Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer (raw, json)
Hash identifier: tT4tmPZNb8hOoeyWlKrUdZXKIaChMs5Gh2vq0yxAbFM=
Subject key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190738C43E1022A65965DF4363EBEE89A22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jul 2024 13:04:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199700
IP: 193.24.112.0/24
IP: 2a13:8d80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:8c:43:e1:02:2a:65:96:5d:f4:36:3e:be:e8:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 13:04:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:bb:04:bd:38:1f:cf:7b:5c:08:5f:3d:53:
e4:a2:1c:88:cf:78:17:44:23:18:cb:26:67:05:b5:
3b:29:45:62:23:79:6b:11:0d:51:fb:eb:c8:49:3f:
eb:b5:89:5c:3c:47:48:19:14:c9:d8:9c:68:96:aa:
13:01:eb:ff:23:cf:df:51:3c:c1:67:20:b6:ad:81:
61:c8:18:2e:30:1c:c2:c8:cf:8b:45:2b:99:37:e7:
61:00:13:45:45:19:3c:f2:6c:e5:5e:38:9d:a6:e8:
ac:eb:34:b5:d3:04:96:2e:5d:a1:f9:af:57:28:91:
c1:09:22:35:17:07:29:3a:d6:0b:b4:82:a5:24:cc:
f2:a9:9a:73:6d:88:82:a0:e9:fa:0c:c0:86:ac:4f:
3b:4e:69:f6:3a:f0:20:e3:5b:a7:75:38:27:b7:d3:
52:f6:9a:a7:b3:17:9d:5a:5c:53:3a:c1:88:66:8e:
12:ff:ee:e4:66:30:cc:bd:d5:82:46:54:6e:43:09:
aa:8e:21:6e:5d:7b:5a:e9:6b:16:1c:8f:0a:e4:13:
37:c1:15:ba:b3:03:49:ec:e3:8b:a2:2f:5a:9b:5b:
b9:ba:d4:c8:69:c8:7a:2f:39:01:1c:b6:ed:2c:5b:
a7:cf:2d:11:d7:dc:53:58:64:55:1e:e4:59:17:39:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.112.0/24
IPv6:
2a13:8d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199700
Signature Algorithm: sha256WithRSAEncryption
32:77:70:80:c4:72:b8:e1:d1:67:5e:e1:fd:2e:2c:a4:d2:16:
1c:ad:a6:bc:fc:91:0d:d9:6c:48:6d:c5:a4:18:63:21:12:8e:
b8:18:78:30:84:cd:50:99:89:81:76:0d:b9:0a:f2:ad:b0:b7:
9b:c5:13:93:c5:87:21:65:10:5c:ca:08:30:d4:12:ae:cc:eb:
c6:bf:a2:3d:b5:45:39:1a:fa:91:34:f4:14:99:9b:d5:35:fb:
6c:6d:da:dd:2b:08:d4:1a:50:d4:13:f1:f4:10:09:9f:86:66:
87:9f:13:e6:fc:5c:05:3d:73:da:d1:8f:6d:2f:9e:40:3b:31:
62:f4:a6:c4:cf:07:74:a9:6d:6d:25:5a:f4:48:65:1d:27:4a:
0b:74:29:cd:92:ab:4a:3c:48:2f:58:c1:82:01:94:df:66:6b:
e8:3c:df:77:fd:bd:28:60:d1:c5:e8:44:18:12:97:55:63:3d:
77:d1:d8:a1:75:fd:cf:d5:27:d4:d8:3d:e4:90:fb:0a:84:90:
a3:ee:17:3e:38:c5:a2:95:93:bf:df:9c:c4:4b:ae:2f:2d:22:
ba:58:9b:67:7b:e3:16:b1:ed:08:2b:d6:74:db:95:47:8b:f6:
20:fa:b8:b0:ff:83:b8:5c:02:46:62:73:f9:d9:db:93:3a:98:
11:38:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:45:27 2024 by rpki-client on console-fra.rpki-client.org