Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
File: L8plksD-NPq-_MQ3GSh7hE1HygM.cer (raw, json)
Hash identifier: SRdocOah3l4vpJFI7c/l2r51GcYvNCDhhY8ku47kN+0=
Subject key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC08406FE8FE0C0367CE08D02B1C82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60415
IP: 185.31.92.0/22
IP: 2a00:b9e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:08:40:6f:e8:fe:0c:03:67:ce:08:d0:2b:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:ce:64:17:fd:a6:07:16:6d:73:88:e4:a9:
3d:0c:25:1a:6a:1f:29:d0:a5:95:29:f0:13:53:90:
09:5a:57:21:df:4e:0b:d5:e2:df:8e:92:9c:31:4b:
65:f0:2a:14:e9:df:13:c3:54:71:8c:5d:18:b2:59:
8f:04:89:a4:6d:4a:e9:c0:6f:57:70:6d:62:b4:d9:
16:f6:75:01:1a:86:a2:1c:29:e6:25:29:0d:4f:92:
be:d7:4c:dd:ac:7b:26:8f:ed:32:2a:7d:40:26:a6:
d6:b8:11:ec:b8:15:38:73:4e:4f:48:fc:64:6e:81:
22:57:b5:c1:87:b8:3c:67:09:7e:50:24:c2:fa:69:
4d:0b:3e:39:68:a1:5f:96:32:4d:91:97:e3:09:1a:
15:b8:e5:65:89:ff:88:45:c7:11:36:08:1d:89:1a:
c3:d7:13:b1:a6:fa:7c:7e:ab:64:d1:be:8a:ac:b7:
c2:36:c6:2d:08:41:ca:21:0d:a2:33:e3:62:e7:a1:
da:0e:07:6b:1c:09:b0:bc:7f:76:ec:60:76:dd:d4:
73:25:98:71:f9:d4:40:b2:d2:f8:17:8a:8c:be:77:
89:d2:11:07:c4:04:1c:c1:d8:6d:f4:47:0b:da:e6:
00:6b:ff:97:18:ac:c6:6f:b9:ef:22:9a:7c:02:1c:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.92.0/22
IPv6:
2a00:b9e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60415
Signature Algorithm: sha256WithRSAEncryption
36:21:fb:61:13:d3:a1:9a:35:13:c8:40:bc:68:c4:f7:02:78:
25:87:f0:18:da:85:79:a4:ba:df:53:23:72:a5:8c:94:9f:08:
1b:69:0a:a4:04:9a:81:95:a2:6d:38:d5:c8:f9:cb:ec:e6:10:
38:25:3a:3c:7c:9e:6e:39:cb:76:da:e4:cf:78:8b:47:64:59:
c5:44:e2:be:c7:0c:b5:da:ca:9e:3b:98:82:1b:16:fb:8d:85:
26:fe:3e:d4:53:ab:1a:e7:03:9b:d3:e2:3e:91:9d:74:76:0a:
99:92:11:54:b5:5c:b1:7d:ae:a7:31:26:f4:49:37:26:03:11:
63:81:cb:63:b8:3c:d2:6b:b2:bb:24:7c:74:0e:5c:f4:62:b0:
28:cc:e6:22:b1:f5:ca:fc:5f:35:91:3b:03:22:4f:6b:b2:26:
42:ff:96:eb:8f:b3:6a:93:b5:80:57:07:0e:15:f3:ed:91:37:
be:aa:00:f1:c7:b5:5c:b1:ad:25:80:0b:b7:2e:16:92:2c:74:
69:69:09:24:70:34:0f:1c:32:a1:08:15:a7:b2:2b:41:50:6b:
b2:46:7c:b8:6a:e6:cc:fd:18:95:c0:6c:28:5a:1a:84:43:44:
ac:09:2b:50:f6:dd:a6:a2:05:cb:dd:c5:d9:1e:bc:fa:24:59:
ab:0a:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:22 2024 by rpki-client on console-fra.rpki-client.org