Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
File: L7goDGy32z4HOVDVNdbYxwXZC4c.cer (raw, json)
Hash identifier: Z/8fVDKwCpl5rlvnP7m0pubhMEjd3AN5GmqWrFEj3GY=
Subject key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01909450F2510ADD7B594B33C8162DD16EBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Jul 2024 21:47:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.24.121.0/24
IP: 2a14:1b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:94:50:f2:51:0a:dd:7b:59:4b:33:c8:16:2d:d1:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 21:47:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:f2:0b:35:a6:e4:4c:86:b4:0e:08:19:c6:
6f:91:c8:57:33:70:9c:b2:4f:f8:37:99:44:2e:0c:
fe:cf:3c:d5:bb:f2:3b:aa:dd:7f:08:af:cf:e8:bd:
d0:f6:4a:9e:08:4e:5c:93:d6:ed:ad:9a:d7:95:69:
7c:d0:eb:20:b9:3b:3f:9f:34:fe:2a:75:30:70:d1:
f9:21:78:0b:3d:62:79:36:99:75:97:96:c3:43:0e:
34:97:45:bd:f8:8d:f8:0b:5a:7f:12:87:84:03:52:
35:8a:8e:5c:e7:f9:79:bc:79:df:51:be:3c:13:6a:
d4:c0:6e:d5:e8:c5:ca:ee:47:ab:fd:1e:75:1d:52:
e3:7b:02:40:be:86:83:67:3f:0f:47:cb:4d:47:5f:
6e:a1:4b:65:42:ea:ce:bb:e6:28:f9:eb:1a:22:ec:
b1:91:d5:0b:79:a7:1a:41:f4:ba:6a:e8:b4:25:47:
e1:91:a3:1c:f3:3c:25:67:43:88:f7:a3:b5:b2:eb:
53:32:d4:a2:d3:12:bd:c1:0e:6c:41:6e:cd:d0:86:
e6:8d:c9:84:28:c2:04:77:83:c6:a7:a9:0b:90:f9:
ff:f7:a8:fa:0d:bb:56:56:97:0f:4d:15:eb:90:e6:
d3:6c:63:ac:de:63:c0:d0:de:cd:75:90:5a:9d:38:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.121.0/24
IPv6:
2a14:1b40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:c6:a2:26:99:d3:ef:9b:e8:ab:1c:6c:b1:72:a6:d7:d8:a7:
79:ae:a5:63:50:91:8a:d9:73:51:a4:ca:b3:08:f5:b1:cb:01:
a8:2b:c3:50:ac:0b:85:19:72:a0:37:07:b4:4f:4c:9e:c0:08:
74:bd:79:77:05:69:f7:8d:ef:9d:77:d8:f1:61:ec:f5:8d:51:
e3:41:99:50:31:d2:e3:c5:00:eb:67:24:bc:e6:53:1a:29:27:
3e:96:a1:a7:13:32:d2:71:04:c4:12:59:60:0c:ca:8e:d0:02:
8c:db:3b:58:fb:16:59:d2:c9:86:84:ea:24:bd:9b:26:99:91:
a1:22:4f:58:14:70:00:0a:58:21:ee:f3:8c:2f:ac:84:3e:9d:
0e:9f:6c:31:cc:97:1b:a3:5e:b9:3a:c0:74:b1:6c:58:b3:1f:
17:12:8b:c7:80:b2:82:83:b9:82:20:4e:97:e3:d3:ec:f0:10:
ed:e7:a1:d7:cf:ce:61:77:ed:d2:0c:03:ec:86:15:88:58:21:
e8:ca:00:80:4e:09:04:db:98:8e:23:bd:10:29:af:92:6b:a4:
be:d3:6a:7a:43:e1:a6:2f:df:3a:93:71:ef:20:38:1e:c4:f5:
28:2f:04:47:b0:c7:3b:28:df:fe:80:35:04:2b:7d:fe:0d:28:
dd:c6:1e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:11:01 2024 by rpki-client on console-ams.rpki-client.org