Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer
File: LSNrVIulmiq7JYI0HVYMqJP0l2M.cer (raw, json)
Hash identifier: YTI6UOGvd03ab8OlFd9jvMpex/v4WeGEkcvGuympVoY=
Subject key identifier: 2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E8472B52B155C9295A1CC22830B98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213226
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:84:72:b5:2b:15:5c:92:95:a1:cc:22:83:0b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d236b548ba59a2abb2582341d560ca893f49763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:08:3c:9f:f1:21:05:a9:71:c1:b6:6e:54:
5d:86:10:2d:56:70:7a:26:8c:4d:65:a3:d3:91:45:
fd:46:90:ff:28:66:22:de:e8:b7:fd:bd:22:13:09:
71:09:00:ce:e3:3f:5d:30:59:a2:79:a6:7a:a1:c0:
90:ad:09:52:84:33:e2:04:3a:a1:b0:ed:8b:43:e0:
ba:27:db:70:7e:85:00:a0:e7:c0:23:1f:63:6d:b6:
7c:92:6b:2d:47:d6:08:63:95:c4:83:7a:0a:0f:c1:
72:92:13:f4:96:76:6d:f6:2f:72:9a:5b:c2:bf:38:
5d:f9:8e:33:36:3d:16:e8:2a:8c:9a:b9:8c:2d:97:
a8:37:6d:03:6f:55:c8:41:6d:a2:e5:12:c7:7c:94:
53:c5:fd:fa:0c:2d:6f:6b:65:7e:e4:90:0c:ff:a2:
4f:f4:8b:4b:ca:1c:96:6f:fc:5b:dc:74:6f:0d:0a:
67:77:0f:80:6b:aa:db:e1:df:be:36:e3:c0:c7:1e:
24:bc:34:b1:2b:9f:71:4c:5a:95:ad:3d:69:97:8a:
7a:eb:74:9f:fa:9e:3a:7f:b0:03:3d:46:ac:82:79:
a5:da:30:97:72:78:05:14:b0:72:b0:a9:13:8b:2f:
bd:ea:be:3f:f6:76:9f:dd:91:b8:51:11:11:3c:27:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213226
Signature Algorithm: sha256WithRSAEncryption
99:6b:b7:03:94:14:22:e2:03:29:44:09:e1:7e:ed:e7:6c:ab:
4b:eb:76:fa:2d:9e:ce:62:f2:f4:21:a7:70:91:29:48:cc:29:
d8:25:07:4f:8b:46:50:3a:53:b6:3a:f7:33:39:b2:7d:b0:10:
07:d2:4c:ff:b5:b9:11:fe:2c:77:a1:9d:8b:5c:db:32:cf:88:
c6:90:f7:7b:99:f5:6b:22:22:c3:3f:99:20:73:3f:b1:9d:06:
49:b4:b1:ab:a1:2f:24:52:8a:a6:ce:fd:af:e1:c3:83:b2:f1:
54:9a:10:f7:ca:97:2b:18:77:77:07:65:b7:ba:e5:91:e0:e3:
05:1d:77:b4:c5:98:89:c4:55:08:02:0d:a1:16:76:87:34:96:
84:a6:46:d7:82:be:e1:fa:70:f5:fd:b2:66:00:1c:f8:4c:ad:
f2:ec:75:0d:40:ca:2c:d9:df:2d:8f:19:78:fa:f6:bf:40:cc:
b0:82:ab:26:57:50:9c:04:a2:a7:31:d0:fc:df:67:7a:1d:d7:
80:c1:2b:69:ea:f6:e1:29:48:72:4f:fd:e7:7b:09:cb:1d:19:
fa:35:00:c6:bb:2b:2c:33:ad:d0:89:7b:1b:84:3a:77:7c:a4:
08:a7:7a:8d:4d:d4:f7:3d:82:df:41:19:15:20:52:70:d8:8c:
f8:8b:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:03:39 2024 by rpki-client on console-ams.rpki-client.org