Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTCW1JUfXGlCNB_MDM-3KNrozoQ.cer
File: LTCW1JUfXGlCNB_MDM-3KNrozoQ.cer (raw, json)
Hash identifier: tIfSrcAsT16YEx+3HJaYCidCLhKQsXNzfFOF8SMZDp8=
Subject key identifier: 2D:30:96:D4:95:1F:5C:69:42:34:1F:CC:0C:CF:B7:28:DA:E8:CE:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3BCB22E4513B39CF1DD23A908C7454B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/77330b-607a-4af8-b8f4-2c0d43867d7b/1/LTCW1JUfXGlCNB_MDM-3KNrozoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/77330b-607a-4af8-b8f4-2c0d43867d7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 07:09:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.17.176.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:cb:22:e4:51:3b:39:cf:1d:d2:3a:90:8c:74:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 07:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3096d4951f5c6942341fcc0ccfb728dae8ce84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a8:28:b3:32:f5:5d:a8:96:ef:32:c0:c4:d3:
d3:29:4f:1f:d2:80:71:0b:27:63:9a:47:5b:d0:3b:
7e:4c:83:f4:06:26:85:a8:59:b8:46:41:5d:44:f6:
a9:38:04:00:4d:08:38:96:3d:db:97:51:30:bf:13:
56:32:14:d1:19:a7:f9:cf:14:30:06:f2:c8:f5:a7:
ac:85:4f:55:1f:af:91:9d:c0:cd:98:bb:3f:ec:bd:
3d:b5:18:d0:c7:11:1a:38:23:a5:30:49:e2:60:85:
1d:48:4a:90:ba:e7:0b:37:5d:f9:3c:a5:e4:13:95:
35:38:84:25:41:23:37:27:d2:79:3a:53:7a:10:79:
23:74:e2:63:35:9d:7a:62:d7:fe:02:ce:80:79:e4:
47:93:65:73:d2:cd:68:e5:ea:03:f9:28:a8:e9:1c:
8b:84:b7:47:13:be:7a:47:4c:e5:e0:7c:8e:53:04:
65:f9:84:aa:a9:50:54:ea:e8:b1:68:02:2c:44:d4:
ff:dd:3b:ca:0a:1d:9b:a3:ef:9e:d0:5f:3d:4c:46:
5c:9f:58:b4:16:14:ec:d3:59:60:91:e8:06:ff:04:
88:6f:1e:0a:f3:4f:11:33:6a:df:e0:e0:f3:56:bc:
7d:f2:54:0f:ea:a6:49:06:0f:a5:64:61:b1:1a:61:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:96:D4:95:1F:5C:69:42:34:1F:CC:0C:CF:B7:28:DA:E8:CE:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77330b-607a-4af8-b8f4-2c0d43867d7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77330b-607a-4af8-b8f4-2c0d43867d7b/1/LTCW1JUfXGlCNB_MDM-3KNrozoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:31:30:b7:fe:86:5a:2f:9e:47:5c:e8:ee:21:b8:53:00:7f:
26:79:67:6a:df:a0:69:ac:1f:9e:01:7f:00:4c:45:d1:a7:bb:
bb:7d:a7:da:4f:cd:4d:16:1c:bb:69:a1:8c:0f:a7:d5:16:2e:
ab:d2:ed:09:30:fd:25:f4:f2:5e:71:55:80:f3:a2:40:d2:6d:
04:30:38:0a:9e:57:72:dd:e6:07:46:fe:09:b0:89:ec:bd:e6:
3f:50:13:0b:bb:81:a0:7f:6f:a5:a0:23:54:61:8e:82:12:44:
74:10:ef:76:ff:8c:e3:1c:9f:65:cc:22:44:da:6a:57:eb:70:
0b:97:83:67:f2:db:c7:a5:3e:09:ff:0f:12:ae:2b:fc:d0:24:
7f:f4:c3:43:43:46:a5:5a:c8:53:24:f7:82:99:96:ff:09:93:
b3:b9:5c:41:84:e9:6d:c1:96:3c:6a:a4:89:a9:78:fa:0d:49:
a1:c4:9c:a9:23:3f:6d:de:23:cc:e0:30:fb:fa:e0:c6:47:ff:
af:d2:bb:47:8b:b2:ec:c5:ad:e2:95:1c:ca:fb:23:9b:d7:d4:
fd:35:20:f0:a8:78:da:c5:1c:89:55:d4:26:89:0b:6b:81:89:
0f:74:ca:37:72:c5:fa:7e:1a:e5:bf:10:93:bb:72:65:a8:01:
eb:27:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:16 2024 by rpki-client on console-fra.rpki-client.org