Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer (raw, json)
Hash identifier: 0DfHK6m+RMMdoi6n51OlbrH85uAZTS/Geb7/kG0Go60=
Subject key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99D5AB2509CACDEA71BFF3BA7D281C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204180
IP: 185.111.248.0/22
IP: 2a06:6080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:d5:ab:25:09:ca:cd:ea:71:bf:f3:ba:7d:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:48:3d:95:82:bc:82:4d:4e:44:04:01:dd:
6a:b8:3c:c8:59:46:b6:66:d7:bf:7b:b8:f8:18:49:
78:23:95:73:81:9e:55:17:11:ab:b9:94:46:f8:1b:
47:ba:ce:66:b1:c8:db:66:6f:75:68:01:a4:75:ab:
ad:1f:16:ff:20:dd:21:3c:75:8a:3e:b9:2e:b4:e9:
7d:71:c8:fb:83:ff:2c:51:a0:9e:81:58:a7:67:21:
18:1c:05:33:7f:96:ee:e4:fc:b4:e7:1d:d9:83:d1:
d2:c9:5f:1e:62:d9:11:13:79:81:f2:20:75:95:d9:
e7:cc:14:17:46:7d:61:34:02:f7:14:79:f8:13:91:
a7:70:9d:08:f9:1e:10:f1:56:7b:52:29:3a:19:60:
92:c4:91:e0:fe:9f:13:8f:e0:18:5f:3b:07:81:1b:
93:0c:c7:52:67:8d:57:68:e7:5b:34:4b:8a:eb:55:
98:8e:09:10:ae:80:3e:ca:d4:7e:fc:ef:4e:85:6e:
4b:fe:a5:92:f4:a4:9c:d8:45:14:ef:0a:fc:bf:1f:
cd:a2:48:35:81:e7:f6:a4:fb:8d:ab:24:c4:69:7a:
43:12:da:f3:a0:66:3c:d7:cd:b3:9f:70:4c:26:f8:
ce:9a:a6:fc:fd:fc:b7:0b:6b:4f:4b:21:35:f1:bb:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.248.0/22
IPv6:
2a06:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204180
Signature Algorithm: sha256WithRSAEncryption
09:99:ca:21:f2:c9:95:04:b1:3d:44:8d:e2:f2:0d:ce:ec:72:
d6:2e:e5:ba:5e:31:59:2c:09:a9:e2:39:6a:0a:fc:7e:f6:1b:
1a:d1:e4:00:8f:df:7f:b5:3c:4b:3f:41:cf:1d:95:37:9f:e1:
78:a4:cb:94:74:46:e1:4d:ba:4b:92:5d:62:70:9b:33:0c:bc:
a3:58:9b:bb:1c:31:7a:a7:62:7b:7f:a4:48:53:57:5c:17:ea:
49:79:ed:fb:93:4c:fb:84:7b:a3:25:2b:46:38:44:99:50:56:
62:4a:ff:b9:a6:2f:59:df:54:02:c2:d0:93:21:3d:85:98:8b:
1a:0c:fb:ad:85:03:4f:2b:2d:96:84:47:ae:dd:13:76:e3:45:
fb:e3:ba:96:a1:44:9e:02:c8:60:d7:ea:51:87:2e:bc:81:bb:
2e:6b:8c:1f:85:11:99:fe:aa:f2:a3:e6:0b:7f:6e:6f:d0:22:
ab:92:35:71:08:6d:9e:63:7a:67:3d:d6:13:15:a1:14:1d:1b:
80:e0:e4:4c:71:bd:7e:59:cd:a7:12:99:e8:39:58:c3:f5:12:
07:8a:76:75:40:f3:0e:14:1d:50:80:18:3f:fd:b6:5a:4f:e3:
e5:fe:a0:0e:3e:24:74:37:3f:90:19:79:ae:b2:47:2b:0f:9b:
a8:7e:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:55:51 2024 by rpki-client on console-fra.rpki-client.org