Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7jZwuBUbEWtgewbIqExlWDV7nE.cer
File: l7jZwuBUbEWtgewbIqExlWDV7nE.cer (raw, json)
Hash identifier: OmA6YmChAhHFN/ix0Qm/mSH/CwG+LJaXG4n5Eg+9wg4=
Subject key identifier: 97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3B3E96881BECE8263B7E027D4D6938ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Jan 2024 11:32:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199055
IP: 37.26.88.0/21
IP: 83.151.208.0/20
IP: 185.40.8.0/22
IP: 2a03:6440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:3e:96:88:1b:ec:e8:26:3b:7e:02:7d:4d:69:38:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 11:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97b8d9c2e0546c45ad81ec1b22a1319560d5ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:4a:f5:e3:ff:40:ca:d9:02:7a:93:58:93:
b2:ac:6c:a6:60:64:a8:b6:99:39:62:71:a5:97:d4:
d1:ed:fc:14:9d:e0:34:26:a8:ea:be:b5:c2:f9:45:
48:15:09:c0:d5:97:7a:b6:7b:28:f6:41:51:c3:4a:
79:bf:f9:d4:34:32:d9:83:69:8e:97:22:a9:d4:26:
49:27:0d:66:36:30:bd:53:aa:0e:81:83:f7:dd:40:
dc:a3:62:df:90:46:0b:82:e6:63:af:0d:04:18:37:
92:27:4e:4f:12:d0:5a:11:f1:84:fa:bd:85:0d:ad:
8b:0f:69:d2:d8:c3:d8:32:cb:1d:9c:9b:b1:9b:f3:
f0:84:66:b5:ac:78:37:e3:a6:bc:ef:9a:5e:ba:b0:
36:bc:8a:9e:05:a3:f7:6c:ec:20:75:93:33:b6:e6:
d9:f2:5c:32:a7:33:1e:a0:b3:b7:bb:88:c5:eb:c1:
d1:cd:f5:82:e2:d7:dd:39:dd:ed:46:36:a3:ca:dc:
5b:a9:93:38:b1:81:08:4b:f2:4c:63:28:36:54:96:
df:38:83:6d:f1:5c:35:99:72:d1:34:14:57:df:2d:
cc:c6:e0:d2:d2:9e:df:7f:bc:28:63:ee:f4:86:3a:
a5:23:4b:05:a3:0b:6b:76:96:a7:19:ae:d1:2e:64:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.88.0/21
83.151.208.0/20
185.40.8.0/22
IPv6:
2a03:6440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199055
Signature Algorithm: sha256WithRSAEncryption
31:fb:94:18:82:b8:af:16:ee:7d:4a:d7:ed:c1:74:96:63:e6:
e1:5f:eb:40:06:e6:86:01:09:e9:a7:04:eb:f8:85:fd:43:8d:
47:98:c5:a2:b7:39:5d:48:eb:06:fa:55:64:c1:e8:50:ad:6a:
17:aa:8b:d4:36:76:de:a2:60:19:42:e7:04:5c:a0:fe:17:c8:
6c:bc:74:f8:4f:07:6c:fb:b3:d8:9b:1a:03:4b:15:69:63:e6:
ca:18:47:12:5d:06:4a:05:8f:58:cb:d3:47:17:1e:95:aa:db:
46:64:61:83:4e:f3:81:f5:c3:48:1a:49:f5:f5:8f:70:4d:f0:
ea:57:05:c8:65:2e:31:51:33:bc:20:d0:c8:a6:bf:4f:c2:a2:
6b:82:ab:04:41:ba:23:32:ca:7f:8d:81:21:cd:3c:0f:cf:23:
b9:0e:8a:78:2e:be:27:1f:d3:06:88:e9:4e:77:10:e3:c0:75:
b0:7e:59:d1:56:75:3f:a0:35:6e:35:bf:41:af:3f:cc:d5:97:
12:71:1d:c6:83:71:42:73:52:56:07:d8:bf:29:10:d5:63:15:
02:b0:02:6c:77:39:1c:74:06:53:4c:87:ad:52:64:57:1b:f4:
0d:56:23:27:e7:ee:f6:f1:57:3a:9f:05:40:1f:e7:4e:4b:0f:
99:4d:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:39:43 2024 by rpki-client on console-fra.rpki-client.org