Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
File: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer (raw, json)
Hash identifier: WXnJDPAgNRg7E2vdKxW2INYb/gYzW2PINa1J7/6u0js=
Subject key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA992C0C37D56C0B92302C5E86566455
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50815
IP: 178.216.56.0/21
IP: 194.0.174.0/23
IP: 2001:67c:2300::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:2c:0c:37:d5:6c:0b:92:30:2c:5e:86:56:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:ef:8e:78:fc:4a:d2:8e:21:c9:2c:0a:c1:
fc:0a:79:e7:c0:55:b7:e6:8f:69:6b:e0:c4:bc:42:
b2:7a:c5:30:71:cb:f8:f1:ce:f8:6a:e9:61:61:a4:
ca:29:ee:c4:96:1d:6c:6b:3e:0f:77:36:38:0e:6d:
d4:a5:e7:b3:66:98:29:f6:57:c4:44:6c:8d:d8:0d:
54:aa:3a:f9:41:29:09:66:46:10:04:a8:da:35:e9:
34:72:42:98:01:91:02:a1:44:c3:09:14:7c:9c:69:
75:78:f2:61:d9:b0:f8:cc:89:bd:e7:73:2a:65:9f:
39:64:e3:60:9b:91:ee:73:8d:bb:0c:cb:50:62:64:
c2:fc:88:ae:f7:c1:f0:c5:0b:00:c8:eb:c1:36:4f:
ec:b5:e1:98:1e:e4:3e:a5:8a:d6:1d:e4:c5:e9:77:
e0:25:0a:79:e6:d4:c6:14:87:a7:d4:ee:af:2b:20:
1d:1d:48:3f:b6:85:12:b0:7d:11:7f:b1:fe:15:89:
f2:ef:64:df:32:e8:fe:af:ca:a5:a4:95:af:b4:19:
70:d9:ce:46:7a:5c:d3:3b:d8:b8:b2:ea:e2:6b:5f:
2d:e3:aa:20:b4:21:5e:fe:ab:b2:12:f2:54:e4:cb:
36:60:75:55:9e:52:12:d5:6b:3c:cf:2d:dc:e0:f1:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.56.0/21
194.0.174.0/23
IPv6:
2001:67c:2300::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50815
Signature Algorithm: sha256WithRSAEncryption
54:94:c3:4c:52:1b:76:e2:d7:90:f5:90:9d:2b:aa:80:bc:d9:
2f:de:49:42:60:96:41:8d:9a:01:ac:81:9d:e6:f9:4c:b9:c6:
ae:b9:54:05:d0:a7:9d:3c:4b:8b:44:17:0b:b8:1f:12:16:f5:
83:da:77:e0:45:89:57:41:d4:8d:56:46:31:d2:a0:1a:d0:96:
0f:36:db:91:b9:0f:39:33:12:21:b3:1d:ee:7e:73:d4:0e:db:
dd:52:10:4d:86:99:9e:6b:b9:fc:67:ef:a1:49:db:78:3e:1b:
2c:52:af:fb:ba:f3:cf:e0:ce:96:1d:ee:99:1a:54:91:2b:fe:
7e:e1:7b:e1:5c:c3:1b:9a:af:12:0d:ae:72:8d:98:11:1b:01:
00:57:25:36:26:5d:44:4d:28:83:6c:06:67:47:2a:0c:e5:29:
06:e8:e8:a3:ae:5e:aa:ea:f4:6f:4d:fd:21:d0:b0:bc:5e:32:
c3:62:e8:95:99:7f:4a:ce:22:a5:2b:c5:d2:77:c0:68:e1:73:
b4:34:a6:a2:49:46:c4:9f:c3:09:73:41:d0:03:26:17:f8:13:
ed:a3:d9:c7:f7:82:0b:54:57:fd:50:0f:dd:bd:05:90:56:45:
6f:4d:07:d2:da:ae:be:bc:30:14:d3:fd:cb:39:48:b0:53:5b:
f8:45:ca:22
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAYzKmSwMN9VsC5IwLF6GVmRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzdiOGFhMDYzZmM0ZjJiYjg0YTlmNTZhM2JmYTM4YjJhYmVkZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgzvjnj8StKOIcksCsH8CnnnwFW3
5o9pa+DEvEKyesUwccv48c74aulhYaTKKe7Elh1saz4PdzY4Dm3UpeezZpgp9lfE
RGyN2A1Uqjr5QSkJZkYQBKjaNek0ckKYAZECoUTDCRR8nGl1ePJh2bD4zIm953Mq
ZZ85ZONgm5Huc427DMtQYmTC/Iiu98HwxQsAyOvBNk/steGYHuQ+pYrWHeTF6Xfg
JQp55tTGFIen1O6vKyAdHUg/toUSsH0Rf7H+FYny72TfMuj+r8qlpJWvtBlw2c5G
elzTO9i4suria18t46ogtCFe/quyEvJU5Ms2YHVVnlIS1Ws8zy3c4PH8CwIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFJd7iqBj/E8ruEqfVqO/o4sqvt+bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2JkNTlk
OS02OTBhLTRmZTItYjI5NS03ZWM1MTIzYmUxNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYmQ1OWQ5
LTY5MGEtNGZlMi1iMjk1LTdlYzUxMjNiZTE2Mi8xL2wzdUtvR1A4VHl1NFNwOVdv
Ny1qaXlxLTM1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQDstg4AwQBwgCuMA8EAgACMAkDBwAgAQZ8IwAw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMZ/MA0GCSqGSIb3DQEBCwUAA4IBAQBU
lMNMUht24teQ9ZCdK6qAvNkv3klCYJZBjZoBrIGd5vlMucauuVQF0KedPEuLRBcL
uB8SFvWD2nfgRYlXQdSNVkYx0qAa0JYPNtuRuQ85MxIhsx3ufnPUDtvdUhBNhpme
a7n8Z++hSdt4PhssUq/7uvPP4M6WHe6ZGlSRK/5+4XvhXMMbmq8SDa5yjZgRGwEA
VyU2Jl1ETSiDbAZnRyoM5SkG6Oijrl6q6vRvTf0h0LC8XjLDYuiVmX9KziKlK8XS
d8Bo4XO0NKaiSUbEn8MJc0HQAyYX+BPto9nH94ILVFf9UA/dvQWQVkVvTQfS2q6+
vDAU0/3LOUiwU1v4Rcoi
-----END CERTIFICATE-----
Generated at Fri May 3 03:39:40 2024 by rpki-client on console-fra.rpki-client.org