Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
File: lN7qVibZ6DJkDx7N9_i7clckCEc.cer (raw, json)
Hash identifier: HfmTY6XgP54Iw7hs0ZZKFfuAxjHNqKhkyXby7dW00GA=
Subject key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79370E00F284B2E8BB52DDF06118631
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8635
AS: 13013 -- 13014
AS: 60410
AS: 203211
AS: 210873
IP: 2a02:9f8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:70:e0:0f:28:4b:2e:8b:b5:2d:df:06:11:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:bc:fa:20:7f:e1:74:12:56:85:30:9e:b6:
7b:f8:b7:87:8b:b9:a1:3d:06:f7:ad:eb:df:63:5b:
fb:3e:23:7f:ea:e5:29:af:8b:9f:8b:f2:d1:f3:74:
1e:20:5f:d2:49:30:fa:54:d6:21:96:79:c5:02:e1:
19:64:c2:f1:67:c8:fc:52:b5:22:5e:94:95:24:b4:
77:3c:00:9a:24:fc:a3:96:72:9b:8d:f6:4e:7b:32:
d1:dc:7e:88:ca:d2:cb:5f:ec:42:23:a7:06:79:d1:
3e:e8:5e:71:e5:33:60:b5:f2:d6:2a:f5:f8:73:33:
7c:9a:79:c3:db:fc:6b:51:48:9f:d6:ad:97:f3:92:
39:da:bd:8d:ef:30:89:e7:b8:56:eb:6e:da:d5:0d:
de:8b:19:9f:28:e3:3a:6e:6f:83:df:b4:a3:4a:bb:
f9:ae:7e:e4:df:7e:c6:9f:dd:78:b6:09:21:a5:16:
ef:35:24:ac:4c:00:c4:7b:00:0e:1e:0f:2d:fc:60:
dc:29:ad:05:bc:16:11:9a:1d:e4:6c:b8:31:02:83:
4e:91:d8:4f:24:69:6e:a8:b4:83:16:d8:80:91:52:
f6:5f:f6:7c:5d:cd:8f:69:bc:f6:3a:a6:5e:42:be:
7e:6c:14:1d:a0:69:09:cd:ae:48:92:c6:8b:71:32:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8635
13013-13014
60410
203211
210873
Signature Algorithm: sha256WithRSAEncryption
23:ae:ae:09:79:f6:fc:c9:40:d5:92:4a:bb:40:f2:c6:7a:d2:
42:65:9c:9f:5e:42:3c:e8:16:72:3b:5d:93:8e:2f:7e:b1:84:
b1:8f:f0:7f:82:a5:96:95:db:70:ce:e3:c7:03:3c:86:98:2f:
12:b0:07:93:d8:ef:32:53:dd:18:cb:60:d7:13:7b:fd:9a:13:
2a:39:7d:db:67:d1:f8:5e:54:33:11:a6:6c:94:80:3f:7f:35:
cc:38:4d:36:a7:20:ce:c6:78:f6:2d:14:7a:63:a0:e0:78:be:
09:c6:60:0b:4f:f5:26:12:8a:14:06:87:fb:4c:2b:9a:24:5d:
e9:e1:37:4c:ad:04:e7:40:b3:32:bd:a1:70:e8:f9:c3:68:77:
54:2e:61:fd:3a:0a:fe:34:87:01:22:65:90:29:52:1f:f6:46:
d8:e3:15:25:1b:b3:7d:c8:f9:d6:17:bf:f9:85:57:72:b3:02:
f2:a3:02:f6:a6:7a:35:ea:f4:42:b6:a5:c3:73:d2:46:18:bd:
68:ef:d7:49:92:b6:5e:f5:a2:ae:21:86:7d:32:df:9b:6c:85:
94:32:6d:72:6d:00:3d:a5:da:8f:cb:e4:7e:06:f5:12:fa:6d:
0c:4e:71:c9:64:52:e5:39:a9:4d:98:55:c4:e9:70:eb:11:0b:
cc:96:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:55:49 2024 by rpki-client on console-fra.rpki-client.org