Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
File: L6CLlwvIy9DkRTyJa9uCKqccom8.cer (raw, json)
Hash identifier: bO0bZI2Hj0SpjqM3kkp5k9817yhVBaiEDUgQVzKdQPs=
Subject key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F417B3C6E8D9AE69DA01001A7DD62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57760
IP: 176.107.16.0/20
IP: 2001:678:448::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:41:7b:3c:6e:8d:9a:e6:9d:a0:10:01:a7:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:bc:68:b2:8a:4f:a8:e3:b8:ea:60:ca:66:
eb:c5:66:53:f2:04:de:14:6e:de:06:28:46:c7:1a:
75:99:ea:55:c6:cf:8f:2a:48:95:1c:53:50:20:03:
99:5e:b3:f5:0e:19:0b:c9:d9:8a:04:9c:7a:41:6b:
b6:5c:75:ef:69:3a:10:44:5d:52:a8:92:2e:3a:b6:
70:06:61:d1:0a:a2:96:6e:6c:2a:08:c4:98:72:ed:
15:80:49:52:b5:f3:0e:af:01:3f:b5:81:ed:40:27:
59:45:6f:8e:77:3e:22:dc:15:f8:44:8a:0d:e3:98:
14:a4:43:7f:92:33:7a:54:fe:25:8e:14:38:21:2b:
c8:9d:eb:68:d7:ee:f3:d5:65:3e:d6:8a:2d:b9:d8:
05:2e:06:4e:05:6c:a1:0d:cc:f5:8d:d8:ff:d7:52:
9f:71:42:f5:da:00:fe:b6:30:3a:1b:79:1f:c0:9c:
de:9c:d7:ae:9c:42:41:96:d4:7d:bc:e3:3e:7a:27:
2b:41:c4:20:c5:98:0c:04:aa:0b:98:49:f9:49:d5:
cf:19:db:fb:5a:8e:68:37:f0:91:fe:a3:e7:7b:2c:
81:36:7e:06:fd:ad:00:38:53:77:fc:f7:f9:71:c1:
b9:20:99:b0:d1:4f:e6:35:24:39:71:e3:82:93:04:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.107.16.0/20
IPv6:
2001:678:448::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57760
Signature Algorithm: sha256WithRSAEncryption
03:9f:e9:e5:05:66:4f:84:98:f0:d1:de:95:50:bb:98:6c:92:
fe:c3:06:16:a8:d9:65:42:3a:ae:91:1f:cf:85:ff:7d:04:ee:
c7:fc:55:39:d9:f2:ed:03:fa:60:aa:45:0a:9e:95:6b:7e:7e:
af:aa:6e:ea:ca:5d:94:a6:9f:53:d2:c8:21:61:3e:a0:9f:14:
65:e6:bf:e8:fe:16:f4:ad:cc:db:a2:11:7b:0a:fa:5f:f1:56:
42:fc:65:10:a4:94:39:2c:27:4f:3a:0c:f8:45:61:da:dd:40:
d6:91:71:82:06:f5:25:19:af:cc:66:6b:f2:8e:86:34:b1:6f:
5e:20:91:75:4d:e3:46:75:0f:e5:53:c7:ee:36:1e:71:dc:69:
83:a1:a2:84:b3:85:22:c9:f3:85:eb:d0:bd:ca:24:2e:1c:f2:
e9:b2:cc:cb:e6:69:1e:7f:1f:9a:f5:3c:22:3f:33:b1:98:29:
e5:83:a6:d8:f2:f4:31:c1:86:26:09:24:77:f8:08:41:3d:75:
62:bf:8a:98:06:83:36:36:e4:6a:cb:8e:6b:b6:e6:69:c2:ac:
80:97:df:21:c0:4d:48:55:07:1b:3c:b3:49:78:21:d8:46:27:
e6:2e:fa:df:97:f3:77:64:53:d4:98:7f:28:e2:cd:d0:c6:3a:
b7:74:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:23 2025 by rpki-client