Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer (raw, json)
Hash identifier: UdS0VA8qjZf/DflWR6WGl27nXeGOls8GNMFSiPpi6/A=
Subject key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABA8C732096997D0D750DB1812446
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.227.160.0/22
IP: 2a0c:ba00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ba:8c:73:20:96:99:7d:0d:75:0d:b1:81:24:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:0c:06:18:75:a4:f5:ff:68:2e:8f:20:ef:
14:a9:6a:4e:4b:fd:a1:ec:03:72:1c:e4:6c:6d:09:
d1:41:95:6b:52:99:01:a6:24:ff:88:81:4e:c5:79:
38:e3:0d:fc:29:7b:1b:c9:c9:a9:99:61:54:90:af:
47:c1:cb:bf:0b:3a:cf:1a:9b:86:25:b9:52:96:68:
e5:97:8b:1f:ed:e5:cf:78:3c:f5:91:9b:ea:75:85:
b8:76:a1:c6:ce:78:03:12:e3:11:13:48:ef:7f:07:
b3:1d:6f:6f:90:d7:14:89:fa:94:4a:6a:4f:0f:96:
3e:06:98:3a:3c:3a:e8:e4:9c:d1:6e:ee:65:5a:c0:
b4:e8:4c:5c:fc:13:ed:94:2f:2c:c2:51:38:d2:b0:
f9:e0:a5:97:f0:6e:57:21:37:5b:43:a7:cd:67:c9:
b4:bf:93:29:92:7a:1c:62:e1:ec:4c:54:6e:c0:de:
a9:8b:0f:2f:14:e5:ca:cc:9c:d9:57:ec:0b:a9:97:
48:49:d7:5e:42:92:cc:ad:52:42:17:1d:04:d0:a7:
64:09:61:cb:75:42:f3:94:f1:98:e1:6d:e7:bc:ab:
74:56:55:52:c1:3b:01:d7:0b:84:77:ba:21:48:e2:
5a:fe:1c:fa:6d:0a:95:60:4e:46:0e:44:0e:da:ce:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.160.0/22
IPv6:
2a0c:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:ed:46:e1:1b:48:0c:98:7f:46:86:1e:dc:cb:a4:70:a7:37:
30:cf:e7:3e:8a:70:5a:bd:1e:b7:e5:3b:d9:36:32:50:38:74:
bf:89:fe:c4:2d:82:8b:ff:8d:1c:c1:57:c8:d9:f5:0c:22:4b:
ca:32:c5:56:ff:8c:e8:93:50:1f:cd:21:c0:1c:6c:73:98:0a:
b9:fe:d7:4d:57:b7:00:c7:dd:a3:1f:42:e6:e0:fd:fb:bd:ff:
6d:c1:0b:de:81:23:f8:37:f9:65:f3:62:89:d7:d1:97:69:a7:
87:d6:11:d8:34:10:d3:42:0e:93:a1:51:49:f9:16:c5:4d:ec:
b7:0c:03:f9:f8:21:fb:aa:1b:52:fd:a4:f1:d5:e2:6d:b7:38:
22:e0:bf:3c:9d:53:61:14:c1:48:e2:fb:9f:5b:7a:d6:6b:90:
cd:d0:0b:a1:26:dd:0b:0f:1e:40:45:c7:bf:5a:49:4b:85:88:
1f:0e:cb:c9:ab:34:68:c8:94:a2:f5:bc:77:1f:fb:71:af:af:
ec:f1:1b:5f:fd:fd:ba:84:44:30:74:81:d1:65:1c:f3:b9:22:
d5:9e:2a:2f:12:d1:40:97:65:c8:ad:de:49:94:05:97:c1:e3:
d4:f0:f6:42:79:49:05:5b:24:f7:c0:d4:93:8b:02:22:a9:dd:
1d:3c:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:42:05 2024 by rpki-client on console-fra.rpki-client.org