Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
File: llRz1oVy6iI4vdh1r6cloEBd5IM.cer (raw, json)
Hash identifier: 0ybubWbm2GuIYHQXEQ3tgj1CQATrS2pVTtHY0iV91Wk=
Subject key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DE54EF904DB3972A52D7EEDF59B2927FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Feb 2024 12:06:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.80.124.0/22
IP: 2a05:7c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:4e:f9:04:db:39:72:a5:2d:7e:ed:f5:9b:29:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 12:06:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=965473d68572ea2238bdd875afa725a0405de483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:87:3e:47:d6:00:5f:08:27:a6:97:f4:8e:
cc:47:6d:42:dc:4a:c3:77:7f:dd:6a:11:b0:17:28:
d5:15:67:60:ef:02:6a:1f:d7:fe:4b:c2:7b:2b:1d:
66:2f:12:79:28:67:24:e6:20:03:1e:1e:1e:c8:63:
06:cb:6d:5d:88:f1:98:b1:19:0c:f8:51:18:a0:94:
e8:bb:81:a4:ff:88:59:b1:24:01:ab:73:82:30:db:
0e:c6:5e:d5:aa:17:13:e8:3f:49:38:07:d6:cc:44:
cc:eb:6f:1e:55:eb:85:e5:65:b0:a1:91:ad:79:2e:
51:7f:e9:00:0c:be:bf:89:23:07:2e:8b:76:01:b8:
39:c3:bb:95:22:bf:4d:1a:1d:4f:b2:6c:d9:cd:40:
41:da:74:95:53:15:35:b8:45:38:3f:61:a4:fc:f8:
51:33:54:c0:59:3b:f8:cb:49:f4:cb:96:08:97:fc:
da:8c:40:e4:19:66:71:40:1d:60:27:03:87:ea:b2:
f9:5c:45:0b:9e:ab:c2:e9:ce:21:56:c7:9c:50:1a:
40:58:16:87:18:eb:43:bd:30:c1:4e:63:52:84:85:
db:7e:c8:3d:f9:49:b2:cf:ee:3f:a2:0e:91:31:33:
bd:ea:f8:68:93:61:36:a4:23:b5:b5:e5:e6:3f:e9:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.124.0/22
IPv6:
2a05:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:fd:e8:97:5c:36:0f:ba:83:cf:60:95:ae:73:e1:05:e3:06:
34:69:cc:ab:ce:eb:0e:a1:45:3b:49:19:28:e3:f7:a2:86:35:
ac:11:95:44:5c:e5:ad:dd:e4:a4:bc:e5:57:97:ad:af:34:f2:
31:f5:8c:e3:93:99:5a:ae:a2:31:0a:ec:87:c7:f2:0a:8a:e5:
d3:9b:f4:be:fd:5b:02:a6:cd:29:2e:2a:60:bb:93:4a:38:a7:
d3:26:29:17:8a:e9:8c:0a:2a:3f:89:f8:97:9f:e2:d7:1d:39:
c0:7a:49:b2:0d:d5:21:66:96:95:86:c3:88:33:64:5c:33:5b:
16:b7:f9:5b:2b:2d:ae:dc:66:4d:7f:15:6f:38:1c:51:70:0f:
a4:7f:69:f0:0d:36:91:8d:0e:46:b6:47:1a:57:5c:25:4f:49:
4d:70:bf:39:27:ac:25:9e:15:67:00:48:ce:3c:c7:a7:ee:10:
65:27:3a:1b:6f:7c:ac:0d:1d:e9:26:72:e3:65:9e:d4:2c:2d:
33:ed:8f:6a:9b:cf:81:6f:6b:03:ad:c9:29:d7:66:d5:24:80:
3e:18:01:52:a3:6f:a8:5a:bf:76:db:fe:6b:d1:bf:ff:f8:98:
de:65:90:85:63:76:88:35:5f:6e:23:21:4b:d7:94:b3:bd:36:
b2:f6:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:56:07 2024 by rpki-client on console-fra.rpki-client.org