Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
File: Li8BGtqu7EZbGCrucJw2fIfljzg.cer (raw, json)
Hash identifier: cvbQdn0RGRIIPOG3vXpyzMvynjGD+GhsSfLlfO8gMnk=
Subject key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA9C7640A3F40062C46892AD4A4C8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51510
IP: 193.9.192.0 -- 193.9.239.255
IP: 193.9.254.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:76:40:a3:f4:00:62:c4:68:92:ad:4a:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:af:6d:2d:02:87:5f:3a:69:f1:df:1e:05:
35:37:e0:31:dd:5c:2b:b1:eb:64:81:c2:0b:b1:59:
31:03:52:b3:50:b5:9a:17:b1:90:22:cf:15:f8:dc:
63:ef:fd:49:21:7c:d4:51:fd:b0:dc:ea:3d:d1:72:
38:48:02:55:d8:a3:b6:a7:a9:dd:60:fb:50:2b:9b:
51:f9:6a:bf:79:f7:4d:cf:58:b4:e4:dc:80:55:e8:
cb:d8:af:b4:eb:59:05:60:5c:58:4c:07:ba:c4:5e:
25:3e:85:a6:e8:f0:d5:06:9b:a9:a4:5a:b4:d7:1b:
e5:f5:bc:25:1a:77:70:d0:1d:93:2f:e3:f7:cf:f5:
5e:22:ba:0c:aa:27:a8:df:c8:8c:67:1e:14:8e:86:
db:c7:d2:d4:79:b7:90:c6:0f:27:4d:d0:9d:1e:40:
15:fe:b1:e9:f5:3e:2b:74:51:d8:e5:5e:1a:1b:64:
96:29:94:e9:f8:ba:e5:dd:89:07:78:6a:84:d0:09:
a4:de:da:a3:ae:e5:53:1d:5b:3c:94:b2:83:7b:05:
21:b4:a6:46:19:ff:80:f2:9e:25:97:41:a5:9f:21:
ff:9c:8f:f0:4a:fc:b3:6a:0d:a3:27:2f:45:bb:e4:
94:01:0f:45:8b:32:e0:7c:47:35:ac:24:be:09:67:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.192.0-193.9.239.255
193.9.254.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51510
Signature Algorithm: sha256WithRSAEncryption
5e:fa:8e:e5:d9:f8:e5:e4:cc:b1:2a:2b:0f:9f:37:5d:6b:dd:
58:e5:83:b7:97:c3:0a:0a:fa:14:c5:d4:38:0d:ae:a1:b6:3c:
51:b6:fe:93:55:ed:05:91:12:56:e1:81:23:70:83:0b:42:4e:
01:83:fe:6f:c0:33:89:f9:3c:bd:6d:08:c2:c6:92:b1:41:58:
a1:59:5f:f4:af:19:ff:a9:1c:ed:e3:bb:ca:eb:ef:62:36:1c:
b1:b5:56:32:5d:82:bc:3b:a8:8e:f5:ea:f7:7c:aa:4e:92:26:
05:fb:30:6e:6c:42:9c:4f:27:e2:51:69:8c:36:62:42:09:9f:
b8:34:7d:ab:ed:d6:3d:7a:76:0b:56:92:9d:7e:38:bc:2a:86:
22:ea:ee:81:72:7f:31:7f:af:06:ed:56:7a:58:38:08:1a:e0:
20:d1:79:bf:7b:67:ba:5c:f3:fa:51:7d:4b:73:c0:cd:7d:9c:
18:c5:21:da:2c:d7:5e:18:fc:4d:64:ea:93:59:ec:c9:db:f0:
b5:63:b4:67:24:30:e9:d3:e5:02:51:9a:08:3c:3c:21:4e:be:
31:56:ff:eb:1b:4c:e5:37:35:2b:b3:ce:9e:1a:6c:c0:7c:db:
e8:eb:2c:39:21:78:5a:d1:e8:e4:ac:2d:02:fc:d6:73:69:70:
d9:0a:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:47 2025 by rpki-client