Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.cer (raw, json)
Hash identifier: h0QGsXhwW/XmpN3ImEUuw1PC7ZKwUqhLKC0OM66rglM=
Subject key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AF390D182DF79B13B1DF7BC3C5C58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.225.180.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f3:90:d1:82:df:79:b1:3b:1d:f7:bc:3c:5c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:ef:53:66:01:20:c7:06:82:c6:d3:01:dd:
6a:93:94:1a:b9:c4:fe:14:81:fa:84:f8:4b:27:2a:
2e:30:60:87:0b:55:8e:a5:e3:47:9c:9a:11:11:c7:
63:7b:09:03:ca:c4:b2:60:06:45:d0:1c:29:ea:f3:
11:df:81:8d:e8:26:3c:0e:f7:0c:cf:00:73:df:a0:
d3:c7:52:93:f8:4f:dd:c5:25:bc:b7:c7:05:35:27:
60:d1:ef:45:a6:89:6b:de:bb:85:34:02:36:86:c9:
2d:e2:d1:ab:fc:06:e9:93:7e:6b:bc:86:67:c8:a4:
9b:07:d4:05:22:1f:b6:e2:0f:66:ac:ff:f8:70:8d:
c8:fe:87:0f:c7:dc:51:c1:d3:ce:18:2d:43:3f:7b:
75:d9:78:92:66:09:a5:bb:83:b8:67:e5:e9:22:ef:
3d:97:13:89:f8:93:e8:f5:c8:a7:4d:50:08:d8:0e:
95:33:a3:a7:bf:bb:32:6a:ce:9e:73:61:5a:86:b4:
2f:22:4f:24:c5:04:e7:f1:78:49:31:d8:55:ba:a2:
c7:e1:dc:0c:20:1b:e2:4f:02:1e:de:5a:b2:d1:47:
d7:8c:01:6b:04:43:db:bb:28:46:e7:4e:c1:c9:b3:
32:76:ff:86:d4:7a:a5:2e:47:ad:f2:5b:b5:28:4e:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
33:28:e8:ed:ce:72:bc:68:0e:bd:c4:60:8d:ff:62:ee:6c:25:
b4:3b:7b:a6:4e:4f:b9:31:85:63:0b:e7:a2:fd:d9:fc:77:1a:
7c:a0:ee:b3:4f:28:cf:cd:4b:39:dc:d0:73:15:e6:4d:b3:10:
74:0e:df:85:79:7d:fc:ed:24:74:5e:1a:cd:b6:ee:c4:97:f8:
22:cb:58:5b:06:87:59:64:32:e7:19:3a:cd:5d:b0:76:ee:09:
1d:01:5a:86:89:fe:4e:25:3c:78:25:bc:a5:3b:58:16:7f:96:
28:1a:cf:ba:a6:94:38:21:46:e8:7f:c5:7e:13:b2:11:bb:b1:
13:19:b4:e0:a4:3e:a2:ca:b8:67:bc:a5:28:82:52:83:c9:17:
6d:69:b5:7f:fa:56:90:af:4a:a0:e3:a8:66:82:5b:27:4a:35:
dc:41:54:f3:1f:ff:1c:ce:61:76:4b:8f:b0:60:69:bd:25:bc:
9e:22:4e:83:49:2c:29:4e:17:6b:88:d9:14:3c:cb:4c:54:ee:
1c:8b:c4:ba:cb:61:15:b5:0d:e0:ba:90:f7:15:91:99:7e:f8:
f7:db:82:f7:91:54:1c:c2:98:1d:a9:88:c1:b7:df:00:66:10:
75:34:31:e4:20:b0:74:83:ec:f1:a7:63:5e:ad:82:2c:b1:90:
79:9c:ec:53
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSvOQ0YLfebE7Hfe8PFxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjM1MWM0NzNhMTZiYTM4ZmFiNGQ1MTcwNTkyMjVlMGYxMzNjOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+3vU2YBIMcGgsbTAd1qk5QaucT+
FIH6hPhLJyouMGCHC1WOpeNHnJoREcdjewkDysSyYAZF0Bwp6vMR34GN6CY8DvcM
zwBz36DTx1KT+E/dxSW8t8cFNSdg0e9Fpolr3ruFNAI2hskt4tGr/Abpk35rvIZn
yKSbB9QFIh+24g9mrP/4cI3I/ocPx9xRwdPOGC1DP3t12XiSZgmlu4O4Z+XpIu89
lxOJ+JPo9cinTVAI2A6VM6Onv7syas6ec2FahrQvIk8kxQTn8XhJMdhVuqLH4dwM
IBviTwIe3lqy0UfXjAFrBEPbuyhG507BybMydv+G1HqlLket8lu1KE6WMwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJY1HEc6Fro4+rTVFwWSJeDxM8i/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2E1Mzdj
MC1mZDRiLTQzYjYtODg5MS1kNTczNzNiZjUxNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvYTUzN2Mw
LWZkNGItNDNiNi04ODkxLWQ1NzM3M2JmNTE2Mi8xL2xqVWNSem9XdWpqNnROVVhC
WklsNFBFenlMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCW+G0MA0GCSqGSIb3DQEBCwUAA4IBAQAzKOjt
znK8aA69xGCN/2LubCW0O3umTk+5MYVjC+ei/dn8dxp8oO6zTyjPzUs53NBzFeZN
sxB0Dt+FeX387SR0XhrNtu7El/giy1hbBodZZDLnGTrNXbB27gkdAVqGif5OJTx4
JbylO1gWf5YoGs+6ppQ4IUbof8V+E7IRu7ETGbTgpD6iyrhnvKUoglKDyRdtabV/
+laQr0qg46hmglsnSjXcQVTzH/8czmF2S4+wYGm9JbyeIk6DSSwpThdriNkUPMtM
VO4ci8S6y2EVtQ3gupD3FZGZfvj324L3kVQcwpgdqYjBt98AZhB1NDHkILB0g+zx
p2NerYIssZB5nOxT
-----END CERTIFICATE-----
Generated at Fri May 3 10:56:05 2024 by rpki-client on console-fra.rpki-client.org