Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
File: LED81TmHsgn4rznKEhHycGCokC4.cer (raw, json)
Hash identifier: bBgYqI7Bqw/R6OUDPT6YxDIPu867vC5YHBd0jMFDmvk=
Subject key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7268A553ABD84AEE63406B4FF754D92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208800
IP: 77.242.240.0/20
IP: 91.201.4.0/22
IP: 188.116.28.0/22
IP: 2a0e:6e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:8a:55:3a:bd:84:ae:e6:34:06:b4:ff:75:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:79:d8:19:80:92:b9:dc:e0:d0:b2:ec:a6:
9c:1e:04:4b:48:ac:1a:8b:cb:60:43:61:dd:6c:e2:
7c:e7:3e:4b:9b:68:1d:cb:4d:7e:3c:04:e8:35:14:
1e:6f:f7:12:39:7f:25:09:98:6e:b5:e6:e5:16:bd:
e5:95:14:00:9e:d7:b7:39:43:c7:a5:69:7e:db:36:
1c:71:51:00:df:e0:e9:34:14:b4:08:f9:fe:16:f4:
b5:db:5c:69:37:6b:46:f9:b7:30:15:1a:ef:d5:0b:
3b:59:98:fb:62:8c:87:3b:00:e4:e3:13:25:6d:72:
3c:26:a2:90:3e:c6:18:24:cb:e5:60:be:35:4e:5a:
50:c8:dc:10:61:78:10:48:12:93:84:60:a4:92:c6:
d3:32:3a:e9:51:b6:96:3c:94:5c:9b:d5:89:5a:13:
4f:ea:ae:52:2b:a1:b2:b0:14:25:32:00:2c:b2:32:
e3:86:c1:32:d3:1b:a7:44:59:9c:42:64:cc:6e:1d:
86:fc:a8:e3:00:3d:1c:5a:36:19:1b:b2:01:46:c1:
a5:21:68:58:f1:00:84:85:19:7f:6c:06:06:2f:01:
7b:7b:ed:d8:55:2b:aa:c5:1f:18:34:e5:5b:0c:81:
06:75:a5:b4:bc:07:38:18:99:1b:4b:e6:c7:77:44:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.240.0/20
91.201.4.0/22
188.116.28.0/22
IPv6:
2a0e:6e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208800
Signature Algorithm: sha256WithRSAEncryption
b0:0f:a7:8c:93:d2:6d:0c:89:82:a1:39:20:0d:d2:62:69:e7:
65:9d:15:1c:75:59:37:d2:02:95:a0:46:54:e8:a8:c0:08:e4:
24:fc:0b:be:b8:a8:e0:18:ae:15:14:b5:a0:f1:92:7a:63:00:
e1:af:2c:17:eb:9c:82:65:a6:e5:bc:37:be:70:c1:ca:74:11:
cb:e4:f9:db:b9:10:af:44:10:0a:85:35:e5:50:85:a8:ee:13:
a6:9d:4f:08:01:11:b5:d1:80:f3:4e:17:b3:6c:e4:e2:c1:aa:
0e:74:5d:5b:c5:dd:23:2d:82:40:32:d9:ca:0b:c2:6d:cf:ad:
dd:11:13:91:37:0a:09:ff:d5:fd:4a:de:99:41:a6:ae:73:22:
84:06:a5:31:de:d3:f2:1d:41:73:15:ba:9d:2b:8a:88:7c:7e:
53:9e:5a:4e:26:c5:86:1d:07:8b:47:8e:30:ce:b0:5f:36:4a:
7b:ab:39:9c:98:64:6c:3e:bd:d4:61:ee:49:70:8a:be:c6:57:
9e:bf:b9:6e:3a:60:7c:f4:4c:19:4a:46:b8:73:0f:07:0c:37:
ef:a0:56:a7:1c:c4:71:9a:9e:82:a6:1b:81:3f:c5:61:76:5a:
3d:4c:4b:dc:70:f3:c3:e9:4d:30:f1:34:99:cb:91:88:65:d4:
84:ce:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:03 2024 by rpki-client on console-fra.rpki-client.org