Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
File: l3d1zogEaVmWznfH02gbnCQbNi8.cer (raw, json)
Hash identifier: FUQVX4/1Fyi6DpzW4D9pXDRZBVMrSiAZ7xR3kI2XUKk=
Subject key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E2997DEA401FC41AACFBBDE13AB3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.45.16.0/22
IP: 2a01:7960::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:29:97:de:a4:01:fc:41:aa:cf:bb:de:13:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977775ce8804695996ce77c7d3681b9c241b362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:8d:fa:5d:9f:36:42:81:cd:56:87:41:7c:
00:f0:e1:45:b1:3a:70:74:e1:71:e0:3c:d7:80:c3:
6a:2d:36:69:35:9c:66:74:7c:91:46:96:75:2a:d2:
15:54:64:c9:59:c6:b4:18:99:26:ca:4d:df:67:2c:
dd:65:56:80:ed:c3:d4:1e:66:c8:69:9a:dc:c0:3f:
6f:2e:30:27:f2:9f:41:f0:27:ff:e2:75:d1:30:df:
77:73:15:d6:10:e4:f2:bb:97:84:89:72:ff:69:d0:
ab:e9:2a:31:1d:3f:85:d8:00:9a:28:dd:d1:7a:a8:
11:1c:dc:b7:e6:e6:de:ea:d8:5f:cb:b1:86:54:a2:
f2:b7:1f:32:21:8d:13:23:a8:ab:1a:90:a0:49:8e:
03:80:57:e9:10:34:11:13:98:f9:be:24:b2:07:37:
39:40:4e:5b:2b:73:7c:d0:e2:66:4a:c1:62:f1:70:
1b:ba:de:7e:99:1d:76:9f:55:f5:14:b5:99:1e:38:
5c:5b:a0:c5:ef:06:26:9c:e7:42:e9:9d:7e:bb:f3:
47:fa:bd:b4:b7:a8:f2:6f:ed:be:85:fc:54:8a:7f:
8f:f8:5b:37:29:02:cb:e1:90:ef:26:6c:61:93:25:
0d:29:4a:43:85:78:74:d3:d4:85:a3:e7:87:95:ee:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.16.0/22
IPv6:
2a01:7960::/32
Signature Algorithm: sha256WithRSAEncryption
1c:53:ae:07:e4:85:01:83:92:d1:f6:c0:24:ad:e2:81:58:a7:
bd:03:c2:6d:c5:1c:63:78:67:b7:8c:ac:cd:f0:a0:29:50:52:
6c:31:be:b8:21:d6:81:b8:e6:ea:25:7a:86:f4:56:ba:39:1b:
63:30:02:87:32:12:64:c9:db:3c:09:e0:9b:85:c8:39:b5:ca:
73:fe:ea:e2:07:7c:9a:b1:ad:5e:b9:59:f5:ee:55:65:cb:55:
61:0f:69:ca:c0:6e:74:47:bc:98:56:09:a1:a0:18:9f:e5:58:
db:d4:c5:05:41:78:d2:95:ca:e3:a4:4a:1f:ed:52:66:1e:33:
50:a4:58:f1:84:d6:43:3a:2d:1f:0f:5a:20:93:d8:45:0a:41:
0c:7f:4c:dd:8e:3e:8c:f9:82:9d:91:ce:c0:f5:1c:2c:3f:7c:
ff:67:cc:b3:86:93:ce:57:b8:29:ca:11:49:48:ae:41:47:29:
19:9b:0a:95:59:a2:f6:25:54:18:40:b7:67:d7:c0:84:db:34:
f0:48:73:a0:2c:a3:ef:bf:f5:a2:61:1b:4a:10:b7:6d:e5:3d:
79:15:e4:a2:5c:d9:99:0c:ff:01:61:97:8b:60:e0:da:7a:fe:
81:2c:b6:b7:b0:ea:11:f0:f5:d8:af:0b:42:9c:d5:b1:58:e2:
fe:03:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:46 2024 by rpki-client on console-ams.rpki-client.org