Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
File: LBLwoIDwIfK6JbwMbqfga2eq0F4.cer (raw, json)
Hash identifier: yj7xGg49AH39HVj6Xpova1nZoUtiseJZ8qX6o98+VXA=
Subject key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194CB6064675625C5E90D7230B94D5E5351
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 03 Feb 2025 10:34:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213279
IP: 2001:678:d44::/48
IP: 2a14:b400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:60:64:67:56:25:c5:e9:0d:72:30:b9:4d:5e:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 3 10:34:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:db:cb:67:fe:dc:34:58:70:d6:92:fc:3f:
47:52:e1:54:46:dd:6b:02:5c:b2:48:e0:e1:3e:65:
73:69:c8:35:a0:56:5b:72:83:53:8b:14:1d:12:71:
ee:23:ff:fa:42:08:f1:05:2c:9c:b2:05:c7:05:20:
5d:50:1c:52:30:f4:fe:c7:1d:08:95:88:58:e9:86:
02:ea:58:26:a0:29:02:37:95:37:d8:fe:bd:5d:58:
2c:39:dc:2c:af:ad:7c:89:88:1f:8f:79:d8:5e:00:
e8:67:d3:58:53:84:4b:5d:55:e5:90:32:bf:1c:ca:
7a:0d:51:df:8e:f0:ca:8e:f7:c6:f7:5e:98:a2:57:
60:b2:8d:c2:89:a2:62:d6:4d:7c:74:3f:40:b8:2a:
33:19:68:75:ac:44:08:2a:62:87:ed:4c:36:30:2a:
b1:3a:dd:0a:11:61:00:9a:dd:fc:59:09:35:93:b8:
18:06:25:9d:39:7b:07:fd:26:67:6d:a8:fc:52:ca:
0d:2f:f8:fe:73:2b:9a:89:09:42:f7:32:4d:1b:11:
87:95:19:7f:06:3c:c6:34:8d:e9:6f:09:dc:6e:7d:
e5:e8:99:46:24:85:b2:fa:78:f4:33:a2:76:c8:f7:
04:9c:4d:c8:8d:39:4d:f0:f2:7e:bb:ea:fc:c0:c5:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44::/48
2a14:b400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213279
Signature Algorithm: sha256WithRSAEncryption
a0:0f:ce:48:c5:2c:60:33:6d:87:1a:0d:c6:5e:7d:a4:f3:05:
17:c8:15:49:54:19:86:12:88:b0:2c:48:57:9a:72:50:1d:e5:
4c:b6:18:75:ec:81:34:8c:7d:24:3e:92:b6:d6:a6:9d:21:db:
6a:d1:76:dc:cc:eb:b4:a9:57:4c:9e:35:e8:79:8e:33:58:b8:
82:ce:db:b8:1a:9d:bd:f8:15:56:24:8f:48:f1:f6:a2:34:61:
d7:a8:e3:55:ee:9a:cb:e8:ec:89:96:d9:48:da:94:b0:ef:8e:
25:e8:36:09:31:9e:f3:c0:6e:b3:99:23:d0:1d:5a:67:2c:07:
0a:f0:4c:30:f3:e7:f5:b0:69:a2:68:6c:57:54:4e:35:c7:ed:
dc:66:b8:07:3f:99:b7:2f:da:e2:11:b1:9d:bb:d2:c1:43:dc:
f5:be:77:80:22:86:84:1d:bb:72:52:ab:53:51:78:72:1e:87:
14:31:e7:1c:aa:d4:d4:9c:44:a7:0b:cb:18:b4:a7:9f:2e:45:
c0:b5:a0:71:b2:2f:9c:9d:ec:3c:be:4c:2a:57:c8:a0:57:e7:
43:97:70:59:1a:bb:f1:99:3d:55:63:67:ba:f9:9a:1a:d1:d9:
d7:63:7f:d2:81:40:37:d7:3c:8a:79:bc:b9:ba:de:ba:1e:f3:
85:75:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:33:06 2025 by rpki-client