Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.cer (raw, json)
Hash identifier: f5Xsec8FlvfH0ucHki/4E+mWV9a73/3pdlJ44vGw7ec=
Subject key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFAD18D3DFD15D2923B1C6326AA3C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41816
IP: 91.143.16.0/20
IP: 185.209.44.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ad:18:d3:df:d1:5d:29:23:b1:c6:32:6a:a3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:05:d4:49:03:e8:72:c9:49:fd:18:26:f2:
72:b1:bb:ff:0b:14:ea:2d:53:e5:0c:0e:0b:48:ba:
f2:3b:ec:b3:a4:63:a8:19:48:ba:08:95:e8:7a:20:
b4:be:cb:6f:c9:93:a7:69:55:24:16:63:a4:be:96:
b7:6a:aa:6b:58:46:84:f7:52:2b:55:55:d2:ff:48:
2b:46:b2:8c:88:4e:1e:5f:3a:7b:b7:d0:53:fa:53:
12:30:73:bf:6f:2b:0e:55:5f:ba:39:81:67:6d:c0:
cd:2d:9b:42:1d:87:e3:43:b6:41:b2:18:86:83:37:
8a:af:ab:74:5d:3a:52:fa:ab:ff:3b:15:0b:a2:89:
df:35:a6:9d:90:86:a8:34:1f:d3:53:ff:dd:47:cc:
d7:93:ef:d9:51:05:a8:60:1a:7c:fd:c0:50:43:92:
98:e5:3e:37:3a:2d:98:1f:b4:55:59:23:78:c5:eb:
72:e4:3c:af:20:cd:2e:f5:e5:5f:c0:1c:77:c3:41:
ca:77:40:c8:44:6f:14:07:a3:cd:03:de:b2:eb:05:
bc:27:df:1c:b3:8b:64:ad:da:3e:c7:4c:fe:59:f8:
c4:3d:44:84:bf:7d:33:2f:2f:80:ee:6a:1c:32:40:
c5:15:57:02:bd:fb:6e:52:31:d6:96:38:71:cd:d7:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.16.0/20
185.209.44.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41816
Signature Algorithm: sha256WithRSAEncryption
18:9c:07:8d:92:2d:56:f3:b8:fc:76:00:f5:4c:1c:18:a6:a9:
8b:ac:74:af:d4:77:72:f8:b7:ba:e5:69:cb:ff:fd:04:a9:f0:
97:df:5a:df:9e:94:db:dd:6d:73:62:e2:70:3b:79:40:a2:b9:
e7:3c:df:e6:95:0a:c0:b7:af:64:53:43:27:bc:94:e7:20:69:
fe:5b:b3:35:bf:bc:a0:1d:0e:60:c7:3e:2c:b2:66:c4:e2:c3:
21:e3:5b:56:0b:00:48:4a:03:fc:86:ef:71:8a:c7:97:b5:20:
ac:37:8e:e8:6a:0d:1f:a3:a1:5c:23:c4:a2:54:09:ce:38:29:
13:5d:e8:5f:1a:b5:42:d8:1a:3e:e8:fa:1c:80:cc:57:8d:df:
71:88:58:8d:00:db:02:5a:5f:6b:a2:66:a4:6e:36:7f:73:46:
0e:f7:a9:fc:6c:8c:f9:f5:fa:9f:72:59:8a:84:a8:5e:53:c9:
43:b3:11:b1:bf:39:e1:3c:4f:5a:12:b9:ef:fd:1c:58:8e:ab:
88:1b:36:67:45:b4:1d:7b:ea:db:0e:db:7a:bd:ab:7e:cb:2b:
1e:b2:1d:c3:a2:80:37:f7:97:70:65:d9:78:fb:c0:fa:0f:5d:
fe:f3:9e:06:62:51:d4:49:25:4c:ef:a8:8f:54:56:84:1b:44:
1c:73:95:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 10:55:38 2024 by rpki-client on console-fra.rpki-client.org