Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
File: LNH_SXJfYzHmO47XZEjXJd16hN4.cer (raw, json)
Hash identifier: qA34svgXsi4UovQZlMqSbcYAeVFodyo8aDRbgcigUAc=
Subject key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7940AD52A7722F55022FF5BC6632E1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57070
IP: 146.0.16.0/21
IP: 185.200.248.0/22
IP: 2a0a:bac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0a:d5:2a:77:22:f5:50:22:ff:5b:c6:63:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d7:84:c3:64:08:d4:74:6e:db:7c:75:c1:57:
07:90:26:af:9a:e4:63:50:1a:aa:55:d3:f9:85:c8:
27:b8:08:dd:4d:30:e6:0c:8e:b8:4e:54:49:6f:a6:
b1:96:e2:1a:bd:99:9a:85:c7:50:84:13:20:84:e9:
e5:a6:be:f3:26:b6:27:63:ad:1e:e2:ec:3f:00:39:
6b:8c:70:87:46:0b:18:ca:0f:63:ff:e8:1f:30:4e:
a6:87:1a:49:06:32:cc:31:ad:9e:03:06:6d:4f:92:
bb:46:a9:6a:21:02:fe:76:3c:6f:8d:7e:59:c6:86:
4e:16:e2:84:1b:5e:e7:fa:9b:52:78:2c:56:22:e6:
1d:44:94:36:81:60:00:41:92:17:69:ab:ca:8f:3f:
f6:08:ac:98:b5:9b:be:63:c3:97:60:e7:8b:fd:f8:
c4:30:5c:41:f0:f8:48:e1:37:cf:7e:dc:16:3b:3e:
d3:31:56:fe:b7:f2:97:de:34:6c:73:25:84:3b:0e:
ef:c1:56:c2:ec:e1:85:44:27:6c:94:c6:2b:27:24:
98:aa:2f:04:c1:2e:92:ce:78:6a:5b:9a:45:70:54:
f8:5e:3a:35:7b:04:f7:02:87:c9:4c:4e:04:5b:66:
7f:6a:62:3d:c0:ba:48:0d:70:36:3f:81:df:fc:06:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.16.0/21
185.200.248.0/22
IPv6:
2a0a:bac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57070
Signature Algorithm: sha256WithRSAEncryption
1a:28:a0:d1:88:06:3e:71:c7:ff:1d:80:04:d3:35:fb:7a:53:
e5:50:6a:4e:d9:d5:16:6f:35:8a:26:c4:43:01:ef:7f:19:e6:
21:67:c1:88:e2:6d:79:fc:5d:c4:35:ce:36:ad:c7:c1:42:53:
57:d8:55:7d:a4:aa:e2:71:45:3f:54:42:bc:82:09:1d:de:7d:
08:a9:80:71:06:c6:b8:68:b9:9c:38:aa:ca:23:1a:e4:4b:12:
23:83:68:10:ef:27:20:bf:b1:00:4b:bd:58:09:4c:51:0c:e3:
42:c4:6c:43:d5:5a:f1:0f:27:6e:a6:0d:5c:34:ca:3a:70:bb:
53:e8:93:97:87:b1:66:f1:f3:0b:ba:19:e0:fc:79:88:74:c1:
01:0d:8d:7e:77:04:dd:63:45:74:64:2a:f6:fc:80:b7:5d:4a:
ec:9b:ab:67:83:f2:9b:f5:af:71:53:e6:c8:69:4e:6b:fe:8c:
cf:9d:3c:4d:3a:d2:dd:e5:d8:1b:1f:75:7a:b3:a2:2c:e7:ad:
2a:3f:a4:db:b4:0d:f9:4d:26:bc:c2:63:9e:bb:d2:f4:48:59:
5d:a9:75:3e:1e:4c:9f:20:d5:8d:76:32:53:5c:6d:72:63:a6:
02:ba:0c:df:02:64:b9:fc:3c:0c:ae:60:33:d6:dd:d5:ab:4d:
92:25:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:48:44 2024 by rpki-client on console-ams.rpki-client.org