Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
File: l6r4kriZHowCd5yy24ZNMh7r6QU.cer (raw, json)
Hash identifier: +e+j3ZFgtDDGhXYzwipqFIHqCqCljw+WFGFiU05EwX4=
Subject key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DAAC6F8A9434C317B31797EBC4A44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.135.219.0/24
IP: 194.11.0.0/20
IP: 194.11.112.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:aa:c6:f8:a9:43:4c:31:7b:31:79:7e:bc:4a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:2e:85:47:e3:5b:90:5d:ad:00:06:91:3c:
62:1b:c2:84:36:0b:3c:2b:2b:f7:ba:3a:c4:52:9a:
b0:2e:6e:17:99:d9:c9:7c:ca:f3:9c:53:35:59:c0:
86:d4:4e:64:ed:5e:a0:d7:f2:df:1c:0c:ff:d9:74:
26:ac:b1:b8:6e:4e:0a:f1:7b:52:f0:d4:a5:ce:51:
85:b3:3d:36:24:35:76:6e:34:da:f1:fc:0c:7d:b7:
c7:45:fd:84:0a:49:ec:3a:a3:f5:df:14:f8:dc:29:
3c:a2:21:2e:f0:59:46:6e:99:c9:9e:5b:8c:e3:70:
27:d7:07:3c:af:a0:da:76:08:62:17:68:0e:f6:5b:
bf:cb:fe:b7:07:90:6d:8d:1d:42:e0:92:2a:1a:59:
98:4d:3e:dd:10:ba:16:38:fc:e8:fe:a8:db:ed:06:
c5:46:7d:69:aa:50:97:ad:95:af:62:a7:04:45:b3:
49:60:04:98:f7:32:04:5d:ad:68:a8:6a:7c:f2:9c:
23:d3:b0:87:69:82:8e:96:ec:64:f0:ff:d3:38:82:
bb:73:df:48:a5:74:64:13:9c:f4:2b:09:d7:ca:bd:
e4:69:4c:57:82:8f:97:a8:10:df:2d:0b:8e:93:81:
57:52:95:1c:5e:65:21:50:c1:92:8d:46:b7:48:d5:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.219.0/24
194.11.0.0/20
194.11.112.0/20
Signature Algorithm: sha256WithRSAEncryption
85:47:e7:27:4f:f5:77:ef:6a:e1:8b:5b:60:33:8b:24:4b:1e:
f5:95:3a:3d:f1:7a:3a:a9:7e:04:9b:c5:82:e4:e2:15:73:b0:
16:f9:70:82:d0:3c:ae:24:ee:fb:6f:fd:a3:86:5f:7e:b6:e0:
f6:9f:88:a5:44:4c:37:a8:3f:b2:98:cc:02:46:44:3d:dd:55:
46:09:2c:a3:a9:e0:f7:9d:7e:09:54:11:38:d4:d0:69:50:c1:
1e:45:6f:43:69:f1:27:84:56:74:01:8f:1b:8d:c4:cd:71:6c:
5d:b2:aa:bf:1d:62:28:59:d9:c5:6b:6f:7c:e6:84:a7:c9:a4:
fb:71:a0:59:a5:2e:bf:fd:7e:fa:cd:b9:83:18:d0:7c:dd:0c:
13:cc:e1:90:f9:73:a4:cb:c0:36:c9:b4:23:43:18:59:dd:56:
5c:84:39:12:70:38:87:57:05:0e:07:ac:38:b3:b5:26:f8:fd:
11:32:2e:a6:43:82:33:f3:a8:e1:c8:82:41:5e:e4:6f:7b:62:
94:0b:20:cc:42:2e:f1:2e:0f:49:2d:26:66:c7:f9:43:36:2c:
07:af:7b:e3:38:25:53:16:72:2e:5d:b9:60:89:ac:22:1e:82:
6d:54:35:c0:d2:f6:0e:08:8b:2c:da:d6:05:bd:9e:29:9d:4e:
0e:89:77:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:48 2024 by rpki-client on console-ams.rpki-client.org