Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
File: LXR59FZDorguENq_c-_vdwOx4tI.cer (raw, json)
Hash identifier: ZQXHGPV3qQEXjigPtLcz7nWf4Rky3ljGbIpc7W0t89M=
Subject key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80107FF1C6ED4567615A305517FF2DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41405
IP: 45.146.212.0/22
IP: 91.223.159.0/24
IP: 185.123.84.0/22
IP: 195.200.217.0/24
IP: 2a06:ac00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:07:ff:1c:6e:d4:56:76:15:a3:05:51:7f:f2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:f4:fc:ff:bf:6a:40:1b:26:fb:91:c3:55:
0e:34:f5:d7:a3:e1:28:3d:18:4e:66:f7:0b:26:67:
a6:01:12:aa:ed:92:9e:ff:a6:d5:10:7e:9f:b7:15:
ef:06:6e:ed:eb:6b:18:ba:83:5a:95:80:04:20:1c:
7f:7d:85:7d:c1:8c:a4:e5:57:54:16:a2:65:79:bb:
75:d1:43:99:2f:81:0a:4a:12:9d:a4:56:61:f2:5c:
83:91:8f:e4:bf:c6:29:d0:b3:66:1b:c9:77:bf:06:
d1:c3:69:bc:85:3e:e2:f0:46:0a:cc:3c:d8:c4:a9:
78:02:d1:26:53:74:6a:e2:f1:c9:1d:86:e7:9a:06:
6a:83:01:4a:fb:3a:36:0f:71:fa:f4:44:20:df:0a:
4e:ae:a1:6f:61:f4:4e:86:70:af:14:d4:c8:11:84:
5d:d5:52:ed:92:a0:a2:c8:93:e5:9b:b4:e0:0d:ff:
be:40:ba:8a:e3:80:0f:07:2d:77:9f:d3:a4:b5:72:
4d:86:92:4f:46:a3:64:05:e2:53:45:46:61:4c:49:
f0:bc:ef:dc:03:e3:bd:99:6b:3e:90:cc:3a:ed:b8:
c8:4b:b7:23:73:1a:c5:bc:42:dc:c6:2b:3f:74:46:
50:9d:13:5b:6f:1e:eb:c5:0e:e1:44:c5:da:2f:37:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.212.0/22
91.223.159.0/24
185.123.84.0/22
195.200.217.0/24
IPv6:
2a06:ac00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41405
Signature Algorithm: sha256WithRSAEncryption
4c:3b:c6:c7:4d:6d:9c:c6:a8:62:c4:3f:a5:db:cd:b5:09:aa:
97:12:5d:77:f1:64:99:3d:78:ef:36:36:79:6d:d8:e6:8f:64:
a2:7f:32:34:9a:8e:ef:b2:5b:e3:7e:2b:59:b3:91:b7:44:4b:
fc:4f:4f:b2:c5:e1:ae:e6:0e:45:c2:fa:ec:17:8e:66:24:8b:
dd:12:b9:19:69:cf:c6:38:ca:5f:d8:a9:38:d1:8c:da:6c:ad:
02:49:07:a2:2a:d5:df:0f:4d:50:ac:62:13:f5:98:e7:28:ed:
2f:71:fa:ee:49:0a:75:6a:61:d8:06:27:c2:dd:ac:18:aa:a2:
2e:ad:66:28:93:9d:b6:17:46:cf:32:2a:27:bd:52:94:ef:98:
61:bb:44:b8:1a:c7:f9:b2:e6:fa:44:51:90:90:5f:9d:81:e6:
17:8f:ce:1d:92:fa:13:e9:89:18:e0:2f:36:1c:3a:22:5b:9c:
3b:e4:d3:5b:40:74:d7:92:87:50:af:35:2a:da:40:13:b2:db:
ca:00:56:19:ff:63:49:e2:e0:12:e3:f8:e6:d9:44:cd:41:8e:
82:90:d8:59:7e:97:a4:81:60:03:1b:4c:7e:85:9f:17:b3:89:
6b:79:8f:07:ac:34:f2:ce:79:de:18:9b:b9:b6:83:5f:47:f4:
0f:d4:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:41 2024 by rpki-client on console-fra.rpki-client.org