Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDlVpujFRs4-2RnzjqBjDYQKF-0.cer
File: lDlVpujFRs4-2RnzjqBjDYQKF-0.cer (raw, json)
Hash identifier: IhoFtr9+tUrngtmp8NSA0D8C+kdOH/Q5RY53+w5h+dI=
Subject key identifier: 94:39:55:A6:E8:C5:46:CE:3E:D9:19:F3:8E:A0:63:0D:84:0A:17:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC31FC91150B5AA3C9354A77FBF57A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/lDlVpujFRs4-2RnzjqBjDYQKF-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49051
IP: 94.143.229.0/24
IP: 2a12:5d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:31:fc:91:15:0b:5a:a3:c9:35:4a:77:fb:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=943955a6e8c546ce3ed919f38ea0630d840a17ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:66:92:47:13:55:60:89:84:d2:ff:95:a5:
65:ea:20:70:d1:0d:16:46:78:31:72:eb:5d:f7:db:
53:d0:42:e3:cb:93:23:06:de:e7:c7:c3:fd:d7:3f:
a2:69:ea:29:03:08:51:02:20:5a:07:b0:f1:b1:22:
d2:f7:4f:34:f0:b2:6d:d1:3a:93:18:cc:56:cf:bf:
77:d3:53:1c:34:4b:42:ab:5d:9e:b0:72:1a:32:47:
4d:de:e1:d1:16:8f:f7:fd:2c:9d:71:0d:9d:71:ae:
dc:34:3e:8e:5b:80:7f:ec:82:f3:ea:de:0c:c8:64:
6f:82:33:5a:01:59:2e:d8:45:3f:78:1f:c1:00:11:
a2:13:99:23:bd:76:32:23:39:68:6f:2c:7f:5c:73:
55:c1:87:90:ff:f3:27:77:05:4a:0a:87:d7:1d:87:
5f:bf:ed:61:a1:97:05:2d:97:ae:04:08:c0:46:aa:
60:88:b8:8e:e3:98:82:af:1a:aa:bb:14:25:96:52:
37:70:14:eb:83:1b:44:5e:ba:6b:70:e4:11:47:9f:
ba:05:52:0f:23:e4:30:42:a4:b1:65:16:58:08:03:
b0:c6:cf:a0:8a:4f:4a:67:1c:5f:46:2a:f5:09:9d:
e2:d0:ab:32:8c:81:b4:e5:52:c8:7c:85:d0:ed:33:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:39:55:A6:E8:C5:46:CE:3E:D9:19:F3:8E:A0:63:0D:84:0A:17:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/lDlVpujFRs4-2RnzjqBjDYQKF-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.229.0/24
IPv6:
2a12:5d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49051
Signature Algorithm: sha256WithRSAEncryption
2e:83:84:c2:cf:2c:dd:0d:1b:21:55:f0:25:6d:6d:6b:09:ff:
3c:49:07:f1:54:5b:84:83:b4:c2:40:03:5c:fd:1d:4c:f9:da:
20:e4:6e:c3:e0:4f:c9:a2:fc:08:9a:2c:a0:48:f0:cf:39:6e:
cc:ae:81:b6:9d:d6:c7:08:5f:08:9b:08:33:50:72:f5:7e:55:
dc:b9:aa:4b:72:99:b2:b6:77:36:5c:0e:6a:32:b9:3a:09:d6:
a7:4a:ba:1f:a4:1d:7a:93:6b:99:de:fc:76:73:b5:1a:3b:6c:
9e:58:e6:ee:46:3a:5e:da:2c:73:1c:34:de:e7:1a:24:7b:1a:
54:fe:70:3e:22:5f:2c:57:62:96:26:47:67:4e:aa:f4:ac:a3:
7b:41:eb:bd:a6:e7:a0:77:93:4f:fd:d0:42:c5:6d:3a:6e:e0:
0c:3d:3f:55:40:4c:43:ef:66:2f:57:eb:dd:27:44:47:11:92:
36:b5:1e:c5:11:e0:df:d5:ab:08:18:f6:95:ff:94:72:2c:80:
26:8d:15:29:bb:7d:b6:a2:44:15:79:d4:d6:24:69:47:25:83:
76:9c:df:38:51:fd:16:81:f4:65:9a:44:8f:ac:f4:e6:fd:4e:
a0:76:cb:c8:be:95:d3:7a:ef:9f:8b:20:9a:f1:3e:f7:02:26:
29:12:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:50 2024 by rpki-client on console-ams.rpki-client.org