Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LifautL9KM9ni_eWEO-r-EZ1Qz0.cer
File: LifautL9KM9ni_eWEO-r-EZ1Qz0.cer (raw, json)
Hash identifier: LJf7OSyuBDnTQc/dqBUb4A1Oavdj6RQ/0wk92kW5TRI=
Subject key identifier: 2E:27:DA:BA:D2:FD:28:CF:67:8B:F7:96:10:EF:AB:F8:46:75:43:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D8E47F7E5C2BA9EE09CC42D7D606BB07C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/LifautL9KM9ni_eWEO-r-EZ1Qz0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Feb 2024 14:31:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215538
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:47:f7:e5:c2:ba:9e:e0:9c:c4:2d:7d:60:6b:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 14:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e27dabad2fd28cf678bf79610efabf84675433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:9f:73:1e:67:d5:7b:79:6a:b4:fe:7b:7d:
5a:a4:ca:b4:d8:3d:93:16:76:2b:9b:f1:b3:76:87:
2d:04:42:b3:98:75:ee:c4:2b:ed:89:ca:9d:5a:a7:
7f:0d:b0:9c:35:e3:87:d1:71:c1:e2:be:8b:99:60:
bf:b6:eb:52:20:3d:c0:61:2f:62:00:49:34:f2:df:
25:e3:18:39:95:53:db:4e:bc:88:bb:24:13:0d:e9:
ab:4b:53:b3:40:db:9e:c9:c9:50:af:dd:24:42:bc:
11:e2:2b:f4:8c:fa:af:be:40:13:2f:97:3a:38:ce:
4c:cc:d9:c2:02:f2:10:b9:cf:7d:81:fe:cc:c5:9a:
77:6d:15:18:ed:ae:66:1c:53:66:40:69:11:d6:4f:
7f:ec:2d:52:fd:a0:23:74:a5:ce:ff:85:4d:f6:0d:
1f:fd:b2:1f:d1:7c:bd:6e:cc:ea:9a:6f:e4:f5:c2:
1d:d4:1c:df:16:70:e7:b7:aa:7a:4b:a3:ea:e5:dc:
e8:15:48:ef:88:2b:f3:c5:92:5e:11:c6:e2:d9:b3:
2a:c7:cb:4c:c7:4b:2e:b9:d7:bb:a5:22:03:8a:53:
44:13:a7:31:31:26:29:33:a9:4d:ac:3a:a6:dd:ff:
95:a9:f1:ca:5d:c6:ca:30:5c:4d:9c:4c:e5:d7:00:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:27:DA:BA:D2:FD:28:CF:67:8B:F7:96:10:EF:AB:F8:46:75:43:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b1ecea-6968-4b26-b9be-29010c0244cb/1/LifautL9KM9ni_eWEO-r-EZ1Qz0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215538
Signature Algorithm: sha256WithRSAEncryption
02:36:af:fa:99:74:b4:51:b5:0d:2f:19:e2:4e:b9:23:c2:79:
90:f0:2e:0c:1e:9d:36:07:4c:2d:42:5d:d0:63:bb:4a:cd:e3:
c6:6a:06:bc:ff:ce:58:7f:7b:54:2d:77:72:b7:68:5b:ec:29:
58:73:5e:d0:bc:47:34:3f:68:da:a0:e6:d9:7f:ab:f5:f4:3b:
bf:ab:b5:b1:df:8b:1f:d7:8f:a7:55:11:c1:9e:c2:9d:3b:a1:
12:48:82:2e:a9:d9:f1:88:28:87:c8:a2:b1:a2:a9:4c:3f:a6:
71:2e:9b:69:ea:10:b1:b1:ad:b4:ac:a7:e6:04:44:2e:f2:41:
09:4c:c4:e6:69:1a:66:59:2a:30:33:6e:e5:08:56:ef:c0:aa:
fa:dc:7b:9d:b2:29:46:93:8b:4c:cb:a4:6b:bf:54:10:64:08:
30:ff:0b:28:15:7a:ce:e3:e9:ee:9d:3c:dd:7b:fe:57:f6:d6:
b2:b1:5a:4e:7c:73:af:74:1b:7d:a4:a7:1e:37:45:35:01:9e:
da:c7:4d:d5:51:11:0d:b4:9a:6d:8b:4c:e4:5b:3d:18:90:e4:
3c:d4:e2:2c:2c:98:77:15:c6:32:73:44:21:58:f8:64:0f:6b:
cd:a8:22:58:50:c3:49:cc:2f:7e:31:ea:77:fe:00:da:5c:e8:
5a:84:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:48 2024 by rpki-client on console-fra.rpki-client.org