Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l0rUi7CdduXsBlkTZYFVnOBiTLM.cer
File: l0rUi7CdduXsBlkTZYFVnOBiTLM.cer (raw, json)
Hash identifier: CfFbanHR+WfA87NMKoiyx6566Jh+DiT7/l0n7hb6KCY=
Subject key identifier: 97:4A:D4:8B:B0:9D:76:E5:EC:06:59:13:65:81:55:9C:E0:62:4C:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D64AF177E97B04791E2D07A0CD6463E63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/l0rUi7CdduXsBlkTZYFVnOBiTLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Feb 2024 12:40:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211020
IP: 185.222.212.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:af:17:7e:97:b0:47:91:e2:d0:7a:0c:d6:46:3e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 1 12:40:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974ad48bb09d76e5ec0659136581559ce0624cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:7a:95:3e:37:08:1d:48:1e:00:22:dd:c3:
80:07:97:13:66:4a:c0:fd:f0:b0:0c:bc:f0:45:e7:
63:7c:ad:46:dd:12:43:5c:ad:bb:cb:47:b2:5d:52:
7f:74:b8:83:65:1d:21:db:95:c2:7b:5a:00:54:15:
8d:8a:0b:a5:14:dd:7d:6b:69:bf:35:02:10:86:33:
8d:53:6d:5e:79:04:76:c6:e4:94:3e:6b:f7:de:93:
42:16:5b:24:83:09:db:5b:bb:16:1e:25:b5:dc:ea:
ee:c5:6b:92:ba:4a:21:45:d6:e4:20:eb:f0:85:60:
75:97:68:08:9e:b1:10:18:16:97:2b:09:bb:19:ab:
86:a1:3d:6c:1b:df:28:77:f5:24:51:94:51:c1:ee:
ee:ed:43:29:84:aa:a3:f7:38:07:6f:99:35:5f:19:
c4:29:26:e5:4c:ff:9a:c3:c7:b1:ea:38:7c:1f:ad:
6e:7f:ec:fd:91:0d:cc:fa:e0:8c:c1:e1:6e:22:09:
47:00:f7:1a:f6:c4:9b:3d:65:9b:e5:0b:64:3f:4f:
04:f0:f6:68:45:f8:03:83:af:db:f7:37:35:94:ec:
dd:75:bf:bb:d7:52:c4:09:84:8e:1c:f6:0e:e7:c8:
00:80:00:20:3f:5c:13:58:4c:b0:ef:d2:99:6b:ce:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:D4:8B:B0:9D:76:E5:EC:06:59:13:65:81:55:9C:E0:62:4C:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/l0rUi7CdduXsBlkTZYFVnOBiTLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.212.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211020
Signature Algorithm: sha256WithRSAEncryption
9d:30:59:d5:12:3e:ea:7d:93:9c:09:98:4f:54:9d:ef:11:11:
99:82:4f:0b:b6:d2:ad:76:24:0e:95:47:96:81:fa:cc:a2:59:
8b:b7:82:82:4e:de:e0:57:d4:a8:5f:2b:70:a3:fe:16:57:9c:
bb:74:f4:97:91:ec:f4:65:ef:48:0a:ba:34:0c:8e:b5:59:2c:
42:b7:a8:15:fe:e6:bf:4d:25:7e:4e:01:43:80:ab:b3:6b:22:
c4:bc:ba:48:28:9a:ad:17:d5:64:cf:58:4f:db:d1:81:86:98:
5e:b1:5d:be:23:0e:6c:f4:b4:61:66:d4:bb:e9:ec:12:ec:c0:
e1:f1:0a:2d:3b:2f:5a:4a:cf:f0:6f:8b:a8:6e:4b:a3:5a:0b:
b3:9b:b5:d5:c7:c6:54:29:7f:1c:07:37:05:09:f5:db:23:65:
96:42:34:16:23:ad:89:aa:09:f5:94:30:fd:ef:d2:5a:77:30:
00:10:77:06:49:ee:61:0d:d3:2f:e0:7c:bd:e1:a7:91:02:a7:
4a:1e:5e:73:3b:09:df:fa:3f:de:c4:e5:ef:79:38:2e:a2:aa:
2b:86:6a:b5:b9:3c:37:c4:81:20:58:ec:f2:71:2a:09:e8:36:
2a:c5:27:2c:50:a9:ab:9c:69:51:9b:df:6a:ea:f9:25:23:f6:
c7:72:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:43 2024 by rpki-client on console-ams.rpki-client.org