Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
File: L6aSUEx3C6T4QLir7sSFttEPpOo.cer (raw, json)
Hash identifier: 3l8znHfsUNm4TE2kHxT3w2ewmGBnmW9Lr1avZz/wDrg=
Subject key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DEFD78771B698588571CFCED58527
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62022
IP: 185.50.244.0/22
IP: 193.143.228.0/24
IP: 2a04:c0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ef:d7:87:71:b6:98:58:85:71:cf:ce:d5:85:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:32:05:df:3b:a0:4f:20:96:23:f8:4f:7c:
e1:94:00:36:12:0e:65:f7:30:4c:8f:b8:a2:9a:96:
d5:44:cf:e5:ff:5a:bb:f9:c1:af:bb:31:ca:78:c7:
5e:48:7d:10:b2:2f:8c:50:0c:64:60:28:b3:bd:d6:
f4:62:15:a6:80:f5:fd:4a:99:e2:de:8c:90:b4:71:
e7:03:d9:d7:9a:a3:8e:b7:84:c3:46:14:0b:35:b4:
c9:38:54:c0:60:21:7e:c8:45:ed:b5:6a:5f:7b:d8:
3a:f6:76:e7:04:94:1d:ee:69:86:fb:f7:9c:61:b9:
a5:23:46:78:5d:af:fc:c4:3b:2a:d8:bf:b6:43:cc:
b5:78:5d:5b:a0:f5:ce:0d:46:97:7d:d3:fc:2b:a1:
71:9c:22:1b:0b:ae:1c:31:99:2a:41:29:66:1a:d2:
b5:73:72:79:b5:a4:c7:bd:85:1b:d4:03:7f:53:47:
0b:57:ed:52:d6:60:dc:91:0d:d9:7f:e4:c8:77:0d:
27:27:7f:ce:99:fd:22:8a:12:d4:19:d8:64:34:79:
99:4d:53:b5:e1:7b:ba:82:a8:dc:e9:9f:8b:af:26:
3c:7c:da:4c:36:f4:a1:3e:9e:56:64:18:47:95:e3:
e9:12:28:d6:14:60:5f:8f:32:dc:1d:15:48:2d:5b:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.244.0/22
193.143.228.0/24
IPv6:
2a04:c0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62022
Signature Algorithm: sha256WithRSAEncryption
a2:64:30:d6:a2:95:18:2f:b2:31:a7:11:2a:be:8c:a7:a8:b4:
16:88:1b:10:d8:8f:83:8e:e7:85:72:00:b1:49:c1:70:2a:b7:
9f:8c:a6:61:9a:d3:f8:a6:96:95:41:b6:46:d0:cb:06:a6:f9:
3a:03:a3:35:ef:d9:30:67:4f:96:66:98:01:57:40:77:44:26:
9c:25:5d:db:00:85:0a:41:d6:dd:cd:6b:4c:6a:8c:da:a4:6a:
4d:de:0b:31:5f:51:c6:c1:13:27:f8:2b:53:e9:01:49:7f:f1:
e5:49:87:b5:cc:ae:f9:1a:df:ac:46:ba:bc:72:63:e6:08:b2:
51:72:dd:bc:20:69:2b:93:a5:7a:22:a5:7d:cd:9d:c6:01:e5:
82:9c:03:ac:0f:0a:91:7d:2b:90:42:0a:ec:90:25:02:ce:84:
ba:5c:e1:63:79:3c:20:89:c0:40:73:29:66:65:c1:24:57:d4:
59:4c:49:3b:44:dc:e1:ea:d7:88:fe:8f:ce:81:b5:59:bf:78:
37:df:60:f6:93:6e:5c:d6:ef:79:0f:14:c5:ce:c9:b7:23:6c:
8c:0a:c2:d2:e5:91:ad:04:32:79:f1:cb:9b:da:64:24:59:31:
85:a8:e5:ff:68:8d:5c:3c:7d:42:14:35:12:18:4b:8b:92:90:
c2:7f:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:15 2024 by rpki-client on console-ams.rpki-client.org