Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
File: lB8grdISwODmjj8a6OoqeWSfT0w.cer (raw, json)
Hash identifier: S2Por1ivc5ElZr1PKLtReZGtzvK624AeA5eHNJXqRdQ=
Subject key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8015CCEC19573C57037FC36A6B9900E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.67.76.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5c:ce:c1:95:73:c5:70:37:fc:36:a6:b9:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:8c:da:83:37:01:21:12:54:36:d2:f4:eb:
2f:ee:4e:b5:59:af:06:fb:36:05:fa:a1:c9:36:77:
1a:c5:77:47:54:bd:82:41:e8:8c:10:6a:6a:d9:f3:
63:1a:81:fb:1f:71:32:7b:ee:52:c2:3e:53:88:27:
90:d6:91:01:64:99:d0:18:86:d7:2a:25:a3:46:5c:
48:e7:01:c4:37:0b:4f:7a:8c:8e:10:c7:23:56:52:
8b:f3:77:11:77:cd:28:3a:9f:73:f9:33:6b:39:10:
08:4a:f6:71:c4:5f:cd:28:c3:d6:f0:e0:bd:18:93:
b2:1f:1d:c8:0b:a7:4b:a8:df:6d:55:dc:a9:a9:a3:
ca:71:19:e5:70:1d:66:25:40:99:07:0d:b0:97:71:
b3:55:d9:c6:0e:3d:48:33:e0:ce:aa:15:68:a3:3a:
bf:03:bb:95:35:18:8d:b0:cc:b7:2e:17:2b:57:3c:
41:d3:ba:7c:11:c4:e2:14:35:7d:26:52:4d:a6:97:
f6:04:85:ac:27:88:a9:b6:13:cb:ad:73:e5:68:9b:
78:f3:6e:39:fa:fb:ef:e3:84:54:c3:63:72:11:ae:
95:dc:1b:1f:0f:c4:27:18:e1:6d:62:a3:92:bf:80:
b3:b8:99:7d:91:07:36:72:96:17:da:33:58:47:a9:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.76.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c6:6b:11:9b:6d:be:16:cf:bb:ee:d3:d3:a7:6a:5a:cb:41:
96:cf:bf:70:de:bf:43:4c:74:8a:50:9b:cc:d2:9f:72:42:e2:
97:e9:6f:48:eb:22:60:cb:fb:dd:39:62:6a:1d:cb:c1:44:a2:
6b:e9:16:32:13:41:a3:e7:ab:bf:1e:fd:cb:e8:e2:93:9a:f9:
c9:ef:04:9b:cf:e5:d8:76:c9:42:39:06:13:86:c4:a2:8c:3c:
89:02:1d:1d:e5:e9:41:56:dc:fd:b5:7d:36:dc:34:7a:29:c0:
8e:ac:6b:d7:21:01:be:0f:3c:fd:2e:bc:9c:82:b1:27:3e:0b:
46:70:cc:d8:69:a6:5c:ed:c7:3d:30:ce:e9:fd:13:1a:48:ba:
dd:2a:4c:b8:5a:55:75:31:c6:69:7d:7d:93:18:be:4d:07:38:
9d:25:2c:2f:8c:0e:ac:69:b2:5d:ff:c5:72:4f:77:00:ad:ad:
b8:75:cc:df:c6:1c:94:b1:cf:df:25:9a:ba:dc:34:3e:1e:99:
67:90:a8:f4:24:99:74:5a:2a:f2:7c:c8:f2:37:e7:0d:71:c5:
1f:e3:ad:6b:67:69:42:91:29:60:60:62:71:91:4d:9a:22:6a:
9b:f2:54:0b:3e:3b:8c:23:33:ad:0f:c0:31:a3:b0:d2:85:f3:
7a:2e:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:55:40 2024 by rpki-client on console-fra.rpki-client.org