Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer (raw, json)
Hash identifier: 1Ub+anVjvQbKMPfwQ8aLIx0ctiEoCFjZ4EVZZJoOqD8=
Subject key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B495E246FA01604E6002A2D5B5922E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208698
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:95:e2:46:fa:01:60:4e:60:02:a2:d5:b5:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:08:6f:d7:bd:0f:ba:5f:84:1c:cc:be:b7:
10:82:50:ed:d9:f0:a7:3d:09:9a:87:98:a7:e0:37:
4d:f9:b9:d2:2c:6d:ed:b6:3a:9c:c4:8a:39:9f:ee:
03:d4:1b:bc:02:ca:49:9b:6b:bd:51:d7:f5:a2:43:
04:19:bd:ff:2b:c5:50:a9:37:8a:f8:0f:5b:9e:7c:
65:f5:fc:56:7f:7c:82:3d:d7:a1:fe:4f:b5:00:82:
c9:f5:1f:3f:80:17:cb:4c:6c:af:b1:ec:11:b9:d6:
13:f8:ca:6d:55:ad:9a:2b:e8:00:3a:64:da:be:d4:
36:0d:6c:01:05:81:bf:d6:2c:ff:9c:a0:22:5d:25:
45:50:57:c7:78:d1:45:0a:0f:f9:61:80:73:3c:25:
ea:05:4d:13:0d:70:2d:9a:4b:cb:9a:0c:f5:4a:db:
ec:0e:68:a3:3c:0b:44:43:30:72:86:5b:c0:28:c1:
89:74:fa:ca:b3:c8:57:2a:73:de:33:06:28:f0:26:
eb:c0:1c:c6:8e:63:cf:43:a3:0d:7a:a9:b1:eb:95:
de:a3:97:6f:83:39:bf:ec:bc:0d:70:7b:dd:cc:5e:
36:b0:9f:37:b5:bf:2a:1f:ce:93:65:0f:78:7d:88:
73:60:d3:2b:be:5c:a5:e4:f8:c0:55:02:c3:ec:1d:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208698
Signature Algorithm: sha256WithRSAEncryption
2d:05:1e:d2:86:c6:72:0a:3f:ef:e6:03:a5:5d:a0:4a:20:62:
db:60:64:4d:79:7e:47:ae:39:f6:34:40:11:f5:15:45:d4:eb:
d5:00:ca:54:36:66:f4:b3:b6:2d:5f:29:4b:ad:7a:af:18:15:
6d:c2:31:8f:3e:bf:2e:dd:e9:40:66:13:fe:d7:4f:3d:1a:34:
71:fc:b8:d3:13:71:07:6f:b1:3d:c0:a4:46:da:f6:e7:73:a7:
37:a7:04:30:5e:8e:02:db:7b:c4:b7:25:d0:d7:c3:a5:f8:5a:
77:f3:62:96:25:46:6e:27:eb:ee:37:db:2d:9d:0a:e5:4f:9f:
e3:41:56:d4:f4:0b:d8:af:06:93:8c:9e:95:17:78:a7:d2:31:
01:0d:64:40:a0:f5:61:18:34:c1:38:9f:6d:dc:8f:2a:43:e5:
55:6f:d8:f6:e8:d6:33:0b:0a:e8:bd:5e:42:72:67:05:4b:af:
d7:11:27:75:12:b1:4b:73:23:3d:92:e7:b7:00:9f:5d:b6:8c:
a1:85:07:5e:bf:aa:53:4f:bc:b8:9f:f6:e8:2b:51:25:d3:4b:
31:c3:29:47:74:67:6c:87:50:e3:02:a1:e8:f0:dc:be:3c:ae:
bb:b6:a5:03:bd:3a:92:ec:50:0b:f8:38:06:f5:42:ac:26:fc:
e5:25:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:04 2025 by rpki-client