Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
File: LPYTYxWlLVJHEkt882mq-4MSIn4.cer (raw, json)
Hash identifier: 95vdZ7HTbchfyyJUojpbye9MG4Agy7OxDcqCRzbp/8U=
Subject key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E62458C82F62CED5F4AFBAA1783AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.208.236.0/22
IP: 2a09:8e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:62:45:8c:82:f6:2c:ed:5f:4a:fb:aa:17:83:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:8b:3e:b8:9e:67:e8:8d:ae:cb:c2:e4:f4:
35:b8:14:52:4c:35:e8:f5:35:21:9f:a2:8f:f5:45:
06:44:55:e0:c6:60:e0:43:c8:10:a6:7a:1f:8c:fd:
15:9a:76:0a:e8:2b:8d:e2:59:14:7e:a0:8c:f6:8f:
da:2a:5f:77:eb:aa:5c:d9:c2:13:e6:f2:b1:9b:e8:
1e:c1:eb:14:21:4d:8c:c5:9f:a5:1a:2d:c9:7c:23:
72:3c:54:32:b1:56:76:19:21:81:69:fc:d1:af:94:
2d:3d:57:cd:e3:1d:fb:7e:07:0e:78:9b:ec:09:ec:
a5:69:2e:f3:6c:ba:e8:75:99:7d:6c:fa:2d:65:2d:
74:06:55:33:2e:1b:8f:c5:90:98:8f:11:13:75:e7:
b5:7c:c5:7c:fd:48:a0:77:3c:0b:40:0e:20:b4:eb:
92:f4:d1:ee:7c:40:16:6b:ec:01:c2:c1:0a:98:0a:
1c:84:d9:4c:9e:b5:36:de:10:48:44:64:e2:ad:54:
55:28:73:34:1f:7e:29:f9:bb:99:e3:9c:57:59:e1:
cc:0a:3d:63:89:65:d2:d3:82:6b:41:79:75:07:48:
f7:43:e6:da:b4:7f:65:1b:d1:b8:58:06:da:07:69:
66:2e:f8:65:5b:82:84:33:74:ca:38:a2:29:29:14:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.236.0/22
IPv6:
2a09:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:64:3b:96:34:ea:dd:fb:a1:8b:dc:bf:26:e7:c2:17:40:2e:
cf:3d:dd:7a:28:b1:5e:14:42:57:c6:ed:73:42:ca:25:d3:80:
50:e4:25:63:72:5a:c8:c1:4f:66:5c:b7:dc:1b:df:f2:7c:3a:
12:ad:70:37:11:37:a1:f1:a5:89:ce:04:21:a1:ad:d7:61:48:
fc:33:a2:57:2b:45:24:49:90:09:be:41:1a:dd:44:46:c8:74:
ae:c6:d4:14:df:63:74:c8:00:44:2d:77:da:b4:98:38:a8:5f:
a7:3e:cf:6d:89:0e:80:8e:a9:1f:13:49:2a:45:07:f0:8a:61:
da:77:d4:cc:7d:32:ce:37:d1:ab:b9:3a:43:a8:d4:f9:48:d2:
4a:bf:88:8d:2c:40:c6:10:17:5e:cc:6e:df:e4:ee:9c:3d:3f:
09:ac:cd:2e:c7:37:86:af:55:e4:f5:4f:ec:9d:30:c5:56:0e:
a2:07:7b:20:4b:a4:08:2c:48:b0:f4:a6:1f:7f:58:ce:30:50:
d2:46:20:3c:8d:9e:2f:d2:b3:e6:f7:21:0a:10:d8:48:31:b7:
fc:03:7b:12:73:6d:ba:dd:01:09:81:82:ab:81:ae:c4:59:05:
04:ad:2f:dd:d6:37:99:6e:8e:14:2c:bc:cf:a3:69:6b:21:37:
4d:e5:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:37 2024 by rpki-client on console-ams.rpki-client.org