Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.cer (raw, json)
Hash identifier: R4slEF12HlHEG2U/apkVbwnkEZj5pZvDk/p+X1ItUWs=
Subject key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4251D96A3EB4242D2748DD099A93312
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.90.132.0/22
IP: 185.134.84.0/22
IP: 2a06:ec00::/29
IP: 2a0e:3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1d:96:a3:eb:42:42:d2:74:8d:d0:99:a9:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:5c:53:86:09:21:d0:67:87:f6:74:02:c0:
cf:e2:3a:79:9e:ab:4b:f8:bf:fa:34:27:4c:2c:bc:
4f:4c:ab:8d:ae:ac:73:88:25:37:ee:7b:e4:ad:fc:
fb:86:87:fe:22:60:16:1e:a1:1f:e1:17:4f:ad:aa:
03:cb:8c:5b:00:df:8a:87:87:91:3c:e1:8f:72:1e:
e5:8f:30:18:4b:c8:8f:16:73:97:63:99:7a:38:da:
36:ff:14:94:d4:01:15:06:ad:c5:e4:e7:67:a5:a5:
78:81:ff:66:13:a6:f6:5c:be:04:4d:61:d9:99:69:
f6:83:d0:e1:e9:e6:b9:b5:56:3d:cb:30:45:f3:6f:
28:e8:38:dd:ff:24:6a:37:a3:96:b9:66:8a:86:60:
9d:ec:e6:a2:0e:74:ae:6d:3d:55:db:02:f9:71:a8:
a0:0c:52:ac:f4:ef:36:aa:ea:5e:d0:76:74:d0:3a:
eb:a7:63:fe:2e:06:6f:bd:ff:90:ae:01:ed:16:1b:
a3:58:d2:39:68:7d:7c:2b:e9:ca:66:31:88:6d:64:
b3:ba:1e:87:c4:13:e3:7e:42:62:e1:2c:a9:60:94:
b5:b9:df:4a:5d:bc:7e:95:22:93:a9:7f:2f:b5:24:
95:4f:6e:94:41:26:29:dd:ab:4a:80:f8:24:ae:55:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.132.0/22
185.134.84.0/22
IPv6:
2a06:ec00::/29
2a0e:3c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:d1:a2:50:cd:ea:97:a9:87:3f:9b:ca:18:75:20:3d:68:aa:
0e:e7:cc:f9:99:ad:b1:09:34:d9:c5:30:9b:ab:02:d5:26:d7:
1a:15:8f:52:38:41:33:ca:f4:f0:d6:8b:18:8d:26:29:3b:3f:
d0:17:9e:a7:20:0f:ad:e8:cf:57:23:72:1d:2e:83:d4:ad:00:
bf:f6:6f:ae:53:b5:d7:29:17:34:f9:70:83:cd:ed:db:18:cc:
d1:8a:e9:ad:b0:ab:3d:b0:f0:97:2e:fc:1e:13:04:f3:ba:3e:
cf:04:03:ca:2a:97:d1:04:32:ce:b7:61:64:12:06:e8:7c:2f:
a0:6b:71:10:59:0d:76:0f:b6:cb:76:d1:66:e3:f2:b1:32:01:
24:a3:8b:f8:94:15:af:3f:6f:cd:b7:b2:37:6c:13:8a:31:55:
2c:a7:08:94:f8:a1:08:73:29:4f:fa:ef:e1:f0:e0:ce:e2:99:
6c:cf:5e:6e:42:f7:5c:c9:7a:d9:71:a2:8c:e7:14:36:b3:52:
eb:f3:c9:d3:5c:68:93:c8:4a:1d:1b:1e:71:80:9a:10:81:2c:
56:05:bd:4b:61:92:17:67:9e:d1:47:18:46:08:6b:1e:8f:07:
50:05:c5:f4:e9:71:e9:50:7f:df:14:94:18:2b:cd:c1:d4:b5:
ec:89:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:28:53 2024 by rpki-client on console-fra.rpki-client.org