Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer
File: LSNrVIulmiq7JYI0HVYMqJP0l2M.cer (raw, json)
Hash identifier: 2EvpWvj/GYubRZ1FFD6jMPpKXPC2LO8GJ3btdZ6DCwE=
Subject key identifier: 2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1C22C782F6A10FC7BF3F2ED8EF64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213226
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1c:22:c7:82:f6:a1:0f:c7:bf:3f:2e:d8:ef:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d236b548ba59a2abb2582341d560ca893f49763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:08:3c:9f:f1:21:05:a9:71:c1:b6:6e:54:
5d:86:10:2d:56:70:7a:26:8c:4d:65:a3:d3:91:45:
fd:46:90:ff:28:66:22:de:e8:b7:fd:bd:22:13:09:
71:09:00:ce:e3:3f:5d:30:59:a2:79:a6:7a:a1:c0:
90:ad:09:52:84:33:e2:04:3a:a1:b0:ed:8b:43:e0:
ba:27:db:70:7e:85:00:a0:e7:c0:23:1f:63:6d:b6:
7c:92:6b:2d:47:d6:08:63:95:c4:83:7a:0a:0f:c1:
72:92:13:f4:96:76:6d:f6:2f:72:9a:5b:c2:bf:38:
5d:f9:8e:33:36:3d:16:e8:2a:8c:9a:b9:8c:2d:97:
a8:37:6d:03:6f:55:c8:41:6d:a2:e5:12:c7:7c:94:
53:c5:fd:fa:0c:2d:6f:6b:65:7e:e4:90:0c:ff:a2:
4f:f4:8b:4b:ca:1c:96:6f:fc:5b:dc:74:6f:0d:0a:
67:77:0f:80:6b:aa:db:e1:df:be:36:e3:c0:c7:1e:
24:bc:34:b1:2b:9f:71:4c:5a:95:ad:3d:69:97:8a:
7a:eb:74:9f:fa:9e:3a:7f:b0:03:3d:46:ac:82:79:
a5:da:30:97:72:78:05:14:b0:72:b0:a9:13:8b:2f:
bd:ea:be:3f:f6:76:9f:dd:91:b8:51:11:11:3c:27:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213226
Signature Algorithm: sha256WithRSAEncryption
66:5d:14:17:f0:c8:1a:cc:2c:54:3c:9b:59:18:c1:c0:a1:14:
78:a7:20:f8:78:e3:6a:53:7f:25:aa:39:35:c1:0f:67:78:1d:
35:30:da:83:f8:db:00:4c:96:ec:e0:ba:56:8e:ca:08:76:99:
d4:33:56:26:39:39:ef:f1:46:a9:21:2d:5a:41:a2:69:ae:09:
05:dc:bf:a0:e9:1e:99:4a:ad:de:28:d2:d4:12:48:6b:eb:06:
4e:a4:10:99:94:1d:27:0a:95:89:e6:9b:1d:a4:33:74:78:44:
fe:69:36:cd:86:14:83:4f:2e:d6:28:a1:a1:70:8d:54:ac:3d:
bf:10:f7:2a:6b:83:78:b7:79:5b:34:2c:71:a4:01:5e:6d:84:
cd:65:f7:79:8e:43:1d:88:a4:d1:d5:1c:3b:1f:dd:04:57:75:
7d:da:64:a6:0a:86:66:05:f9:17:b5:e1:ee:92:23:d5:ab:5c:
ea:da:ec:3b:d9:05:a9:ba:81:5f:ec:e0:02:72:52:69:2e:d5:
3b:06:06:a7:01:26:8b:7f:ee:84:c7:13:be:f2:d6:ca:4b:2b:
16:e4:60:3f:ee:1f:2e:be:95:c6:17:f6:58:15:02:38:64:6f:
43:66:8b:bc:f2:fa:f0:bf:8c:bd:fd:ca:e4:95:9d:d1:62:7c:
ee:72:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:09 2025 by rpki-client