Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer (raw, json)
Hash identifier: xUyl39FG5KkMefePIIdh6UJGgYVf/ywurso5NLzVoJE=
Subject key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC387E5DB4671C0B42C2B2CC3F3DB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208698
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:38:7e:5d:b4:67:1c:0b:42:c2:b2:cc:3f:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:08:6f:d7:bd:0f:ba:5f:84:1c:cc:be:b7:
10:82:50:ed:d9:f0:a7:3d:09:9a:87:98:a7:e0:37:
4d:f9:b9:d2:2c:6d:ed:b6:3a:9c:c4:8a:39:9f:ee:
03:d4:1b:bc:02:ca:49:9b:6b:bd:51:d7:f5:a2:43:
04:19:bd:ff:2b:c5:50:a9:37:8a:f8:0f:5b:9e:7c:
65:f5:fc:56:7f:7c:82:3d:d7:a1:fe:4f:b5:00:82:
c9:f5:1f:3f:80:17:cb:4c:6c:af:b1:ec:11:b9:d6:
13:f8:ca:6d:55:ad:9a:2b:e8:00:3a:64:da:be:d4:
36:0d:6c:01:05:81:bf:d6:2c:ff:9c:a0:22:5d:25:
45:50:57:c7:78:d1:45:0a:0f:f9:61:80:73:3c:25:
ea:05:4d:13:0d:70:2d:9a:4b:cb:9a:0c:f5:4a:db:
ec:0e:68:a3:3c:0b:44:43:30:72:86:5b:c0:28:c1:
89:74:fa:ca:b3:c8:57:2a:73:de:33:06:28:f0:26:
eb:c0:1c:c6:8e:63:cf:43:a3:0d:7a:a9:b1:eb:95:
de:a3:97:6f:83:39:bf:ec:bc:0d:70:7b:dd:cc:5e:
36:b0:9f:37:b5:bf:2a:1f:ce:93:65:0f:78:7d:88:
73:60:d3:2b:be:5c:a5:e4:f8:c0:55:02:c3:ec:1d:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208698
Signature Algorithm: sha256WithRSAEncryption
ac:a2:3d:2a:b5:f9:13:5b:9a:da:cd:ec:ce:ac:19:b6:e4:0f:
02:df:3c:e7:b1:0a:e5:43:89:69:ba:38:83:94:af:03:d1:c4:
1f:03:25:f8:f2:d8:cb:de:08:1b:7f:64:88:b3:f0:a6:ac:0f:
8f:56:3a:dd:93:c3:6a:2a:b6:6e:d4:02:63:70:c7:96:bf:0b:
1e:17:56:a4:4f:fc:89:e5:ab:12:94:65:40:a5:a1:60:66:ba:
ff:4a:d4:65:ec:45:c5:88:7a:38:db:a9:99:14:13:93:dc:23:
ad:37:ca:c4:cd:d7:dd:94:00:e6:77:ff:20:96:34:f6:41:a0:
a8:43:f0:a1:c1:46:06:70:d3:3c:94:62:23:e7:90:07:c8:06:
9a:51:ad:12:ee:08:49:a4:3e:2e:27:89:34:f6:79:a6:de:eb:
0d:f4:4a:c9:25:e8:b6:9b:9c:67:42:bd:63:55:1c:f9:fe:ca:
9e:22:7b:54:77:cd:be:9e:c9:cb:41:56:e1:0d:3e:be:f4:c4:
5e:09:f3:6d:c9:b5:bf:7e:61:24:cd:d6:e9:62:f3:1f:0c:60:
2f:df:bc:eb:13:a4:49:1d:bc:de:5d:28:4e:8c:e4:91:07:bd:
e4:cf:d7:e0:6b:e1:37:65:99:8e:f8:76:f0:3f:7a:26:a5:43:
be:c0:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:29:00 2024 by rpki-client on console-ams.rpki-client.org