Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
File: lIRnQROSYziNmE2x6X4DFmnGSG4.cer (raw, json)
Hash identifier: qaQvIOfheOTDoMlVRdLLIHqUUAxty+Rpe1B0zkHWV0E=
Subject key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F3D5DC5360A232C380B2BEB45B66FD774
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 May 2024 07:31:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59643
IP: 188.95.89.0/24
IP: 195.182.38.0/24
IP: 195.190.130.0/24
IP: 195.190.139.0/24
IP: 2a10:c1c0::/29
IP: 2a12:b480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:5d:c5:36:0a:23:2c:38:0b:2b:eb:45:b6:6f:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 07:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94846741139263388d984db1e97e031669c6486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:f0:c1:36:e5:f6:bb:da:e0:69:f0:15:09:
d1:0d:e9:80:ef:e9:12:fa:8f:30:9e:e5:d2:6f:b8:
57:3f:f4:f7:99:40:d2:c3:6e:75:0c:31:62:4d:2a:
cb:71:97:86:1b:f1:e1:1e:0b:8e:e6:3f:19:66:41:
c1:1f:c3:c3:46:26:92:de:f3:5d:ca:e9:41:8e:e6:
eb:a7:1b:8f:ac:f4:e2:6a:23:55:7a:d6:67:cd:41:
94:f3:5c:3d:1e:ab:44:75:e8:49:64:f7:0f:1d:da:
f5:37:ef:34:3f:06:26:2d:d7:20:d0:a7:18:45:88:
94:d4:8b:9e:fc:96:86:3f:af:d5:8d:a1:2d:bc:02:
a5:fe:da:c0:24:23:18:97:7c:21:06:29:d4:d2:47:
c7:10:0b:0e:4f:38:b8:c8:bc:7f:3d:94:4a:0e:21:
08:6f:71:f4:96:e6:d8:6c:80:89:da:05:42:89:0b:
77:e3:13:3a:7a:77:a5:87:c8:a4:ab:4e:c2:9a:85:
79:5f:57:bc:28:4d:e8:a2:56:28:af:a0:a1:30:b1:
a9:1d:81:74:29:f4:3f:fd:a6:4e:8a:b6:c0:74:e3:
b6:ea:55:81:c6:55:c3:7c:04:51:54:b1:40:c8:b1:
af:25:c7:32:fd:5f:b7:d6:90:e6:dc:8c:33:99:f2:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.89.0/24
195.182.38.0/24
195.190.130.0/24
195.190.139.0/24
IPv6:
2a10:c1c0::/29
2a12:b480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59643
Signature Algorithm: sha256WithRSAEncryption
36:ce:52:3a:49:c4:45:26:4d:4a:58:94:96:54:79:3a:0a:6b:
9c:be:59:75:2b:fc:64:0a:02:28:4f:56:42:c2:6f:18:36:16:
72:44:8d:ef:fe:b1:94:2a:8d:06:b5:72:32:b5:0c:a4:a2:ed:
ee:89:5a:25:d3:87:6e:46:11:2b:95:8c:8e:35:10:a1:31:da:
2f:7c:ed:ff:86:51:95:17:68:d9:40:e6:2b:32:16:1e:cb:c8:
48:be:54:13:3d:a7:1b:89:22:cb:5e:e5:60:44:0a:ac:99:ac:
83:9f:a0:5c:24:95:25:48:96:3b:39:06:8f:72:9e:b9:af:d0:
a7:39:9f:2f:37:30:51:ba:94:2d:3f:09:36:70:6f:16:51:32:
f0:8a:a6:69:01:f7:aa:f8:6c:46:95:26:65:3b:5f:da:85:59:
0f:5e:4c:1d:a2:ae:47:94:c0:7d:8e:6b:87:de:98:8f:30:31:
55:92:5f:65:66:8a:1d:05:29:2a:d3:ca:34:87:c1:15:3b:e6:
9f:65:05:16:5d:a3:d3:00:42:c3:3d:84:ed:26:8e:c9:bd:d6:
f3:7d:97:bd:f6:d7:f7:c9:77:c2:cd:84:1f:d6:2d:ad:6a:5a:
fd:ec:78:a7:2d:cd:52:7e:5c:aa:d6:59:ea:97:4b:73:68:57:
f9:17:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:55:45 2024 by rpki-client on console-fra.rpki-client.org