Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
File: LX893KDLOOx7CMaQKeIPUtxAjxc.cer (raw, json)
Hash identifier: Jm2QLMhxdk9el6hA9avpvOX5lQFXI13ia3We4U6In8Q=
Subject key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB63B6245A5D770FB6ECC2F52E3D5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35262
IP: 193.27.1.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:b6:24:5a:5d:77:0f:b6:ec:c2:f5:2e:3d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:db:1b:4d:5b:cc:bf:ac:09:5e:e5:db:23:
44:70:45:1c:51:29:01:10:96:68:d4:6d:52:de:90:
97:94:48:89:0d:6d:6d:a4:ad:10:ee:ed:b9:e3:c2:
c6:ac:c3:7a:74:0d:ad:e9:53:46:ee:f1:b3:e6:61:
1b:b2:79:23:6d:ef:27:d9:ed:8d:8a:3b:4e:0c:66:
de:01:ee:98:18:3f:04:eb:54:60:e0:37:dc:58:a4:
95:d6:13:26:91:88:28:c0:ca:fa:f2:c9:7c:79:d3:
fb:b1:82:39:f5:d0:34:30:32:35:64:2b:f7:d6:3f:
60:5e:e9:4a:91:a1:5c:1a:22:c5:d3:d0:a0:77:10:
7c:38:b2:05:17:b1:e9:84:9a:e1:a9:8e:7a:83:7b:
25:5e:e8:78:46:f8:c2:30:ef:88:de:1e:08:5a:0c:
d5:4a:6d:e5:7d:c3:c5:56:dd:9d:0f:df:76:e2:60:
b8:f1:78:df:92:4b:80:7c:53:c1:35:79:fa:26:ee:
c3:09:44:40:66:a3:e8:1f:ee:57:58:70:3c:69:4f:
45:0d:f7:19:ab:11:25:a2:e7:a6:7b:95:d7:96:7f:
f6:8d:8b:2b:af:ac:74:b0:14:32:d5:fd:76:93:f5:
f2:a5:b8:f9:ed:4a:01:94:a8:1e:4a:e6:82:50:df:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.1.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35262
Signature Algorithm: sha256WithRSAEncryption
94:0e:c9:3c:f1:68:c6:c2:f8:b5:f7:63:31:20:40:ff:ca:9c:
8f:61:f4:67:ad:65:c5:9a:78:75:97:14:5b:31:c3:7a:47:35:
fb:a2:5b:1d:bc:6e:a8:e6:f1:66:8a:66:81:b9:38:fa:c1:1e:
4a:f9:7d:65:c2:d0:33:e1:02:ea:40:cb:33:52:60:92:38:54:
7b:ac:6b:8c:93:70:15:c1:db:d3:3d:35:b3:18:82:00:fa:eb:
46:17:fe:a7:46:a6:49:51:bf:af:a4:a3:cc:11:da:05:a9:07:
71:44:f0:f1:2c:12:86:c8:ae:e3:4a:25:fe:69:9a:5d:88:3d:
5b:2f:f9:21:d6:53:fe:36:0a:a1:05:e1:35:29:52:55:6f:79:
93:2a:0d:3a:4c:ec:34:45:73:11:e9:22:c4:a7:af:82:4b:3c:
ef:0e:7a:05:09:a4:d0:70:24:78:8e:b2:ab:87:fc:75:8d:26:
95:74:6f:aa:b5:1b:60:b5:11:e2:01:bf:8c:4b:16:01:05:ed:
39:39:43:f1:4b:c4:a4:bc:d4:e9:fa:45:e1:61:47:b7:a6:cf:
58:e2:43:bd:72:f3:75:6a:c3:9f:ae:35:32:64:2a:d7:a9:1e:
e3:93:a6:1e:b3:f3:cd:46:76:0b:70:03:81:d1:06:1a:b0:ae:
a9:29:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:41 2024 by rpki-client on console-ams.rpki-client.org