Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
File: lSCTFQ9KRhAazX6jomu0OFExI7U.cer (raw, json)
Hash identifier: xc5HJ5ABv7ICxneFo1PEY1Vx3b+YVggrS8AA+k8RITk=
Subject key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A93E3D3CAE03E79ECB9AC4F640CD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.113.208.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:93:e3:d3:ca:e0:3e:79:ec:b9:ac:4f:64:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=952093150f4a46101acd7ea3a26bb438513123b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:b9:70:13:7f:a7:20:5c:af:52:5e:b8:7d:
94:79:35:b8:02:eb:86:25:37:bb:59:0f:12:bf:7f:
99:cf:eb:14:71:a7:5d:45:d4:c7:4f:4e:96:ce:4f:
3f:66:b3:68:5e:15:20:52:38:45:1c:f3:48:69:7d:
a8:0c:d7:4a:0a:cc:c2:16:5a:29:08:3f:33:64:4e:
f1:10:a9:26:cf:94:d0:a0:3b:af:9d:72:30:5e:c5:
28:93:a2:f1:b0:c3:72:f6:a4:9f:e2:8d:bd:f3:3a:
66:70:76:b0:94:da:1f:b4:bf:6e:69:5b:23:2a:9a:
42:78:3a:9b:96:45:8c:15:3d:e1:90:12:aa:02:0b:
75:e5:48:0c:bb:f9:5a:38:15:e7:f4:f3:62:cf:38:
ad:2a:32:de:cb:4f:44:70:d7:86:cb:31:8b:6a:18:
94:28:d8:91:b9:25:8c:1e:8d:8e:1a:e3:0e:88:6b:
a2:3c:c3:76:5b:a6:40:01:0c:7f:1d:b4:f7:ce:30:
33:05:a1:b3:74:7c:ba:d5:ea:1a:2d:fd:52:d6:ff:
b1:72:04:29:75:29:0a:1f:e5:ac:5b:a8:4f:74:87:
44:0c:bc:90:78:4c:de:c9:c2:c3:60:59:91:7f:01:
a3:68:01:4c:7b:19:55:a1:3d:76:2d:47:2a:3b:d4:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.208.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ef:09:7b:a0:d6:cf:0b:04:a3:50:32:6d:07:3d:97:3d:8e:
1f:47:48:28:5f:82:40:8c:03:de:21:f0:e0:96:f0:17:34:a1:
b7:4b:a3:a7:6d:b0:7c:f1:c4:12:a5:8d:5c:4e:6b:00:d5:51:
15:6e:e4:32:45:55:27:71:08:24:60:04:f7:5e:fb:0d:41:73:
cc:e8:ad:05:1d:d6:60:c2:fc:93:17:b6:b1:a7:dd:50:84:89:
13:64:99:dd:bc:2a:09:59:02:0f:20:37:03:b3:4a:f0:93:03:
8d:dd:8e:a9:4d:ec:ba:df:4f:6f:59:15:c6:41:82:96:b1:8a:
d8:66:01:9e:c0:69:50:da:af:fe:42:c5:da:6b:7c:a6:ea:9f:
a9:29:3f:c9:e1:ff:65:80:49:23:7b:3a:42:cf:cd:f0:b6:d3:
78:21:3f:ec:67:d5:6a:04:9d:dc:94:07:61:2d:dd:a0:a5:81:
dc:a9:30:54:d6:10:ad:c0:6f:c4:2b:f5:7c:b8:7d:0e:e8:94:
ea:58:fd:e2:bf:f0:ba:28:51:46:2b:3f:85:15:f1:af:ad:f0:
e3:18:50:88:66:0f:07:6f:d5:cf:09:9e:3c:8d:28:9b:d2:30:
b2:bb:cf:31:60:00:a7:90:66:22:f2:5f:2c:25:25:e8:1a:df:
b1:b1:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:40:00 2024 by rpki-client on console-fra.rpki-client.org