Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer
File: LW8f1O9FRHbRJBD99h1N-MPHwhs.cer (raw, json)
Hash identifier: DL0zko3+Vljhds99lMbilUJX3Qzm3BX13y8teT4QI2M=
Subject key identifier: 2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50142E1C281D85B6EBA319AC956269B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:42:e1:c2:81:d8:5b:6e:ba:31:9a:c9:56:26:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:7e:d4:93:e0:90:9e:e4:14:e9:be:8c:28:
d6:6e:ea:ec:97:aa:8d:9e:a8:c2:c4:0f:94:46:ce:
b8:19:16:c3:6f:fb:53:b7:a3:48:3e:79:e6:72:0c:
d8:e3:40:37:be:71:6d:75:dc:99:e1:66:99:2c:79:
f4:7d:47:58:35:ea:77:35:8b:a1:c1:b9:5c:56:7f:
d4:a4:6a:1d:a0:34:d4:46:0d:c4:22:9a:b7:3a:69:
83:4c:95:0f:af:a2:94:df:c5:94:cf:4e:a7:58:e1:
e7:9f:d6:9c:de:0f:35:fe:57:7e:aa:2f:35:0d:fc:
bb:fc:bb:80:32:ab:32:5f:40:5d:69:d6:64:5b:7f:
16:21:e5:3a:04:a8:42:b8:ee:49:44:a6:ad:8a:a1:
17:9c:a2:19:29:1f:18:65:92:f8:b4:6b:e8:5f:d9:
60:3a:82:01:b4:67:dc:6e:89:d0:39:f9:28:88:ab:
d5:d0:00:a4:b8:85:ab:e6:ba:b7:a9:ba:b3:14:09:
77:65:59:c9:f2:25:a3:58:1b:52:d3:94:e5:d0:e1:
14:e6:c7:c1:9a:15:f8:7e:2c:cc:ca:32:1a:5c:95:
a8:bd:b1:a6:f0:2b:1b:59:e8:c7:36:f3:6e:8c:05:
e7:9c:8d:f4:56:5d:69:52:8a:85:ba:69:49:5b:05:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f9:45:ce:94:ba:73:92:63:d3:3a:bd:38:e7:42:b4:7c:a6:
d9:22:ef:7e:94:23:74:34:fc:d8:02:33:4c:77:fe:f6:41:7d:
ef:b2:8b:69:07:d2:4e:5b:84:33:6f:43:64:85:55:19:34:f7:
3a:7b:d4:dd:88:08:2d:0f:a5:85:d0:91:c9:ef:6d:ec:3a:8b:
fd:12:1c:fa:02:b4:c2:8e:ba:9f:19:7c:3b:be:55:ed:32:e0:
c7:98:f4:ca:40:5e:e8:96:70:90:0c:7d:4c:9c:56:b7:a2:4f:
48:51:46:9b:0d:be:c3:60:6a:5c:64:d6:d7:83:a2:14:e9:40:
e4:bd:62:c4:a8:5a:e6:f2:5b:bb:2b:9f:07:97:07:9c:76:4c:
f1:d5:3f:99:a0:e2:20:37:ab:af:8a:2a:02:f0:70:d1:d7:2b:
b7:8a:6a:03:dd:6e:b2:29:c7:86:30:48:ed:97:57:3c:1a:1f:
43:d2:a6:e7:16:8f:ff:fe:e5:d1:42:50:01:1f:57:3c:3d:17:
a5:9f:23:c6:f8:ab:e6:69:4e:5b:49:55:cb:b9:3a:b4:5b:47:
af:65:76:fa:6f:5b:e9:e5:4a:9f:9a:ee:aa:5a:d3:9e:39:2c:
bd:b0:d4:d0:1b:59:e2:e4:b7:d9:cf:54:54:fe:b5:36:e4:11:
21:74:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:30 2024 by rpki-client on console-ams.rpki-client.org