Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
File: l79b5z8YIydEmN9So3U10T2lvmI.cer (raw, json)
Hash identifier: VPB9DUYjU1G33yvLoNhnohD0DX0mbHbPJbFG8IF5HTY=
Subject key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B717B5CD3045D6B314361844EC41E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20897
IP: 193.93.100.0/22
IP: 193.108.162.0/23
IP: 2001:67c:2380::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:17:b5:cd:30:45:d6:b3:14:36:18:44:ec:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97bf5be73f1823274498df52a37535d13da5be62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:fb:7d:a9:d9:6c:9d:2b:4e:e2:99:0f:2b:
81:90:81:fb:56:62:89:6a:10:73:2b:c6:56:40:f6:
1f:4c:da:a3:3c:f9:3a:0c:00:97:7c:08:15:ab:8d:
f0:fd:3f:91:49:d3:87:a4:13:75:4e:97:f6:bb:89:
cc:2f:95:7e:cd:57:c6:8b:df:92:9f:4b:47:1a:c4:
ee:f4:73:b5:91:1d:a9:df:b7:e7:16:84:05:d4:fd:
c6:99:f1:e5:89:70:13:9e:25:0f:d1:fc:74:cb:7c:
d7:72:cb:6a:f5:87:f5:c8:9b:cf:f4:52:f1:7c:51:
ac:38:af:bb:e2:13:ba:77:9e:47:2f:eb:c7:72:1d:
2f:f6:9e:ce:c1:af:62:fa:4a:76:3f:5f:62:9e:37:
51:e0:4d:7a:39:b9:24:b9:b5:41:b6:3a:ec:be:7d:
e8:6c:bd:df:cf:12:f7:0c:cb:fe:e0:d4:94:0e:8c:
3a:2b:85:4b:be:82:0f:16:01:a6:90:f9:f7:b6:dd:
cb:dd:0a:34:ca:71:d0:2f:29:89:f3:91:8b:dc:be:
5c:97:44:b1:57:7b:20:9a:4b:d2:68:f5:19:f2:49:
be:aa:6b:bd:9d:a4:c7:f9:8b:d5:1a:31:f1:e2:6d:
cd:25:66:57:c2:fa:22:27:4f:91:a8:ff:92:92:85:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.100.0/22
193.108.162.0/23
IPv6:
2001:67c:2380::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20897
Signature Algorithm: sha256WithRSAEncryption
94:70:2f:a2:6a:b5:ec:2c:3e:e7:fe:11:f3:66:07:dc:39:52:
1e:7b:f2:c1:61:34:6d:2c:ab:c5:06:87:7e:17:d3:f4:94:58:
54:6d:c8:e0:8d:74:33:3d:d0:84:49:78:18:89:a0:54:af:15:
ab:b1:12:2e:23:6c:df:c0:c0:96:8d:76:ce:96:47:1f:b1:67:
c3:4c:f8:39:b7:b9:f1:51:a0:e3:b1:49:b6:98:f8:98:6d:60:
2b:40:99:3c:44:ac:6a:71:98:db:dc:bc:b9:84:3c:4a:ae:8b:
29:1e:0f:96:b0:b2:92:2c:e2:7d:de:d7:f6:bf:63:d3:da:64:
84:82:b1:71:2d:01:00:85:95:44:30:24:43:04:ee:e6:cc:61:
f8:0f:88:13:c8:b5:0f:79:2e:4d:e7:4e:18:87:8e:5a:94:0c:
03:e5:a3:b1:1b:d7:72:ce:ad:ca:af:6b:97:38:76:64:52:af:
14:0f:f0:58:18:24:77:3f:fb:1a:fa:58:bb:63:c9:b7:4f:48:
62:1a:f0:9e:12:9e:bd:34:2a:12:f8:12:69:9a:fd:23:3b:78:
57:93:3a:f5:e8:ee:01:98:90:2c:09:4b:94:6e:71:a7:bc:b5:
2a:c2:d6:a9:b1:e8:dd:d2:3f:b8:94:58:6a:ec:1c:31:34:44:
5d:1e:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:28 2024 by rpki-client on console-ams.rpki-client.org