Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ll2F3CTpfVgRow_0_Xz3rsEszG4.cer
File: Ll2F3CTpfVgRow_0_Xz3rsEszG4.cer (raw, json)
Hash identifier: f2a5Ivoq6ss1zFfUrJ0xM/8c+rflDeGFLzJoF9o0JLE=
Subject key identifier: 2E:5D:85:DC:24:E9:7D:58:11:A3:0F:F4:FD:7C:F7:AE:C1:2C:CC:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF1CDA0EF816BBD739A1B33E7A61D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/Ll2F3CTpfVgRow_0_Xz3rsEszG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24806
IP: 81.2.192.0/18
IP: 185.28.100.0/22
IP: 185.129.136.0/22
IP: 195.181.208.0/20
IP: 2001:15e8::/29
IP: 2a00:9160::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1c:da:0e:f8:16:bb:d7:39:a1:b3:3e:7a:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e5d85dc24e97d5811a30ff4fd7cf7aec12ccc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:d9:60:4a:85:e2:7b:04:d5:be:48:55:ba:
8f:c8:96:4b:39:ba:2e:a8:c3:ff:2a:46:c1:ff:f9:
02:4f:0f:55:86:76:18:ee:7e:15:80:1c:78:dd:33:
0f:69:0b:2f:f2:3a:2d:8d:75:92:ee:af:34:e2:c2:
22:7f:5b:d9:c0:79:e9:22:5f:f0:65:f0:ed:09:9d:
24:06:78:29:fd:39:f8:f3:7a:08:6e:22:b7:65:4a:
0f:c6:06:f0:a2:76:d0:cb:98:35:5b:c5:dc:bf:8a:
2a:e9:ab:68:94:17:0f:22:ca:cd:b2:05:b7:69:ce:
55:1a:2b:17:a3:87:58:37:ae:d4:f4:e0:56:af:bb:
f0:fd:1f:27:a4:25:37:50:2f:a2:c3:fe:c9:1c:db:
5a:16:24:88:30:76:5c:d0:c9:db:ae:c6:1d:e9:17:
48:7a:96:63:f1:31:c3:2e:20:e3:54:a2:fb:3a:5e:
9f:84:f2:bd:5c:c0:04:4f:bd:cb:21:95:c9:5d:47:
65:cb:74:0a:57:b9:08:c4:15:b8:16:28:5c:80:02:
9b:e7:8d:63:d4:84:02:da:42:1a:c2:c0:d4:ae:b8:
c6:df:53:b3:b0:36:96:e2:12:31:85:bb:4e:8c:f0:
c8:1b:7b:1b:3d:d3:96:f8:46:f6:3c:91:4e:52:a3:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5D:85:DC:24:E9:7D:58:11:A3:0F:F4:FD:7C:F7:AE:C1:2C:CC:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/Ll2F3CTpfVgRow_0_Xz3rsEszG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.2.192.0/18
185.28.100.0/22
185.129.136.0/22
195.181.208.0/20
IPv6:
2001:15e8::/29
2a00:9160::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24806
Signature Algorithm: sha256WithRSAEncryption
0e:b4:94:4f:2a:fe:55:ad:7a:50:c4:e2:48:c8:10:b2:1d:51:
d6:78:03:2d:e9:e7:82:1d:0e:b0:06:25:80:f6:36:85:6d:2b:
f1:d0:48:c1:1b:01:be:1a:0b:a7:7d:16:74:5a:49:02:cd:86:
19:e2:c9:cd:fa:37:d9:7e:d7:9c:9d:4e:0e:fd:86:c8:e7:30:
54:9d:d8:a2:80:58:7f:11:31:b2:70:31:22:f4:8d:46:c2:5b:
90:b4:4e:49:4e:0a:78:07:34:77:04:59:d2:0f:ff:b1:5d:b4:
f0:30:8e:c6:11:3d:66:80:76:ee:31:1d:0a:6d:9d:0d:ce:c1:
08:42:7b:cc:82:0e:7c:8c:06:88:25:8a:d2:d7:1b:c2:8d:c5:
a8:8f:8e:02:00:a2:96:81:08:2c:f1:6f:a9:12:ca:90:c4:28:
fa:87:32:1e:f9:e2:e0:b8:ea:f2:39:36:fe:f6:8a:56:64:be:
e7:8e:70:49:ec:68:d9:cb:80:7e:2d:e9:1d:39:8e:c1:63:e4:
f2:94:f2:e2:ba:7f:09:27:c1:64:1b:18:2b:64:02:ea:e7:09:
e4:bf:49:8a:75:c9:d9:c5:a6:95:7e:77:94:2a:f5:c5:66:0a:
f9:ba:39:e6:70:ec:de:ee:fe:fb:de:ac:26:de:5f:5d:13:02:
d3:30:f8:41
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYzI3xzaDvgWu9c5obM+emHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTVkODVkYzI0ZTk3ZDU4MTFhMzBmZjRmZDdjZjdhZWMxMmNjYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7bZYEqF4nsE1b5IVbqPyJZLObou
qMP/KkbB//kCTw9VhnYY7n4VgBx43TMPaQsv8jotjXWS7q804sIif1vZwHnpIl/w
ZfDtCZ0kBngp/Tn483oIbiK3ZUoPxgbwonbQy5g1W8Xcv4oq6atolBcPIsrNsgW3
ac5VGisXo4dYN67U9OBWr7vw/R8npCU3UC+iw/7JHNtaFiSIMHZc0MnbrsYd6RdI
epZj8THDLiDjVKL7Ol6fhPK9XMAET73LIZXJXUdly3QKV7kIxBW4FihcgAKb541j
1IQC2kIawsDUrrjG31OzsDaW4hIxhbtOjPDIG3sbPdOW+Eb2PJFOUqMozQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFC5dhdwk6X1YEaMP9P18967BLMxuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzBhODM4
My1hYWIwLTQzNjctODljMy05MmI0N2FkYjJiOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvMGE4Mzgz
LWFhYjAtNDM2Ny04OWMzLTkyYjQ3YWRiMmI5MC8xL0xsMkYzQ1RwZlZnUm93XzBf
WHozcnNFc3pHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF
BwEHAQH/BDgwNjAeBAIAATAYAwQGUQLAAwQCuRxkAwQCuYGIAwQEw7XQMBQEAgAC
MA4DBQMgARXoAwUAKgCRYDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJg5jANBgkq
hkiG9w0BAQsFAAOCAQEADrSUTyr+Va16UMTiSMgQsh1R1ngDLenngh0OsAYlgPY2
hW0r8dBIwRsBvhoLp30WdFpJAs2GGeLJzfo32X7XnJ1ODv2GyOcwVJ3YooBYfxEx
snAxIvSNRsJbkLROSU4KeAc0dwRZ0g//sV208DCOxhE9ZoB27jEdCm2dDc7BCEJ7
zIIOfIwGiCWK0tcbwo3FqI+OAgCiloEILPFvqRLKkMQo+ocyHvni4Ljq8jk2/vaK
VmS+545wSexo2cuAfi3pHTmOwWPk8pTy4rp/CSfBZBsYK2QC6ucJ5L9JinXJ2cWm
lX53lCr1xWYK+bo55nDs3u7++96sJt5fXRMC0zD4QQ==
-----END CERTIFICATE-----
Generated at Fri May 3 13:11:55 2024 by rpki-client on console-fra.rpki-client.org