Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
File: L8plksD-NPq-_MQ3GSh7hE1HygM.cer (raw, json)
Hash identifier: sSItA1v7inn+Vkoxgm2Zz0lqUsSnOP/bBE7fPrGCPGA=
Subject key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2A2506DDE1999E178CBFFADE03B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60415
IP: 185.31.92.0/22
IP: 2a00:b9e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2a:25:06:dd:e1:99:9e:17:8c:bf:fa:de:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:ce:64:17:fd:a6:07:16:6d:73:88:e4:a9:
3d:0c:25:1a:6a:1f:29:d0:a5:95:29:f0:13:53:90:
09:5a:57:21:df:4e:0b:d5:e2:df:8e:92:9c:31:4b:
65:f0:2a:14:e9:df:13:c3:54:71:8c:5d:18:b2:59:
8f:04:89:a4:6d:4a:e9:c0:6f:57:70:6d:62:b4:d9:
16:f6:75:01:1a:86:a2:1c:29:e6:25:29:0d:4f:92:
be:d7:4c:dd:ac:7b:26:8f:ed:32:2a:7d:40:26:a6:
d6:b8:11:ec:b8:15:38:73:4e:4f:48:fc:64:6e:81:
22:57:b5:c1:87:b8:3c:67:09:7e:50:24:c2:fa:69:
4d:0b:3e:39:68:a1:5f:96:32:4d:91:97:e3:09:1a:
15:b8:e5:65:89:ff:88:45:c7:11:36:08:1d:89:1a:
c3:d7:13:b1:a6:fa:7c:7e:ab:64:d1:be:8a:ac:b7:
c2:36:c6:2d:08:41:ca:21:0d:a2:33:e3:62:e7:a1:
da:0e:07:6b:1c:09:b0:bc:7f:76:ec:60:76:dd:d4:
73:25:98:71:f9:d4:40:b2:d2:f8:17:8a:8c:be:77:
89:d2:11:07:c4:04:1c:c1:d8:6d:f4:47:0b:da:e6:
00:6b:ff:97:18:ac:c6:6f:b9:ef:22:9a:7c:02:1c:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.92.0/22
IPv6:
2a00:b9e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60415
Signature Algorithm: sha256WithRSAEncryption
84:17:94:b1:a8:b4:53:ec:df:ad:44:d1:58:68:1f:9a:72:2e:
c6:78:e2:57:63:1e:01:68:e6:04:ac:12:26:c3:92:89:45:89:
10:89:10:78:9e:bd:0c:89:71:12:8e:47:a0:24:f9:c4:30:1e:
f7:91:4f:e5:60:e5:1b:81:da:90:b3:0c:24:a7:25:5d:c0:cb:
37:38:f6:e4:b3:0f:ff:ce:e6:28:6f:37:f0:18:a3:9a:e4:68:
f5:fb:75:28:65:36:f5:5a:0f:97:38:c6:88:98:77:69:32:ad:
90:ee:f4:fe:0a:65:0a:6c:16:a0:bf:2d:d5:b3:a0:c5:72:13:
53:e9:aa:ce:d1:a1:41:94:73:50:13:0b:fc:cc:31:aa:33:29:
7e:06:80:ed:89:9e:c2:14:06:67:be:e4:e0:52:6a:5d:96:8c:
c3:a1:09:76:63:19:87:02:98:59:43:52:27:d9:bd:09:9e:fa:
bf:dc:90:ec:90:22:51:13:b3:d5:6a:ac:b3:4f:b2:57:99:42:
53:41:b1:1b:ec:d4:1c:9c:be:df:62:b0:42:67:41:a5:ed:19:
ff:f3:18:ae:fb:1b:57:8b:27:31:2c:e3:37:75:f0:8a:74:f1:
06:5e:0c:98:e1:28:91:86:27:63:22:9a:18:25:61:60:d8:47:
da:66:7e:9a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjColBt3hmZ4XjL/63gO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmNhNjU5MmMwZmUzNGZhYmVmY2M0MzcxOTI4N2I4NDRkNDdjYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFLOZBf9pgcWbXOI5Kk9DCUaah8p
0KWVKfATU5AJWlch304L1eLfjpKcMUtl8CoU6d8Tw1RxjF0YslmPBImkbUrpwG9X
cG1itNkW9nUBGoaiHCnmJSkNT5K+10zdrHsmj+0yKn1AJqbWuBHsuBU4c05PSPxk
boEiV7XBh7g8Zwl+UCTC+mlNCz45aKFfljJNkZfjCRoVuOVlif+IRccRNggdiRrD
1xOxpvp8fqtk0b6KrLfCNsYtCEHKIQ2iM+Ni56HaDgdrHAmwvH927GB23dRzJZhx
+dRAstL4F4qMvneJ0hEHxAQcwdht9EcL2uYAa/+XGKzGb7nvIpp8AhzqQQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFC/KZZLA/jT6vvzENxkoe4RNR8oDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzdiZjY4
OS04MmZjLTQ4MTYtOGVjZS0xZWNkOTkxOGIzYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvN2JmNjg5
LTgyZmMtNDgxNi04ZWNlLTFlY2Q5OTE4YjNhNi8xL0w4cGxrc0QtTlBxLV9NUTNH
U2g3aEUxSHlnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuR9cMA0EAgACMAcDBQAqALngMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDr/zANBgkqhkiG9w0BAQsFAAOCAQEAhBeUsai0U+zf
rUTRWGgfmnIuxnjiV2MeAWjmBKwSJsOSiUWJEIkQeJ69DIlxEo5HoCT5xDAe95FP
5WDlG4HakLMMJKclXcDLNzj25LMP/87mKG838BijmuRo9ft1KGU29VoPlzjGiJh3
aTKtkO70/gplCmwWoL8t1bOgxXITU+mqztGhQZRzUBML/MwxqjMpfgaA7YmewhQG
Z77k4FJqXZaMw6EJdmMZhwKYWUNSJ9m9CZ76v9yQ7JAiUROz1Wqss0+yV5lCU0Gx
G+zUHJy+32KwQmdBpe0Z//MYrvsbV4snMSzjN3XwinTxBl4MmOEokYYnYyKaGCVh
YNhH2mZ+mg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:08 2025 by rpki-client