Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
File: LRGXVPwU_-eWimUWvUm9slYzuIc.cer (raw, json)
Hash identifier: zm3M/Bh4uFZ/hNWUmDL1JLd+L5mLhRlIBlJTCbRWgz4=
Subject key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29911746307335A0D0B73CCB429DC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50056
IP: 31.28.65.0/24
IP: 31.28.67.0 -- 31.28.68.255
IP: 31.28.70.0/24
IP: 31.28.72.0/24
IP: 31.28.75.0/24
IP: 31.28.80.0 -- 31.28.86.255
IP: 94.126.43.0/24
IP: 94.126.47.0/24
IP: 178.18.116.0/23
IP: 178.18.119.0/24
IP: 185.121.76.0/22
IP: 185.135.164.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:91:17:46:30:73:35:a0:d0:b7:3c:cb:42:9d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:90:a0:06:db:6b:44:28:6d:8d:9d:cf:48:
02:6b:d3:54:17:e4:09:37:4d:53:6c:b8:17:60:57:
0e:9e:ef:91:6d:65:7a:0c:09:9d:07:f7:ec:a5:74:
9d:11:83:a1:9a:75:0c:ec:29:37:c6:15:7d:38:9b:
d6:03:c6:41:f5:84:f6:74:3d:37:2a:44:cf:ca:af:
24:0e:2f:57:2a:0c:5c:da:f1:82:86:73:a9:a7:f1:
37:49:bd:8b:07:87:f7:ff:68:de:a8:45:d5:77:45:
13:77:83:b4:2f:69:f7:44:e0:59:99:df:5a:31:aa:
3d:4a:ff:fc:b8:45:7c:d0:8d:41:4d:cc:0e:d8:f4:
52:0c:ab:1b:b1:fd:f4:c5:a0:d4:24:84:7f:a8:cc:
92:00:f9:4e:84:11:e2:a8:8b:6d:56:a1:f6:85:79:
8f:b3:67:9b:c6:eb:a3:bb:f2:ab:4e:c3:b1:3c:4e:
9b:78:4c:9f:1d:43:9d:fe:9f:a9:2c:ed:a3:f8:36:
14:92:f4:07:f3:b4:9d:71:be:a0:a9:66:42:33:8f:
26:0b:bf:33:e2:c4:0c:f0:68:b3:be:59:a1:a7:8b:
2c:82:1d:e4:00:97:2a:fd:b2:1b:50:f6:40:65:a7:
a6:fb:d5:77:4f:f6:5c:c4:1f:41:5d:2c:47:d7:99:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.65.0/24
31.28.67.0-31.28.68.255
31.28.70.0/24
31.28.72.0/24
31.28.75.0/24
31.28.80.0-31.28.86.255
94.126.43.0/24
94.126.47.0/24
178.18.116.0/23
178.18.119.0/24
185.121.76.0/22
185.135.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50056
Signature Algorithm: sha256WithRSAEncryption
66:7f:37:03:e4:fd:38:a1:65:d6:ce:31:12:73:54:25:fa:be:
cf:9a:79:86:a0:c4:b4:55:16:c5:43:61:99:07:9b:9d:6d:9b:
d6:69:88:08:6c:52:2b:5c:a6:63:e9:c6:5f:38:a8:29:a5:b0:
60:ee:56:77:1e:d1:48:d3:70:89:21:11:22:31:d7:93:bb:d4:
90:80:d9:cf:61:37:61:cf:48:c7:f5:fb:06:f1:53:10:79:56:
f0:8f:9d:e2:e5:1a:6c:41:7d:35:e1:8c:52:e3:58:b8:d0:1a:
e4:15:e5:e1:fd:b4:9d:93:1c:49:27:88:22:84:66:71:c4:eb:
0a:26:73:a6:fc:b3:fa:a1:7b:d0:68:9d:cf:59:db:06:08:e1:
87:79:16:e8:d8:d6:15:09:13:0b:8d:3a:4d:22:1a:bb:4e:27:
b6:55:9d:1b:a8:0a:9f:38:59:b2:69:84:d8:10:7b:a1:64:62:
74:49:83:30:59:36:e6:64:bf:8f:16:72:f5:7b:ea:86:50:be:
69:ee:2f:a2:dc:80:90:bb:50:74:20:fa:2f:32:fc:c5:86:28:
75:fc:2b:ec:7d:ca:5d:94:f0:2b:30:03:2d:ad:3b:10:e2:4a:
36:0b:a7:63:24:ba:dd:41:60:fe:2c:72:26:43:51:69:16:ac:
f5:77:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:07:27 2024 by rpki-client on console-fra.rpki-client.org