Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
File: LTX2XfLLPqFuURUvrHWUf6nDC_c.cer (raw, json)
Hash identifier: lPWg1fnBlX8cHD99kqIUrJVk8dDJCY+XwH8/CSx2cD8=
Subject key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D30AD2E4413F76CCC91F0DC972CB19FDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jan 2024 10:17:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60930
IP: 91.147.84.0/22
IP: 213.134.30.0/24
IP: 2a13:53c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:ad:2e:44:13:f7:6c:cc:91:f0:dc:97:2c:b1:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 10:17:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:37:81:07:89:49:02:d9:73:c8:4f:2a:32:
7d:18:03:15:1e:f1:3b:13:2a:02:29:67:9d:6a:fb:
8c:9e:14:b1:d6:68:40:c7:b1:4a:81:a8:53:a7:2c:
cb:2f:c8:a6:fa:67:6d:25:f3:b8:3e:f6:53:4f:ee:
20:23:c7:d9:56:b2:09:85:8d:b4:2d:e6:d2:bc:67:
ef:32:10:73:7e:84:68:64:92:db:21:83:9a:76:b2:
c3:43:59:63:35:8c:b0:3e:80:fc:50:d4:79:c6:d2:
c9:30:0e:33:e7:b9:e9:17:9d:78:f9:61:09:66:a7:
26:48:58:7a:b7:cc:3b:2a:13:3c:d5:3f:ad:ba:bf:
01:73:57:49:0c:12:76:7f:25:7c:8c:22:59:18:56:
b8:db:2b:31:36:bf:dd:94:e3:c6:c0:63:d8:b9:76:
92:c5:73:43:4c:4b:6b:b1:30:ad:34:94:d7:2f:46:
ad:a0:b0:35:04:69:26:a8:c2:c2:52:79:66:21:e1:
88:de:77:26:a7:be:d4:5b:c7:eb:34:bc:66:48:1b:
f4:a9:46:93:20:0e:e4:45:d6:a5:b0:7a:82:bc:20:
20:3d:9a:36:36:71:bc:7e:9c:a8:4d:a9:ab:04:8f:
44:13:04:bd:8f:77:c9:ae:50:a6:60:5c:e0:92:3a:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.84.0/22
213.134.30.0/24
IPv6:
2a13:53c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60930
Signature Algorithm: sha256WithRSAEncryption
32:11:9f:b4:9c:a1:c5:08:ab:23:9f:09:d0:b9:94:44:7a:f4:
eb:30:fd:72:3e:78:e4:73:b0:1c:c3:78:9f:76:34:a4:90:13:
3a:f3:1a:25:c3:8b:13:d4:50:1b:96:91:19:dd:c1:9c:42:ca:
90:ac:79:cf:fb:5c:6e:c2:90:1b:26:5d:26:f6:73:e7:4c:b5:
47:96:aa:69:fa:df:ed:3c:55:0b:0d:a6:14:0d:81:f9:61:7c:
a3:e0:e2:08:98:6b:4b:96:bc:92:d2:53:12:38:7b:4f:8f:97:
4e:d5:16:f2:f9:e7:36:8a:97:15:77:a9:06:26:dd:4c:6b:f6:
8a:d2:91:43:8a:ec:16:92:0d:c3:41:bf:09:e9:31:6d:60:d8:
a2:85:25:3a:3a:37:78:a0:86:5d:a6:9d:39:be:0a:78:d6:c1:
b8:e4:44:6b:2c:b1:5e:a1:5c:db:8f:d0:74:60:b5:32:6e:fd:
d6:cd:56:3a:7a:00:9f:4c:d1:d2:7c:d8:4a:a6:ad:32:e2:c1:
74:b3:48:5e:d8:4d:3d:bb:0e:69:67:8c:94:59:9f:39:74:2e:
40:2f:e1:9f:2e:4b:4a:b0:15:8c:e0:1a:92:a0:bb:1d:50:ae:
71:70:b6:e6:70:3e:e5:87:f3:34:f8:42:7a:c2:16:50:a3:92:
f7:05:7b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:11:43 2024 by rpki-client on console-fra.rpki-client.org