Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer (raw, json)
Hash identifier: Lj3m3KHQlaGHt9ydbUVPwu1H7AjLNSxcC97uTU9LbcY=
Subject key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E09782CA8FE12A6F036C600EB0CD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.174.11.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:09:78:2c:a8:fe:12:a6:f0:36:c6:00:eb:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:87:bd:a6:1a:1f:45:48:60:e4:6c:bc:5a:
f7:7e:8b:e1:a9:4d:e9:02:9e:26:b8:9e:da:d1:d6:
a0:0d:25:7c:c9:49:a6:79:c1:65:b4:ad:2f:b8:83:
74:c7:e0:3d:a6:29:ac:5a:06:b7:ff:20:71:f4:76:
dd:cb:85:7d:a3:56:0e:89:1c:55:cb:33:50:7f:7c:
c5:01:b9:1f:02:f2:68:fa:00:ee:83:19:c2:c6:4e:
7f:29:06:5d:fe:9a:ce:7c:e2:f2:86:88:af:2b:1a:
0d:a1:5e:07:77:a5:30:28:65:8b:8f:5d:a7:88:89:
18:61:5b:34:a5:78:c9:f6:b5:a2:a6:3e:ea:d9:d8:
ba:d1:1e:16:0c:79:85:d8:ca:d7:c1:77:67:b2:1d:
a6:fd:6b:d7:83:54:06:c1:89:46:f0:d4:c2:52:26:
b9:5e:27:4d:6c:71:1b:53:f3:44:6a:c6:c3:d7:ea:
68:c4:be:28:b8:b9:3f:49:69:e0:63:3b:94:b7:28:
42:c8:5b:d0:87:a4:93:37:10:79:0d:4e:d5:88:fe:
3d:83:23:f0:89:75:08:3c:e2:52:7c:76:b1:64:d9:
0a:2d:a6:fc:22:16:76:36:e6:5c:4c:e2:45:3c:24:
96:4c:53:3b:00:41:16:18:22:d7:a4:69:2d:bc:7d:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:71:20:65:b8:8f:ac:86:f5:18:8f:db:4d:57:da:b6:0b:6b:
56:61:b8:96:b4:52:93:3d:30:a4:22:3d:7c:ff:05:f6:8d:66:
d3:cb:7e:8c:1c:f4:d6:50:da:b2:35:23:fa:fc:86:31:4d:f8:
79:27:55:13:12:e1:b3:44:bd:f1:81:67:3b:be:fb:5c:a8:cf:
b4:a9:30:12:a7:43:64:c2:b4:f3:27:96:e5:54:db:ca:a2:51:
7f:84:9b:44:45:76:60:33:f7:8b:53:57:83:65:19:35:f3:f4:
28:f6:cc:b3:3b:df:a2:9f:42:aa:38:cc:16:3e:fa:1b:6e:08:
fd:17:20:9e:c4:dd:7a:2c:ea:4b:27:60:77:ba:a2:23:70:92:
39:4e:c2:3f:ae:32:e6:db:bb:b9:cc:20:83:86:74:77:cd:31:
ab:81:59:91:e5:17:07:34:4c:b1:ac:bd:d8:9b:1b:0d:0a:30:
12:33:a4:8e:6c:05:2e:89:d9:77:65:bf:f6:3f:52:f1:21:d0:
55:46:9a:b8:0d:a2:33:2e:b3:a0:57:50:0a:58:3b:be:12:00:
c7:6b:7b:45:8a:39:ac:5d:66:4a:28:80:20:99:e0:9e:a1:0a:
b3:b9:09:21:fa:22:e3:f2:f0:39:00:bb:f1:de:7b:5f:47:36:
af:9b:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:44:01 2025 by rpki-client