Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
File: LX893KDLOOx7CMaQKeIPUtxAjxc.cer (raw, json)
Hash identifier: mtxXyGpjNwISG8LwaftuTq5w0TbN4NsZRf09ZKpif9s=
Subject key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65505383F1B386981053B8F09ECC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35262
IP: 193.27.1.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:05:38:3f:1b:38:69:81:05:3b:8f:09:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:db:1b:4d:5b:cc:bf:ac:09:5e:e5:db:23:
44:70:45:1c:51:29:01:10:96:68:d4:6d:52:de:90:
97:94:48:89:0d:6d:6d:a4:ad:10:ee:ed:b9:e3:c2:
c6:ac:c3:7a:74:0d:ad:e9:53:46:ee:f1:b3:e6:61:
1b:b2:79:23:6d:ef:27:d9:ed:8d:8a:3b:4e:0c:66:
de:01:ee:98:18:3f:04:eb:54:60:e0:37:dc:58:a4:
95:d6:13:26:91:88:28:c0:ca:fa:f2:c9:7c:79:d3:
fb:b1:82:39:f5:d0:34:30:32:35:64:2b:f7:d6:3f:
60:5e:e9:4a:91:a1:5c:1a:22:c5:d3:d0:a0:77:10:
7c:38:b2:05:17:b1:e9:84:9a:e1:a9:8e:7a:83:7b:
25:5e:e8:78:46:f8:c2:30:ef:88:de:1e:08:5a:0c:
d5:4a:6d:e5:7d:c3:c5:56:dd:9d:0f:df:76:e2:60:
b8:f1:78:df:92:4b:80:7c:53:c1:35:79:fa:26:ee:
c3:09:44:40:66:a3:e8:1f:ee:57:58:70:3c:69:4f:
45:0d:f7:19:ab:11:25:a2:e7:a6:7b:95:d7:96:7f:
f6:8d:8b:2b:af:ac:74:b0:14:32:d5:fd:76:93:f5:
f2:a5:b8:f9:ed:4a:01:94:a8:1e:4a:e6:82:50:df:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.1.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35262
Signature Algorithm: sha256WithRSAEncryption
65:c5:61:e3:58:46:bf:78:b2:33:99:b5:5d:0a:6e:ad:a9:31:
27:db:fe:c2:82:62:93:b7:5c:6a:8a:22:2d:5e:c3:ca:06:53:
45:77:28:76:f0:59:16:d5:93:29:cf:fe:a0:4b:1a:d8:a1:cd:
21:40:de:a1:d7:5a:da:67:19:90:ec:d6:af:dd:06:bc:ac:53:
36:db:12:74:56:a0:6d:7f:c5:da:7b:6c:48:fb:70:6c:9b:36:
2b:0d:1e:8f:a5:73:b7:7a:80:67:79:df:26:55:4c:1b:32:ae:
65:ea:ad:b0:d5:74:b8:22:37:6e:25:5f:50:6d:6e:2d:17:d6:
bb:f4:09:5a:35:67:56:0b:e2:f8:a1:5e:62:25:97:53:62:93:
da:73:29:0f:d7:52:b4:b6:53:2f:23:c3:96:52:90:b9:13:6c:
d7:a4:73:d1:5a:0d:e2:f3:ce:d8:39:55:10:ca:4a:51:2d:77:
98:aa:7b:c5:46:8b:57:38:00:ef:b2:c4:f2:7a:5c:6c:30:eb:
09:f1:00:44:a0:db:65:d1:71:9d:e2:e9:ff:eb:1a:5f:75:b8:
4e:25:a0:ea:58:b3:3a:3f:d8:1e:d9:34:8a:96:3d:17:b5:92:
41:da:29:4e:3d:de:b7:bf:ef:a9:db:9b:ff:2b:7e:ed:5b:80:
c7:9f:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:17 2025 by rpki-client