:b1:ac:2e:11:ca:2a:6c:79:ea:08:38:80:
9b:32:0d:de:c7:15:2e:67:82:8a:a1:8c:80:90:20:e1:ca:88:
aa:48:c0:32:5c:66:80:d2:90:26:83:95:e2:20:45:42:c8:86:
53:ff:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:10 2024 by rpki-client on console-ams.rpki-client.org