Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
File: LWX13HhD9bdmifNquRag2ZS5l5w.cer (raw, json)
Hash identifier: 67RqcfHA8hc+bDaY27NGZV/1zJaf6J97maYiuDoWOCs=
Subject key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01908A59C968F6383BF643A3E1682C5E7B33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 06 Jul 2024 23:20:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.24.105.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8a:59:c9:68:f6:38:3b:f6:43:a3:e1:68:2c:5e:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 23:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:3a:8a:0c:b8:16:8c:89:81:5d:da:4b:8b:
31:dd:eb:81:de:7d:a0:e9:d2:ee:d6:52:04:9b:89:
05:09:81:9c:8e:31:b5:bc:54:f7:3e:bf:27:c8:53:
4a:95:38:7b:4e:8a:6d:32:55:f3:b4:ed:a6:f7:e5:
a0:55:47:b2:88:0d:34:5c:36:96:9d:97:ea:9a:d0:
b4:82:04:43:d8:08:24:92:e7:7a:f6:a1:d7:60:e3:
ac:37:53:e7:ea:5c:cc:b9:de:65:91:17:ff:fb:e8:
2e:b0:8d:a5:f5:24:ba:97:13:4c:30:b9:d6:25:7c:
73:c9:84:1f:4d:3e:76:12:bb:f0:72:81:59:00:b0:
dd:3b:2f:de:9b:f1:e3:10:f6:d1:be:21:78:8c:ed:
6c:5a:7a:81:09:7c:9d:40:44:ec:6b:cd:d9:22:e1:
80:ce:45:4a:73:06:79:ed:b6:2d:de:5e:44:61:2f:
fc:d8:8d:c0:33:99:f8:f5:a9:85:68:b0:d1:c2:6b:
6a:b6:47:ac:77:98:c2:b1:47:15:f2:f7:61:8b:94:
a2:6e:9b:9f:19:95:3a:78:17:72:42:8e:62:0a:41:
a3:0f:3e:ec:e1:f3:60:4f:e5:f8:56:ea:3c:d3:b3:
a5:18:36:2f:69:ed:bc:c7:8d:7f:e3:61:9c:4d:52:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.105.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1c:a0:2f:69:82:b8:af:f7:73:57:07:ca:6e:34:f3:82:90:
71:15:2d:95:0e:ba:2c:e2:94:f3:f2:33:0e:78:e7:c8:43:1b:
f8:e2:9e:2e:92:3e:50:4c:f9:31:a2:60:03:3a:79:2f:3c:f3:
39:8e:dc:b0:ae:18:ee:51:79:0b:4e:1b:d1:78:a7:20:e1:0a:
df:65:25:ad:f5:69:b7:fd:77:cb:88:67:56:7c:a2:8b:4d:38:
e0:87:b0:b6:ab:59:9d:d2:70:1f:6b:a8:be:dc:71:53:e3:1d:
a5:ad:bd:eb:7f:2f:ca:76:be:91:05:aa:94:b9:99:29:5a:5b:
71:5b:40:4d:bf:a0:ca:7b:47:0e:53:47:df:67:39:b2:24:3f:
64:dd:c2:09:07:59:f5:0f:3f:f4:58:ef:3d:5b:cf:57:db:bb:
e7:2d:e6:20:34:4e:27:1a:7d:25:77:0a:73:40:fe:f7:90:6c:
43:32:61:6b:ca:ce:cd:9d:94:75:35:d7:36:5a:50:58:b6:b7:
07:2c:54:c8:13:7a:78:8a:ce:b4:8b:b8:8f:62:ec:23:03:7c:
30:12:55:8e:30:43:29:80:6c:df:f7:b6:43:e8:3b:d3:2d:51:
02:2e:a5:04:5f:df:f0:74:0c:5e:ef:40:34:05:50:c4:78:19:
69:bd:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:14:50 2024 by rpki-client on console-ams.rpki-client.org