Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
File: L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer (raw, json)
Hash identifier: v1Ag+c/hG0RTcbgdopDfPJhe8Z1a6ZtYDCiiXX/lmXY=
Subject key identifier: 2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF97D2B358AB1731D9D6C3B3CD57F60FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Mar 2024 10:09:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.20.18.0/24
IP: 2a0a:f100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:7d:2b:35:8a:b1:73:1d:9d:6c:3b:3c:d5:7f:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 1 10:09:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:04:ba:a7:ae:a0:d1:15:ab:dd:52:40:18:
4f:56:e5:20:cb:9d:1b:6a:12:f3:cd:6a:7c:24:2b:
e4:84:d8:c9:f0:0b:88:4e:75:4b:8a:87:b1:af:64:
84:93:fc:31:7c:79:b0:22:5e:89:54:b5:2a:15:ba:
d5:df:6a:60:f6:20:cc:4b:fa:51:ab:fd:fc:86:b6:
a2:ed:54:cf:75:34:6e:f7:f0:f1:e9:e6:9a:fa:e1:
7b:be:de:b5:34:a7:8d:c7:f4:ce:cb:a8:65:8b:2c:
cb:55:8d:d1:e6:26:72:a4:13:df:51:9e:4f:ea:f3:
4c:5b:5d:50:79:aa:18:e3:77:73:fa:ed:e9:b2:4b:
0d:01:a9:07:d8:11:77:a5:f7:2d:fb:6f:2b:88:b3:
02:35:92:6a:70:e5:a1:05:6c:de:1a:bd:c6:d7:5e:
e6:b9:9c:ba:d5:d5:42:a0:bf:d3:91:90:a8:a9:06:
35:95:c6:4d:30:5f:07:5c:01:4c:eb:2d:04:3f:f6:
b8:5a:f1:9d:a1:5d:1e:dc:28:ff:1e:20:23:5e:35:
f5:16:82:a9:03:ff:45:e4:78:79:95:64:03:a1:e9:
56:1e:9b:54:9e:5a:89:38:8e:6b:06:54:aa:ee:ae:
76:de:be:9d:1b:1c:34:55:c1:47:18:ad:db:97:c0:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.18.0/24
IPv6:
2a0a:f100::/29
Signature Algorithm: sha256WithRSAEncryption
9a:37:35:63:23:a5:81:34:8e:54:3c:8f:09:5c:5f:74:cb:bd:
2a:a5:c7:ba:8c:da:ca:09:57:55:f8:5f:fc:6b:7b:27:41:46:
0e:2a:e4:ec:74:ea:26:8d:18:f0:c5:e9:7f:11:d2:28:27:96:
57:99:11:1d:5a:9b:85:e5:1c:4a:13:d4:6f:b1:93:48:21:86:
6e:70:8c:27:64:04:04:b4:c4:39:2a:72:99:e1:cc:33:3e:46:
8a:93:95:09:88:82:f0:50:39:29:7f:18:49:91:9f:97:2a:1b:
d9:93:97:35:df:08:0d:d4:89:bc:f0:ff:e0:34:75:9a:56:f5:
8d:5b:db:99:a2:04:b1:de:b7:9a:fd:99:e6:ff:ec:73:2e:5f:
87:c9:c1:9e:04:4c:f3:48:c4:4c:b3:1a:26:d1:12:83:40:24:
f9:bc:7d:19:e0:21:1c:bc:42:da:a7:43:87:42:da:a1:d5:21:
89:02:d4:79:a6:c3:01:80:39:0c:bc:5f:96:3f:8e:14:b6:a9:
54:34:dc:ac:34:38:3e:7a:e3:de:e7:e9:51:5d:0f:ba:67:5d:
4d:c9:ba:47:ba:83:25:91:b9:a5:67:28:6b:c8:cf:3d:fe:4b:
8d:22:d0:ff:92:7a:9b:98:86:39:12:e8:4c:ed:e7:53:77:35:
ff:81:e9:14
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAY35fSs1irFzHZ1sOzzVf2D+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzAxMTAwOTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmYwZTFkOTc4MGZjOTIyZWJjMjI1OTAzODBmMjgwNzA3ZGRjZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX8EuqeuoNEVq91SQBhPVuUgy50b
ahLzzWp8JCvkhNjJ8AuITnVLioexr2SEk/wxfHmwIl6JVLUqFbrV32pg9iDMS/pR
q/38hrai7VTPdTRu9/Dx6eaa+uF7vt61NKeNx/TOy6hliyzLVY3R5iZypBPfUZ5P
6vNMW11QeaoY43dz+u3psksNAakH2BF3pfct+28riLMCNZJqcOWhBWzeGr3G117m
uZy61dVCoL/TkZCoqQY1lcZNMF8HXAFM6y0EP/a4WvGdoV0e3Cj/HiAjXjX1FoKp
A/9F5Hh5lWQDoelWHptUnlqJOI5rBlSq7q523r6dGxw0VcFHGK3bl8CPLwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFC/w4dl4D8ki68IlkDgPKAcH3c+7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzAzOTVj
YS05NGRiLTRjMmMtYTZiZC0xZmQzNjNmZTdjNzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMDM5NWNh
LTk0ZGItNGMyYy1hNmJkLTFmZDM2M2ZlN2M3Mi8xL0xfRGgyWGdQeVNMcndpV1FP
QThvQndmZHo3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwxQSMA0EAgACMAcDBQMqCvEAMA0GCSqGSIb3
DQEBCwUAA4IBAQCaNzVjI6WBNI5UPI8JXF90y70qpce6jNrKCVdV+F/8a3snQUYO
KuTsdOomjRjwxel/EdIoJ5ZXmREdWpuF5RxKE9RvsZNIIYZucIwnZAQEtMQ5KnKZ
4cwzPkaKk5UJiILwUDkpfxhJkZ+XKhvZk5c13wgN1Im88P/gNHWaVvWNW9uZogSx
3rea/Znm/+xzLl+HycGeBEzzSMRMsxom0RKDQCT5vH0Z4CEcvELap0OHQtqh1SGJ
AtR5psMBgDkMvF+WP44UtqlUNNysNDg+euPe5+lRXQ+6Z11NybpHuoMlkbmlZyhr
yM89/kuNItD/knqbmIY5EuhM7edTdzX/gekU
-----END CERTIFICATE-----
Generated at Fri May 3 13:40:23 2024 by rpki-client on console-ams.rpki-client.org