Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
File: LDljuiquWr04pu7QnamFYR8bUCE.cer (raw, json)
Hash identifier: Sia1ajdp8BJOmtDbWFtNduKqMQ65zfU5nXg1dCkZ01o=
Subject key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50138577E7B38FF0EBDC4F7B8D1B785
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39499
AS: 42739
AS: 207217
IP: 37.139.144.0/21
IP: 77.242.224.0/20
IP: 78.159.64.0/19
IP: 92.55.192.0/18
IP: 185.46.92.0/22
IP: 188.112.0.0/18
IP: 195.210.34.0/23
IP: 2a02:7f0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:38:57:7e:7b:38:ff:0e:bd:c4:f7:b8:d1:b7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:92:14:4e:be:ca:7e:99:61:43:36:d5:75:
8a:26:8c:6a:16:49:79:e3:16:f4:d0:33:c4:82:ff:
cc:db:4e:e0:d3:12:50:27:b6:3c:4f:f8:ac:a1:c0:
ba:fb:8a:4e:58:14:af:16:00:b2:07:0b:2d:67:9c:
ee:3f:77:eb:36:83:5b:d5:99:80:e8:72:4a:cd:20:
9c:a4:5f:b1:17:93:97:d3:4b:b3:e2:1f:ef:8d:cc:
4d:8e:f0:b8:63:ec:2f:f3:e6:94:ac:38:98:78:a0:
4a:08:8f:d2:61:22:81:a4:12:0a:b7:8d:f8:da:0a:
b5:c7:57:6f:c3:31:cc:ef:cd:2e:0c:98:4e:52:90:
97:81:43:46:43:c8:f2:6e:08:12:e0:aa:a7:82:88:
ea:a5:f6:e8:22:81:17:be:b2:2f:88:2a:57:09:71:
d5:f1:97:fd:c6:eb:4c:e4:65:75:83:6a:62:94:6b:
a1:7e:e1:1b:fa:d3:6c:30:70:cd:e1:13:88:6e:8a:
bf:c4:82:84:d3:76:4d:4c:65:f5:52:22:86:70:63:
c9:87:b0:8f:37:76:47:ab:cf:47:09:39:c3:95:6c:
38:2b:e4:86:9c:fe:a5:30:52:17:5c:3c:23:10:34:
f6:32:96:17:cf:fe:bb:f0:ef:fe:57:bb:c8:47:f1:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.144.0/21
77.242.224.0/20
78.159.64.0/19
92.55.192.0/18
185.46.92.0/22
188.112.0.0/18
195.210.34.0/23
IPv6:
2a02:7f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39499
42739
207217
Signature Algorithm: sha256WithRSAEncryption
03:bf:78:15:66:42:ca:6c:01:a2:4b:f8:d5:5a:97:9e:d4:51:
b0:93:a3:95:ca:f8:f2:07:3b:ac:0c:11:fe:ca:80:5e:db:84:
18:30:eb:0e:62:58:25:67:55:cf:6a:67:c8:4c:63:b8:9f:05:
1f:b5:3c:3c:13:45:0c:83:aa:67:3e:b7:91:34:10:6e:72:65:
d1:4e:1e:e5:8e:90:91:29:95:fb:0b:a7:54:f9:6b:57:40:27:
8a:b7:42:77:94:03:92:a7:6b:a0:31:a5:53:49:8b:c1:2a:61:
0d:39:01:fc:20:64:18:3e:fc:83:95:59:c2:e5:9b:72:8f:88:
3b:9d:65:73:ce:f7:10:6f:13:e7:70:51:1e:75:27:8b:a2:3a:
34:ee:02:78:56:74:a7:7e:00:ca:3c:c6:cb:3d:6f:37:cf:64:
90:60:9e:94:93:9b:c6:eb:ad:bf:2d:6b:de:5e:a4:17:96:be:
78:3f:d4:b2:1d:b1:69:d7:a9:d5:86:4b:b0:61:bb:41:d4:ad:
f7:5c:89:75:91:5c:d7:30:76:d0:66:cc:ed:4a:e3:fa:65:cb:
17:88:0a:a8:0d:64:62:e6:6e:90:a2:2e:db:59:ec:0d:a5:36:
3f:21:3b:e6:1b:cf:5c:e6:bd:fe:a3:45:1b:e7:62:0f:d8:59:
19:8d:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:03:30 2024 by rpki-client on console-ams.rpki-client.org