Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.cer (raw, json)
Hash identifier: N6ji6LwMe5QgILNl3lMZkekVHqrsA4FBQ+s+wyrqT7A=
Subject key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7943A140BB038C88018DA3D9818A83B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.223.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3a:14:0b:b0:38:c8:80:18:da:3d:98:18:a8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:43:8d:00:04:5f:84:c4:db:47:98:60:aa:
29:b0:41:c0:e9:71:72:ae:f3:eb:bf:19:ed:fc:7b:
ce:3e:65:40:66:11:af:b3:27:0b:5a:8b:ac:a8:8b:
62:63:33:b1:f4:c5:2d:65:f2:d3:04:6e:6a:09:f2:
fb:fb:26:3f:dc:3b:12:51:a0:5e:3a:ee:3d:3e:8e:
82:09:07:70:01:c7:a8:74:77:08:02:a1:3e:06:9e:
03:28:0e:bf:43:49:cc:e2:9f:ca:35:4e:cb:c3:4b:
53:bc:c6:03:9d:27:15:a3:42:94:d9:37:67:e5:66:
14:a7:15:34:f1:5f:32:07:00:17:92:b7:84:f6:2e:
81:15:a2:b8:2b:dd:22:8b:23:a8:db:5b:14:42:26:
07:27:a9:57:f8:11:93:cf:e3:61:dd:1e:34:08:58:
51:44:ab:40:5e:6b:6f:b7:e2:d5:ea:ef:3d:b4:f5:
fe:15:cb:d1:c6:d7:4f:fd:82:a7:72:c8:62:3c:f5:
e0:26:da:a4:94:d7:e8:18:be:ce:0e:1e:88:b6:f3:
3f:05:09:e8:6a:5c:2a:f7:b2:81:0c:04:99:34:8e:
da:16:df:54:ab:a7:b7:2f:6c:87:23:e7:bb:53:2c:
99:79:4b:21:66:81:4d:5f:9c:0d:09:1a:4d:55:e9:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.139.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c2:a9:58:32:36:c9:cc:f8:29:23:9e:a9:10:85:af:07:31:
1a:eb:78:88:0e:d8:3a:4c:ae:1b:40:52:8b:36:53:3f:f5:59:
52:27:e9:13:75:23:6f:dc:17:bc:68:48:be:36:b5:12:03:ed:
23:83:69:d7:39:69:8e:d3:eb:91:c3:45:90:1f:ba:ab:a4:14:
a2:ab:b0:c9:58:a8:70:f1:69:a3:1a:3c:57:fe:1b:5a:4c:08:
e8:e1:c3:1e:a9:72:64:af:a8:a4:34:7b:9f:b9:da:08:83:eb:
99:c3:2e:eb:8f:21:0d:6f:ac:e3:93:65:dc:5a:97:59:25:ac:
68:f6:ea:b3:c3:7f:35:e5:b4:bd:82:02:ea:a0:74:a2:c5:6a:
57:a6:9f:0c:12:03:20:cf:65:e5:7e:2f:9f:0a:5f:f4:78:6c:
3d:2e:bd:a9:19:59:bc:c2:2e:f2:6a:e2:8a:e0:a0:a0:3a:48:
4c:58:eb:99:bd:61:6f:70:00:90:18:2d:5f:7f:52:75:05:0f:
bd:f8:d0:dd:1e:f4:7b:17:69:15:a0:04:25:86:05:0e:a7:07:
d3:4b:8c:b3:78:29:e9:de:51:f8:54:c8:81:30:05:20:91:1c:
9c:e7:ba:b6:44:38:ff:8a:99:af:a9:4c:d1:50:fc:4c:28:35:
27:2c:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:38 2024 by rpki-client on console-fra.rpki-client.org