Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
File: nldpljiOlLjHqyDv-yO9Eb7LQQg.cer (raw, json)
Hash identifier: Ye1IBgBXMMuB1Yijm1+8Quqx/CJIi8AzrldqNZArGaY=
Subject key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FCE00A7D7FF48DA256CAC987F1C388945
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 31 May 2024 09:35:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24676
AS: 31103
IP: 62.141.48.0/20
IP: 84.19.160.0/19
IP: 87.118.64.0/18
IP: 95.169.160.0/19
IP: 217.114.208.0/20
IP: 2001:1b60::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:00:a7:d7:ff:48:da:25:6c:ac:98:7f:1c:38:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 31 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:18:80:79:ef:f1:75:11:20:8e:cb:7a:8a:
80:df:3a:a7:ed:2d:1b:79:47:de:87:cd:b0:3f:81:
cd:b4:02:a7:b5:13:02:62:9e:5c:c2:98:37:31:62:
97:32:4e:c5:15:87:16:3e:a2:6e:4a:f9:08:68:a1:
a5:7e:fd:bf:6b:f3:94:dc:c0:04:7d:93:13:de:cd:
de:f0:60:11:e0:2f:ec:7b:ca:80:38:3d:8a:b9:04:
e8:59:be:42:6e:7a:3d:de:18:c2:0e:cd:51:f2:e8:
35:63:54:a4:a0:3f:1c:d9:98:3a:30:2d:6d:ab:92:
41:f5:46:94:bb:f8:88:71:3a:0e:77:2c:8e:43:7f:
26:2f:6b:1e:00:07:5c:c4:e0:f2:5d:1f:08:99:ce:
6a:8a:4c:fc:6b:b8:e4:e1:59:09:65:85:f7:d5:8c:
1c:51:97:67:12:94:a2:b1:eb:35:77:ee:b7:c8:ab:
4f:5d:25:ca:35:c6:8f:49:aa:d2:1b:cd:7b:88:d9:
c1:cf:e2:96:b2:68:87:7f:bf:d8:d6:51:42:f5:74:
5e:e3:79:05:15:40:9f:80:65:38:67:2b:ef:c7:ca:
b5:1b:4f:11:14:de:69:e5:b7:01:29:f8:26:31:51:
c1:6f:bd:d0:c6:1c:07:e6:96:2f:14:08:5c:3a:09:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.48.0/20
84.19.160.0/19
87.118.64.0/18
95.169.160.0/19
217.114.208.0/20
IPv6:
2001:1b60::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24676
31103
Signature Algorithm: sha256WithRSAEncryption
2f:01:d1:27:05:08:28:9e:48:bb:a9:cd:66:bf:ca:3d:56:33:
64:9b:11:37:3d:b2:3e:f9:89:9b:d8:a5:2a:e6:50:7a:8c:8d:
9b:20:bd:07:68:cc:b1:1f:ae:82:89:9e:46:66:22:09:00:7a:
96:97:c7:16:60:ea:d6:95:01:09:36:37:70:4e:4c:a7:3c:5c:
6c:ee:1b:cb:a6:a7:4c:47:9a:3f:e9:26:5c:38:9c:04:79:32:
29:d0:61:10:91:d4:81:9e:8c:23:2b:4b:37:eb:d8:50:0f:d0:
60:d3:00:d9:bc:a4:5b:5f:67:12:34:46:68:7d:36:1a:45:32:
10:61:eb:05:d2:9d:bc:6b:ce:c6:63:e1:3d:7e:1c:a5:af:7c:
99:37:9a:a1:17:0e:60:b6:c4:2a:48:1e:0a:90:00:c7:47:0f:
99:f0:f5:a5:27:9c:20:cd:1c:0e:f3:ce:c3:1f:64:d0:cf:e2:
f8:18:e9:12:5d:23:75:22:46:30:0d:09:28:05:71:aa:0a:41:
5f:12:18:30:71:3d:f5:92:c7:b1:6f:c6:07:6f:df:3f:35:a1:
f5:82:22:7d:9c:d0:00:77:b9:5a:08:78:ac:e7:57:44:e1:58:
4a:9b:1d:f1:d6:26:81:93:e2:6f:de:7d:1c:97:84:5d:2e:a0:
a9:7f:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:22:12 2024 by rpki-client on console-ams.rpki-client.org