Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.cer (raw, json)
Hash identifier: gqIEc4S3DGMaYWT8mQIuiU4q7cr2NwF1NuiLymviZvg=
Subject key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194A2D69A9E5DD3483E05D411AA06FACA7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 26 Jan 2025 13:39:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.10.220.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:d6:9a:9e:5d:d3:48:3e:05:d4:11:aa:06:fa:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 13:39:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:45:6f:97:0c:f8:98:bd:f6:71:d7:04:6b:
e3:15:80:67:af:4d:88:a9:aa:c7:43:5e:bb:c4:e2:
6d:03:47:c4:cb:1b:c2:65:9f:60:e2:72:33:89:44:
89:3c:ed:77:59:e9:9a:74:d4:5d:91:8e:ca:90:2e:
49:6e:79:c7:3b:6c:ed:f0:72:15:6e:cd:13:be:23:
97:02:3d:8a:01:20:14:ee:df:c3:8a:27:6a:3f:71:
c9:7c:be:ee:c1:e9:2d:2e:ea:fc:db:12:8f:65:69:
bc:84:8c:7e:1b:6b:24:21:1d:eb:18:97:28:a2:cc:
df:66:f1:5c:eb:a4:95:dd:6a:16:95:21:36:b9:01:
92:68:7e:4c:9b:21:e8:7d:1e:59:a8:37:3c:d3:63:
98:f0:52:38:f1:33:f8:36:5c:eb:12:06:11:4e:4c:
3f:fc:19:f0:b0:db:3c:83:85:e4:ae:db:5b:3e:fb:
22:a7:44:88:40:1a:fc:b9:8d:1c:ea:d5:95:e3:72:
0b:37:0f:65:82:69:12:4e:96:f2:f5:8f:a2:e7:58:
e8:83:2a:e4:bf:59:7a:74:fa:c8:73:da:bb:a1:8a:
5f:6b:56:95:1d:6c:6b:55:2a:b0:86:f8:30:ee:d6:
e6:5b:71:40:e7:12:a0:ca:0c:c3:c5:d5:f0:01:64:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.220.0/24
Signature Algorithm: sha256WithRSAEncryption
90:53:77:93:03:0c:e8:ee:db:c5:11:12:5d:09:df:aa:ad:1b:
28:a3:fa:f1:bd:e0:10:4a:50:6d:6b:da:44:cf:ae:94:97:be:
58:c1:40:04:14:48:78:93:8b:b9:fa:99:08:6e:9e:74:a4:b3:
3a:cd:3b:81:db:99:3a:87:bf:fd:35:93:d3:96:b0:4d:89:a6:
4c:27:c1:13:32:b5:2e:40:4e:ee:c2:c9:39:98:4a:a6:e1:96:
69:46:59:a3:f5:4f:5a:e0:f9:53:f6:3b:8b:15:45:56:1e:f9:
90:50:38:69:79:81:d5:d9:b0:aa:ac:cb:9f:d7:b7:c2:74:5b:
69:dc:f9:fc:25:81:2b:98:56:f6:6b:1b:d2:00:47:d2:49:42:
e8:83:27:5b:12:7b:83:06:6d:21:b7:63:d4:7a:b3:0e:0e:8e:
a0:b6:53:36:4a:7e:c3:59:05:01:fe:f7:69:4a:9f:b3:1b:e1:
60:09:c8:74:f9:12:ce:58:d2:09:80:94:f8:7c:ea:2c:97:29:
54:5f:c1:61:1c:81:d6:0c:53:27:ad:c0:5c:3b:c5:b2:6f:dd:
49:d6:16:85:c3:f6:20:49:1f:01:42:45:fa:9e:02:55:8a:f2:
5f:4f:26:48:e9:5e:a5:b2:fa:1a:89:20:b1:ca:ef:4a:cc:29:
ad:31:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:21 2025 by rpki-client