Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.cer (raw, json)
Hash identifier: UYJ6d9EQ7ptMQlqrPpjTn+n0d1zNfHruUyO8L6aeD+g=
Subject key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000C6BFD310A3792BF9AF4442FC5F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41833
IP: 46.227.248.0/21
IP: 89.249.208.0/20
IP: 93.185.224.0/20
IP: 95.141.48.0/20
IP: 141.138.176.0/20
IP: 185.58.200.0/22
IP: 2a02:f50::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0c:6b:fd:31:0a:37:92:bf:9a:f4:44:2f:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:59:b0:62:4f:61:40:4e:be:3b:6a:c1:9a:
92:f0:aa:93:73:ae:8f:cb:dc:04:a1:b4:52:d8:84:
4e:11:5e:83:1e:fc:40:b4:46:ef:66:b4:af:41:53:
d9:e8:c8:52:15:8c:a2:26:10:eb:13:d6:16:5d:4a:
e6:a6:be:e8:c3:68:3b:02:10:c2:8d:2f:0a:e0:a8:
0b:09:54:32:a8:ce:8f:9a:d5:03:1e:fd:9c:02:d4:
98:1b:c7:5f:b0:c7:41:ec:d8:df:4b:c7:fc:40:7a:
48:e9:35:71:34:d2:c3:f8:d7:4b:6f:fb:24:67:2c:
e3:8e:f6:a1:94:fb:37:47:f2:14:e3:d9:4c:76:5b:
3b:a0:1e:f4:9a:37:cd:24:58:a1:77:49:71:de:06:
73:d9:b7:91:a6:fb:c3:3b:57:f9:d0:b6:af:82:f5:
be:f5:21:91:3d:82:93:74:af:0c:63:1a:c4:89:8d:
b0:c4:6e:17:72:d2:33:14:c4:cf:a2:14:f6:79:a4:
40:e3:96:56:bc:a9:57:f3:a1:79:fb:5a:0d:0d:5f:
97:bf:02:ea:f5:5f:53:4f:60:3f:64:55:f7:6f:66:
14:16:11:a0:2a:bb:c5:d3:01:62:0a:2b:05:4a:8a:
fd:81:38:af:9a:8c:81:94:cd:b4:e3:a0:02:f5:28:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.248.0/21
89.249.208.0/20
93.185.224.0/20
95.141.48.0/20
141.138.176.0/20
185.58.200.0/22
IPv6:
2a02:f50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41833
Signature Algorithm: sha256WithRSAEncryption
13:4a:8e:63:fd:3e:16:31:fd:18:c1:eb:10:3d:eb:ea:7b:70:
f3:4b:e0:cc:ac:50:e2:48:bc:01:af:1e:ae:57:99:9e:3b:b4:
37:98:f3:1c:fa:cc:8b:3d:c4:61:bd:b8:3e:1a:f1:7a:0d:ac:
7f:ae:b8:9a:d2:13:24:79:92:27:88:c1:c7:2a:87:8c:7f:a5:
89:c5:2d:fe:2d:13:05:c8:4a:51:8d:80:b7:72:d4:4a:4b:2b:
ed:1d:12:b8:b3:eb:c2:08:9c:dd:b5:f5:6d:87:35:c1:19:51:
a9:f1:b7:38:27:3a:c4:2f:92:94:19:f2:65:65:86:9e:70:e8:
31:cb:42:b9:b4:cc:8e:da:15:69:d8:82:e7:80:cc:3c:90:44:
6e:25:d5:0e:70:ec:b4:d0:dd:89:5a:69:35:a9:f6:b7:ae:ed:
61:6f:b2:45:0d:28:6a:fc:91:27:e7:c3:d4:e7:e0:64:27:fa:
82:eb:3b:f5:25:ea:1d:4a:6f:c4:eb:f2:cf:49:d1:f4:97:07:
00:93:1b:ee:a9:cc:38:0f:7b:12:17:21:7b:d3:50:6b:e4:ab:
16:0d:5c:b8:e4:03:cd:4e:8c:a8:e6:32:b2:4e:c2:80:d9:99:
61:46:a9:72:66:3e:4b:46:ce:7f:6d:ee:68:1f:ec:f4:b0:be:
10:9c:a0:c2
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYzFAAxr/TEKN5K/mvREL8XyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzQyOWRlOGJjYzNiZTQ3NGFiYmRhMmJlMmE4OWQwZjMyMDhjMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c1ZsGJPYUBOvjtqwZqS8KqTc66P
y9wEobRS2IROEV6DHvxAtEbvZrSvQVPZ6MhSFYyiJhDrE9YWXUrmpr7ow2g7AhDC
jS8K4KgLCVQyqM6PmtUDHv2cAtSYG8dfsMdB7NjfS8f8QHpI6TVxNNLD+NdLb/sk
ZyzjjvahlPs3R/IU49lMdls7oB70mjfNJFihd0lx3gZz2beRpvvDO1f50LavgvW+
9SGRPYKTdK8MYxrEiY2wxG4XctIzFMTPohT2eaRA45ZWvKlX86F5+1oNDV+XvwLq
9V9TT2A/ZFX3b2YUFhGgKrvF0wFiCisFSor9gTivmoyBlM2046AC9Sh+dwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFJdCnei8w75HSrvaK+KonQ8yCMOFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzk5MTFh
Yy00Y2YyLTRlZTUtOGQ2My0wNDliZGM2YjhlZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvOTkxMWFj
LTRjZjItNGVlNS04ZDYzLTA0OWJkYzZiOGVmMy8xL2wwS2Q2THpEdmtkS3U5b3I0
cWlkRHpJSXc0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQDLuP4AwQEWfnQAwQEXbngAwQEX40wAwQEjYqw
AwQCuTrIMA0EAgACMAcDBQAqAg9QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCj
aTANBgkqhkiG9w0BAQsFAAOCAQEAE0qOY/0+FjH9GMHrED3r6ntw80vgzKxQ4ki8
Aa8erleZnju0N5jzHPrMiz3EYb24Phrxeg2sf664mtITJHmSJ4jBxyqHjH+licUt
/i0TBchKUY2At3LUSksr7R0SuLPrwgic3bX1bYc1wRlRqfG3OCc6xC+SlBnyZWWG
nnDoMctCubTMjtoVadiC54DMPJBEbiXVDnDstNDdiVppNan2t67tYW+yRQ0oavyR
J+fD1OfgZCf6gus79SXqHUpvxOvyz0nR9JcHAJMb7qnMOA97Ehche9NQa+SrFg1c
uOQDzU6MqOYysk7CgNmZYUapcmY+S0bOf23uaB/s9LC+EJygwg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:49 2024 by rpki-client on console-fra.rpki-client.org