Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.cer (raw, json)
Hash identifier: EB/f7nYHg4VKrZ3kzJMJMvT2CXVyzVC+4Y6wWaaGWkQ=
Subject key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E13E4C7CA59EA859BD8B85A35D031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28748
IP: 37.26.200.0/21
IP: 134.97.0.0/16
IP: 185.23.156.0/22
IP: 192.105.75.0/24
IP: 193.22.2.0/24
IP: 193.22.4.0/24
IP: 195.190.142.0/24
IP: 2001:650::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:13:e4:c7:ca:59:ea:85:9b:d8:b8:5a:35:d0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:8b:c2:a7:b7:4f:a2:e9:a2:23:27:e1:53:
61:d2:ae:87:27:70:1b:97:7b:1e:62:7e:98:e3:96:
e2:80:26:63:3a:bc:06:b4:10:aa:37:e1:e1:13:3b:
bc:46:87:ba:a3:23:6b:53:2f:e2:f1:7e:80:a8:40:
1c:49:92:2a:9b:2b:01:eb:76:8c:eb:70:a7:d3:23:
a7:ab:97:13:03:5e:40:5a:80:a7:8b:e1:d5:d5:e6:
8d:20:01:59:da:a6:5c:09:0f:7c:8a:b4:3a:5e:0b:
c3:17:3a:b6:ad:c1:b7:ec:a5:2e:3f:d7:01:2e:50:
e9:f0:30:a9:63:a6:39:46:95:37:36:b9:12:3f:7f:
ce:94:c7:16:f3:31:c6:15:e9:d8:75:fa:94:33:fd:
29:af:51:1b:76:56:0a:9a:c7:a1:71:ea:f0:62:4e:
1b:0f:92:c0:f0:19:85:45:87:02:1f:e9:d1:29:9e:
85:51:13:bf:9c:94:5b:e0:a2:19:ed:53:fd:6a:5f:
65:c6:1d:b4:9f:3e:8e:3b:50:ca:61:1b:f8:ef:c4:
c3:a9:eb:1c:13:72:03:98:77:93:47:1e:0a:58:bf:
21:46:ab:67:3f:99:1a:ca:22:c8:bb:8c:11:fa:36:
a6:af:f7:80:ed:a3:c7:ae:3b:27:f1:c6:c9:f8:da:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.200.0/21
134.97.0.0/16
185.23.156.0/22
192.105.75.0/24
193.22.2.0/24
193.22.4.0/24
195.190.142.0/24
IPv6:
2001:650::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28748
Signature Algorithm: sha256WithRSAEncryption
02:4a:24:23:09:33:3e:29:6b:10:e7:b4:eb:c2:e2:b9:88:82:
57:55:2d:c0:d9:86:76:74:aa:41:43:ba:bb:4d:1e:10:12:a3:
51:70:17:cb:9b:36:c5:d2:15:89:78:b2:db:ec:c8:88:be:59:
6a:d3:5c:ef:2a:4d:3d:85:b3:cc:da:bf:ae:8b:2f:df:7f:64:
2d:9a:31:4b:3e:a4:dd:0d:26:47:8f:8d:18:db:68:2b:f0:41:
cb:d0:fa:82:3d:a1:09:0d:d2:cc:06:73:c7:e6:7d:5b:2f:e2:
c4:ac:6b:cf:a0:99:e1:33:d5:2e:70:87:7e:83:56:4b:47:1e:
61:4f:4f:89:61:21:c6:e6:97:39:42:c6:23:a6:40:26:52:83:
66:68:6e:dd:1b:13:0a:2f:5d:aa:95:16:fd:30:0c:55:37:fb:
fc:e9:0e:1d:f4:08:5a:55:6c:85:9e:4c:bb:d5:35:8a:4c:b3:
86:28:a8:19:b8:e2:3a:10:91:31:fa:c2:44:7a:65:72:1e:a7:
26:78:ba:5e:4b:d1:c3:9d:61:90:35:3e:82:84:43:52:13:26:
cf:81:d8:08:c7:cc:65:c2:59:0d:6e:ed:65:69:3a:1d:a9:00:
e6:49:d3:b2:97:0b:b2:3b:0b:39:d6:e0:cf:47:56:12:86:22:
9f:60:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:35:10 2024 by rpki-client on console-ams.rpki-client.org