Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.cer (raw, json)
Hash identifier: bIYmMfjkjM7E+jcuSFQC7phkh/pLRthnfxpn8auV3bA=
Subject key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB05FC8CF679F5DE7B28015DD2EAB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203290
IP: 185.15.84.0/22
IP: 2a03:b1c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:05:fc:8c:f6:79:f5:de:7b:28:01:5d:d2:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:df:9c:af:5c:64:eb:0b:e0:8a:6a:36:45:
6e:7d:b1:6a:49:ed:00:d4:ae:59:31:37:5d:1b:ea:
8b:bc:0c:3c:ab:c3:73:14:8b:ab:23:0d:fc:55:27:
5e:f7:2a:21:d9:c6:09:27:9e:9e:98:a9:f4:67:35:
ec:8c:01:34:fd:6e:bf:9f:5f:79:9b:06:3b:66:de:
93:60:bf:65:e9:70:0c:93:93:55:70:44:b2:60:cf:
aa:7a:ff:bb:d1:1a:6e:4f:c8:39:d3:18:f8:7f:3b:
1f:a9:5b:c4:22:a9:86:a6:fb:09:4f:9a:70:35:3a:
b7:4a:86:91:d2:3c:96:79:fc:51:52:d9:4c:68:01:
e1:cd:e6:19:b0:91:b6:10:b2:d2:c3:a5:be:cc:c5:
64:7a:7f:24:eb:2c:99:05:5d:04:87:0a:9b:c6:b6:
1b:38:db:a0:73:b7:80:01:25:90:47:ce:b9:d7:60:
36:54:6f:ef:96:fc:65:26:1b:a3:67:66:ad:2f:3e:
3c:ba:83:1e:57:e0:79:ae:6d:97:86:35:8a:5a:9c:
43:44:5e:be:5f:24:81:6a:ba:d8:37:45:38:26:23:
c7:be:62:6a:a3:75:46:f2:13:14:bc:d4:4b:35:83:
09:32:9f:16:6d:f4:51:88:0e:db:68:0a:fd:6f:e7:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.84.0/22
IPv6:
2a03:b1c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203290
Signature Algorithm: sha256WithRSAEncryption
44:5b:98:f6:f9:51:ec:0a:b1:65:70:95:60:a5:43:0f:4c:17:
f0:4f:25:fb:d6:98:8f:a4:cd:04:12:15:e1:ef:50:09:c8:3e:
07:47:9c:de:52:a4:c7:56:fc:0d:44:6b:be:48:82:5f:99:1d:
8d:27:9e:ba:14:6a:09:f3:50:cb:0d:fc:c5:25:42:70:fb:97:
94:f4:5d:d3:ba:8b:31:ec:80:a8:47:07:d7:bc:ce:8a:cb:66:
67:f5:09:4c:42:28:0e:4d:80:6a:96:04:06:05:f4:a3:16:fa:
80:95:d6:fe:fb:e5:e8:aa:1a:54:b7:1f:5e:b2:48:8d:67:db:
d7:69:f3:b5:00:48:30:5b:1b:d9:9c:48:5e:ff:92:41:f3:00:
2a:0b:b5:98:63:86:7c:5f:e2:9d:a0:48:ea:d8:fd:38:e3:44:
ef:88:30:2c:08:3b:2c:80:3e:1a:00:81:5c:e5:26:14:8a:bd:
ae:d7:b6:1c:b2:04:3a:72:ff:d7:c1:34:ef:2c:81:74:6d:10:
2f:17:39:1d:3c:96:33:e2:54:51:70:29:aa:0d:05:35:d4:f3:
48:e0:40:88:05:18:c8:9d:a5:52:6d:2e:4b:95:78:e3:23:63:
84:39:50:8c:fc:c8:b6:f5:50:2d:c7:ad:b4:09:34:01:19:0c:
83:bd:e3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:07:24 2024 by rpki-client on console-fra.rpki-client.org