Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer (raw, json)
Hash identifier: 04VITZrSW/uaub4rdb55bAWuMhLPHmVg9gGn3dIPUDM=
Subject key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801D5BB6385B8C2183AE1053C90A5E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.240.172.0/22
IP: 2a00:5640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d5:bb:63:85:b8:c2:18:3a:e1:05:3c:90:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:ca:f2:78:71:4b:87:0b:73:0e:0b:87:96:
84:25:50:0c:65:4d:7c:06:b3:62:2a:bd:78:dc:6a:
41:73:c5:97:6a:fb:97:ab:58:3f:ad:15:48:00:40:
bf:ac:2d:b3:64:e4:48:74:1c:38:16:2c:49:63:a9:
b0:cc:98:90:21:2e:24:b0:54:b5:ec:38:35:2b:2f:
4c:f2:2d:6b:f9:55:fd:94:95:34:95:e0:93:6c:41:
0b:ca:71:f6:66:b2:3b:d2:fe:6c:fc:95:cf:16:e7:
b5:c8:63:8a:ad:c4:79:cb:d7:24:4e:43:6d:41:6a:
b7:56:e1:6b:56:0c:db:7b:0e:87:a0:e5:ba:5e:48:
61:20:2f:8f:ff:c3:a4:b0:67:19:2e:2e:41:1a:b1:
aa:0b:a8:5d:b4:7a:31:9e:d3:c1:46:91:e7:65:f4:
f1:64:71:54:f9:36:29:64:7a:12:91:a6:87:66:86:
82:5b:e3:f2:d6:43:bb:9f:8e:03:d4:12:9e:ea:25:
66:98:34:32:b3:58:d9:a7:9a:40:86:39:e4:af:c0:
05:69:66:f3:7a:05:5d:1b:ff:d0:bc:38:34:61:86:
5a:c4:cb:f4:6c:60:fa:d8:3e:96:b5:6e:dd:42:3f:
94:12:b4:dd:ec:05:89:3b:42:19:fb:06:a1:0f:22:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.172.0/22
IPv6:
2a00:5640::/29
Signature Algorithm: sha256WithRSAEncryption
8d:76:49:42:51:7d:e8:14:f0:b2:02:eb:0d:8b:ef:53:fa:5a:
a2:88:e9:3c:85:a0:a6:37:be:2d:ec:1c:87:14:22:88:d0:a7:
7e:b1:8a:85:48:e2:28:37:c8:8f:f5:19:3c:91:ff:4a:7a:16:
4a:eb:1c:05:44:c8:08:99:c9:28:c0:d7:06:3e:e2:ea:f9:92:
c5:05:9b:34:8a:a5:32:98:5e:24:36:16:22:62:31:ab:15:25:
12:73:05:03:c1:cc:87:db:88:d1:41:66:9c:4c:e2:9a:ae:1d:
df:4c:07:b6:35:d2:a7:7a:2e:57:0c:d0:45:fb:75:70:62:4a:
61:b4:61:cc:2d:4c:3a:74:f6:2f:56:8f:19:2d:1c:21:f7:a9:
9e:bb:d4:a7:0c:37:b4:33:f5:50:59:4a:03:b3:4f:e3:a8:b4:
5e:a6:1c:2d:f2:66:09:84:2e:20:cc:94:4f:45:d4:6b:4d:12:
b2:61:37:6d:ce:19:f4:1a:40:82:fc:ef:12:2d:b9:86:dd:03:
72:f9:e4:97:b8:25:bb:28:74:8c:7d:8c:88:44:5e:dd:ac:e3:
92:41:9b:b4:6f:58:66:0b:2f:8f:0c:90:eb:59:1d:63:a2:cc:
83:1e:cc:30:fd:2d:e1:91:8c:37:5e:e9:30:28:07:1e:74:ce:
8b:e9:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:40:24 2024 by rpki-client on console-ams.rpki-client.org