Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
File: lUoq7ghhdLAScvrnea1DHrCSrrc.cer (raw, json)
Hash identifier: pyUeSKHYHKP7YXG6bletDd003OG8Fhd0j1g1QwJ5cfI=
Subject key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE2B19FEA1C686C50A811437F82894
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44922
AS: 203555
IP: 37.247.112.0/21
IP: 93.89.16.0/20
IP: 185.7.80.0/22
IP: 2a03:400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2b:19:fe:a1:c6:86:c5:0a:81:14:37:f8:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954a2aee086174b01272fae779ad431eb092aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:d9:9a:45:4e:16:6e:32:0e:56:ec:57:ee:
b0:60:cb:33:ab:4e:2f:88:a7:4a:0b:b3:b2:7b:45:
99:3b:f5:9a:27:ed:86:30:83:3f:8b:b2:31:bf:90:
1f:65:57:aa:8f:00:26:33:ab:61:d7:c9:13:d5:b2:
15:4b:35:d2:b7:00:87:25:78:55:dc:99:6d:9b:9e:
2b:3c:e4:f1:31:c2:f4:a5:86:5c:26:f5:a2:49:01:
4f:3f:40:a8:9a:5b:94:d2:d9:cf:ba:35:0e:ee:b3:
d4:7c:1b:5a:37:2e:bf:3a:ae:3c:5c:6b:9a:76:22:
03:70:5b:92:13:0f:eb:6a:64:74:65:65:2e:47:28:
43:61:0d:34:74:d3:03:43:d3:31:82:b2:3d:cf:a5:
09:18:46:a1:9c:ff:80:f8:b6:09:fd:77:25:40:30:
2d:f3:55:96:e6:b7:23:01:99:3a:f9:8a:f9:cf:d5:
43:eb:11:ec:b5:fc:86:89:28:37:76:e1:e5:22:c8:
6d:ca:5e:a8:cd:95:3f:b8:30:1f:18:37:48:b5:32:
e7:e9:90:61:1e:25:1f:37:3d:6a:ee:82:60:64:24:
3e:87:dd:90:47:fe:dd:ad:d1:50:d8:5f:7a:28:bd:
b8:f7:c0:4e:e1:9a:d6:4c:49:15:ee:86:60:d9:ca:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.112.0/21
93.89.16.0/20
185.7.80.0/22
IPv6:
2a03:400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44922
203555
Signature Algorithm: sha256WithRSAEncryption
36:c5:f7:8d:89:61:23:09:2b:05:7b:ce:ff:d3:70:63:35:b6:
84:40:55:f9:9c:5a:2d:74:78:8e:78:d7:18:41:48:57:bb:7d:
ed:89:c9:83:f9:89:af:33:56:ff:56:37:c1:32:72:18:71:f6:
0d:4e:c5:89:d2:c2:23:0f:a1:ed:64:3b:f1:be:4d:b0:65:22:
31:c2:f1:07:9e:6d:df:90:ee:f2:44:d5:da:97:cc:e2:29:16:
03:c4:8f:7c:84:f6:f1:3a:e6:7d:6b:24:c5:4c:b5:f6:53:5d:
5d:5b:ec:da:27:4f:f3:bd:e8:dd:00:7e:5e:78:3f:73:cf:2f:
c9:e1:bd:0f:a0:b8:a2:20:c6:c7:c8:c0:50:23:90:29:e2:98:
de:a8:0c:83:93:a3:2c:59:8d:76:26:a7:17:1f:89:d1:81:a0:
ea:ea:9e:6a:2b:10:9f:43:23:de:8b:86:ce:3b:56:76:30:97:
2f:25:95:1f:1a:f6:b6:86:18:ad:4f:f1:dd:2c:50:66:9c:7e:
18:e5:71:b6:d0:ae:b2:2a:4f:48:fb:e7:bc:d4:14:f3:e4:32:
d9:af:a5:3d:06:6a:9e:ee:b1:3d:a2:70:d0:fe:5d:3c:01:59:
d4:35:44:e1:78:2e:97:6b:7f:0b:f1:b5:2a:5f:01:32:0a:fa:
f8:c3:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:15:11 2024 by rpki-client on console-fra.rpki-client.org