Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LHbgyPbLch47zyARujqvuioQF9s.cer
File: LHbgyPbLch47zyARujqvuioQF9s.cer (raw, json)
Hash identifier: TQ8v4+FlU80iKnx58qnpHwXxHb912dnFj0hoUdypXmA=
Subject key identifier: 2C:76:E0:C8:F6:CB:72:1E:3B:CF:20:11:BA:3A:AF:BA:2A:10:17:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA909DE589A3EE547FCDB0A81DB7D566E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Apr 2024 12:16:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209200
IP: 2.57.8.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:09:de:58:9a:3e:e5:47:fc:db:0a:81:db:7d:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 12:16:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c76e0c8f6cb721e3bcf2011ba3aafba2a1017db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:db:82:97:21:60:23:2a:42:2b:7c:a0:4f:
04:5d:c8:45:f4:9e:d6:4c:eb:91:ed:61:da:14:07:
50:49:ce:44:33:22:28:7c:e6:aa:c8:a4:93:86:1b:
65:ca:4e:c3:63:75:eb:2a:70:47:13:1b:d5:27:c1:
6e:bc:5a:a3:06:86:c8:4e:56:2f:95:b3:c3:79:0d:
fe:91:1e:e5:41:60:d5:51:eb:2c:9d:5e:b5:a9:4a:
82:02:26:44:d3:c4:d8:f3:ce:85:a8:d7:a2:34:10:
0e:00:d3:ec:61:21:8a:76:62:f3:6a:f4:5f:9e:d0:
4f:ac:90:52:4b:cf:8b:2c:6c:78:37:7e:2d:44:e1:
c7:be:a6:8a:7b:82:f4:f4:33:1c:18:68:99:48:e1:
5b:07:67:48:a9:d8:22:cd:dc:e2:4c:75:41:90:23:
1c:21:63:0d:76:a0:b8:8c:08:1a:70:34:85:fd:45:
42:09:88:7b:3b:ba:f9:5b:bf:72:ff:50:d3:bb:26:
bd:2b:5c:30:41:00:84:6c:e2:d2:8c:ec:22:69:ad:
1b:d1:77:be:53:37:19:78:94:28:4c:86:b0:41:e1:
d1:c7:f9:ee:2e:04:76:e9:7f:be:7c:97:30:c6:ad:
6d:8a:45:3d:63:e7:b1:2e:15:c0:b7:d3:4e:3b:88:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:E0:C8:F6:CB:72:1E:3B:CF:20:11:BA:3A:AF:BA:2A:10:17:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1ad468-e309-4ae6-a1ca-d54c49a46338/1/LHbgyPbLch47zyARujqvuioQF9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.8.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209200
Signature Algorithm: sha256WithRSAEncryption
99:39:6d:a9:0b:89:f7:13:5a:79:f7:2c:14:bc:97:96:e8:fd:
3c:be:9e:f0:5d:2a:72:0e:58:5a:9e:b7:75:d0:43:f3:16:d9:
97:37:22:f7:d5:cf:39:9b:e1:36:bf:99:11:bb:af:1f:1a:3f:
ca:ac:9a:c2:38:e6:1e:a7:ca:52:ed:45:e1:87:88:81:f8:80:
af:15:4c:d7:18:6a:1a:ca:25:34:a1:86:16:97:4f:13:fa:6a:
54:f5:48:59:5f:90:45:f8:3c:c5:e4:31:dd:0e:d4:f2:13:80:
a7:4d:9a:a2:3a:0f:10:b7:5f:87:97:21:07:e7:ea:78:15:3f:
44:05:db:78:bf:60:c3:29:59:07:2b:cf:4f:51:df:23:26:11:
d1:96:12:be:18:6d:fb:26:c3:cb:d5:a4:ce:77:37:01:ef:e3:
22:f9:ae:d5:33:9a:c1:1a:f3:94:63:41:05:ef:4d:81:cf:3a:
28:1d:37:4c:a2:bb:d7:b9:53:8e:82:c9:7c:a5:3f:c8:10:3d:
b8:4a:b8:1c:27:8b:22:dd:d9:b0:bd:f7:0c:a1:c7:4f:a1:ee:
1d:bf:dc:6c:ee:cd:1f:7b:78:d8:20:59:4b:f7:9d:e7:ee:4b:
a3:6d:4a:46:ea:b7:e3:b4:69:31:56:3d:61:47:1f:51:e9:bd:
de:ac:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:20 2024 by rpki-client on console-ams.rpki-client.org