Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
File: L9lxonxvwsZi8GXdi_qLihMsHq4.cer (raw, json)
Hash identifier: +UV83Mk9kiTodLw/8GFcq9VXQUg8Rps/Qo+u7zQUNd4=
Subject key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEE37A3663E8C7FA42B6BB5F5A8609
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.91.223.0/24
IP: 2a12:b180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e3:7a:36:63:e8:c7:fa:42:b6:bb:5f:5a:86:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:90:86:76:20:1b:ce:9e:d6:2a:35:11:df:
38:d2:59:45:42:09:a1:4c:ff:6e:bf:25:7c:71:40:
d8:90:11:c1:61:e8:b7:89:2c:d2:d0:1c:77:83:89:
5b:b7:b5:6d:49:18:7b:3f:91:bb:a5:dc:d9:9d:23:
3d:fb:85:a1:69:1a:c5:62:eb:60:7b:cd:73:e4:90:
6c:0b:40:1e:28:03:7d:b7:b2:5b:cb:c0:80:45:c5:
93:fb:bc:15:76:09:dd:18:24:d6:9f:fe:f4:47:cf:
96:e7:5b:50:bc:d5:87:a0:56:3f:cc:f2:d4:3a:2b:
8f:b7:b0:25:39:d9:6f:d8:ce:ca:06:6d:7b:cb:28:
87:f2:d7:4b:fd:8b:1b:bf:ef:d4:8a:a5:09:b6:60:
43:e1:36:9a:64:fe:0a:5a:2f:e8:a1:98:cc:f3:06:
dd:01:5e:8a:e8:4a:20:37:fa:c7:19:ad:0f:3a:e0:
65:01:6c:ed:25:de:ee:73:51:7e:7c:b8:18:3e:9a:
e0:9d:bc:d3:56:94:34:87:5f:24:bf:ae:43:90:dc:
b4:49:76:b0:0e:cd:1a:80:7d:20:5d:50:35:82:bd:
97:cf:7b:76:1a:2d:5e:ef:35:6e:5a:89:f5:1b:ae:
5b:e2:6b:d3:2a:fc:17:02:ec:c2:2d:48:c2:71:60:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.223.0/24
IPv6:
2a12:b180::/29
Signature Algorithm: sha256WithRSAEncryption
3a:3e:4e:1f:8e:84:33:fd:5f:fd:ca:f5:c0:e7:7a:b9:34:1d:
da:81:8c:91:9d:d5:31:6c:db:9d:13:0b:cd:64:b7:b3:f6:61:
92:31:27:c0:22:d1:8c:0e:1c:9a:31:8f:b6:b4:9b:d3:0b:7a:
c7:c4:a0:48:2d:f0:4f:8c:5e:44:13:75:7f:32:02:07:59:d1:
68:b9:05:ca:05:8c:2d:d8:71:33:ee:22:39:77:6d:78:75:e8:
41:aa:cf:c7:cc:a1:ff:8c:1c:10:db:11:db:d0:4d:2d:48:b7:
c1:a9:6e:17:c6:3d:02:16:fb:58:85:61:a5:ad:98:6b:51:10:
00:48:8d:f0:4a:0c:fe:be:29:27:37:cc:96:ee:80:a7:c8:83:
d3:cf:81:28:da:70:fa:fc:51:ca:32:f1:de:bb:ec:d5:f6:55:
58:1d:9c:a2:56:18:e4:5b:a1:b0:a5:79:64:0b:06:71:62:9c:
01:01:ae:79:af:fd:3e:5c:24:a6:43:d0:14:75:54:c6:2f:bf:
cc:2d:5c:b6:fa:49:56:ac:b3:53:a4:46:54:9a:e7:e6:b6:db:
c8:ad:65:25:77:21:15:56:4e:98:f5:d2:2e:2c:8f:34:26:7b:
e4:76:7f:6f:81:c8:01:92:1a:4b:18:78:35:53:8a:5e:3c:f6:
2e:f5:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:55 2024 by rpki-client on console-ams.rpki-client.org