Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer (raw, json)
Hash identifier: k+sAjVco7A5+E883/O+7Lzr2EUuL9OvI6BJFDr0GT+s=
Subject key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3DA53E4C66C7CA6E054AE4B96FFA5FEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 15:47:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.174.11.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:a5:3e:4c:66:c7:ca:6e:05:4a:e4:b9:6f:fa:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 15:47:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:87:bd:a6:1a:1f:45:48:60:e4:6c:bc:5a:
f7:7e:8b:e1:a9:4d:e9:02:9e:26:b8:9e:da:d1:d6:
a0:0d:25:7c:c9:49:a6:79:c1:65:b4:ad:2f:b8:83:
74:c7:e0:3d:a6:29:ac:5a:06:b7:ff:20:71:f4:76:
dd:cb:85:7d:a3:56:0e:89:1c:55:cb:33:50:7f:7c:
c5:01:b9:1f:02:f2:68:fa:00:ee:83:19:c2:c6:4e:
7f:29:06:5d:fe:9a:ce:7c:e2:f2:86:88:af:2b:1a:
0d:a1:5e:07:77:a5:30:28:65:8b:8f:5d:a7:88:89:
18:61:5b:34:a5:78:c9:f6:b5:a2:a6:3e:ea:d9:d8:
ba:d1:1e:16:0c:79:85:d8:ca:d7:c1:77:67:b2:1d:
a6:fd:6b:d7:83:54:06:c1:89:46:f0:d4:c2:52:26:
b9:5e:27:4d:6c:71:1b:53:f3:44:6a:c6:c3:d7:ea:
68:c4:be:28:b8:b9:3f:49:69:e0:63:3b:94:b7:28:
42:c8:5b:d0:87:a4:93:37:10:79:0d:4e:d5:88:fe:
3d:83:23:f0:89:75:08:3c:e2:52:7c:76:b1:64:d9:
0a:2d:a6:fc:22:16:76:36:e6:5c:4c:e2:45:3c:24:
96:4c:53:3b:00:41:16:18:22:d7:a4:69:2d:bc:7d:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
86:40:26:90:4d:0f:90:9b:46:42:c5:c9:d7:39:75:e1:75:a4:
fd:98:b5:50:ee:86:33:a1:33:6a:4b:56:97:6b:0d:bd:05:bb:
fb:a0:77:7e:8e:61:a7:d3:60:e0:c4:ac:4d:1a:c8:99:65:81:
35:9d:e2:d5:a6:27:1b:8a:dd:67:57:e2:38:a0:0a:c6:a7:2c:
d4:b7:8c:7d:fe:b3:57:05:16:94:4c:80:6d:43:7a:fa:5e:36:
72:73:51:19:80:76:d6:e8:7e:7b:54:59:da:0d:9c:31:9b:8d:
4b:f1:6c:ac:57:3a:71:61:29:b1:4f:94:f5:d4:fd:dd:c9:ec:
74:a6:d5:1c:cb:82:5d:96:ec:7b:d0:5d:ca:61:c7:c2:d7:68:
b9:82:a9:96:6d:67:e2:04:30:e9:26:a2:16:f6:56:45:da:66:
c6:55:23:07:cc:22:b1:c5:bb:89:fc:28:e6:59:3a:cf:6c:88:
43:fd:2c:62:db:e9:36:de:0c:c3:e3:76:cd:e5:af:32:8e:f5:
7c:9c:90:a3:c7:51:f4:5c:e8:77:fb:57:32:42:38:19:5e:12:
73:10:04:38:8a:b9:49:ba:92:ad:5f:40:09:f4:2c:24:15:4c:
58:29:c2:70:2e:a5:21:c6:14:ed:3d:d1:d5:82:e1:ad:83:4b:
4e:7e:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:29 2024 by rpki-client on console-ams.rpki-client.org