Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
File: L4g71OpOPesouJSxkPjgi68G8cw.cer (raw, json)
Hash identifier: qM6zNY17Q2yGN6FbTdGxDN86k80WcL9x8/ugepxfA2g=
Subject key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D59AECEC5CAF25DD88B0224111C2910C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 09:24:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212101
IP: 185.230.105.0/24
IP: 2a10:b380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:ae:ce:c5:ca:f2:5d:d8:8b:02:24:11:1c:29:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 09:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:08:3c:5a:8e:03:04:99:7f:99:98:39:4f:
24:94:61:0a:17:27:00:05:78:3d:3c:38:8a:8a:6a:
2b:10:da:32:4b:1d:96:62:a7:2f:4e:73:1b:c6:b3:
25:c9:e6:46:60:6b:73:2d:eb:f8:28:27:85:13:28:
5b:86:3f:dc:c8:53:ed:d9:57:e7:6d:74:b1:5f:a1:
bd:81:a3:bf:a0:ae:4f:c6:c9:e8:c1:38:67:84:68:
20:2c:56:00:31:4e:ce:b4:c5:ee:10:ab:37:29:80:
cc:f1:34:34:a2:42:3a:4b:eb:12:13:b1:1a:25:de:
b6:f6:3d:b4:00:4f:62:8f:da:8c:25:c9:c1:3e:2d:
37:c2:3d:9b:1b:02:00:97:c3:d4:0e:a9:00:cf:95:
24:84:8a:ff:c5:32:20:b9:0d:26:32:ac:55:a7:85:
d7:7c:7a:3a:04:bd:92:b9:f3:e3:90:ec:f8:c8:e0:
c3:38:e9:97:62:13:de:e1:60:c7:64:d8:71:57:ba:
5b:a1:f2:b8:f9:f3:b8:62:41:21:32:4e:9f:c4:ea:
c5:fa:41:49:55:b1:e4:2c:bd:33:83:16:d9:a4:b1:
d8:89:53:5c:68:1b:6c:9c:4a:06:4f:08:2b:5e:41:
6b:b4:3b:d8:dc:51:47:30:bb:aa:ac:2f:02:5e:76:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.105.0/24
IPv6:
2a10:b380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212101
Signature Algorithm: sha256WithRSAEncryption
92:b0:eb:06:4f:05:55:bd:66:c0:a6:f1:89:32:34:30:85:67:
40:e2:32:2b:22:f4:e8:34:07:98:d8:21:e8:f8:5d:b8:4a:a0:
f0:48:ae:9b:41:51:e3:17:da:e1:84:f9:ca:47:59:09:3a:45:
f1:84:14:74:6d:55:d4:24:2f:df:e8:59:12:78:d8:f9:ff:cf:
6f:54:bf:e6:b4:6b:c8:2c:ff:44:51:8c:c2:18:a0:66:ff:9a:
29:58:5d:19:db:0e:70:30:6e:27:d2:dc:34:33:f9:ac:fa:b0:
1d:9a:29:ca:0b:4b:44:99:4d:11:b2:fc:ae:6c:52:81:34:7c:
24:f9:dc:5f:7b:76:52:f6:d8:81:38:98:fe:a1:4b:d2:ed:8d:
a6:6d:9a:c0:3b:65:cf:d1:78:df:b9:51:39:ad:55:04:8c:ae:
98:5c:b8:34:db:2b:fc:55:51:21:7c:9b:82:30:6a:33:b9:f2:
a1:fd:ac:dd:4a:a9:0b:0b:24:c9:01:40:67:63:6e:de:a9:30:
a8:fe:ae:1b:53:06:c7:04:6a:91:81:2c:6c:be:7f:dc:59:31:
50:e7:31:dc:04:cc:52:ff:09:a2:1e:65:83:e6:21:79:b8:ae:
19:69:d8:1b:c5:3c:9d:cc:89:f1:05:64:f9:d0:24:1e:2a:db:
28:ec:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:09:18 2024 by rpki-client on console-fra.rpki-client.org