Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.cer (raw, json)
Hash identifier: I8z06TJyzOW2m6BVBbzIjqOLN3Oa49yso3FEBsl1wm8=
Subject key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24F187D6C96A4A80740C2214F1069
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210419
IP: 89.23.124.0/24
IP: 2a13:7100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:18:7d:6c:96:a4:a8:07:40:c2:21:4f:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:96:be:72:8e:30:cb:91:8e:09:bf:86:16:
04:f1:8b:c0:7a:ca:0f:43:59:87:ab:c3:52:f9:c9:
54:17:62:f0:83:85:32:87:b9:63:3c:6d:3b:06:a1:
1a:70:f3:17:d4:d0:f8:a5:c8:ae:e1:f4:8b:aa:6b:
54:88:bb:6e:c1:c8:07:ad:a8:32:20:7b:4e:96:2c:
29:df:cf:d4:6d:5e:f6:07:d5:4b:d4:68:c8:10:be:
95:fe:57:e8:b6:dd:23:7a:f2:48:43:83:e1:d6:c7:
56:f4:cb:f0:17:6f:8e:7c:1d:68:69:44:62:21:64:
a6:c5:16:a3:6d:c4:e1:7b:38:5a:fd:29:de:d4:8b:
65:91:e1:68:f4:51:7a:62:75:d3:6e:7c:42:51:2f:
44:a4:be:66:09:de:34:bf:e2:43:20:99:0a:5d:75:
18:33:48:00:35:b3:ba:c9:30:12:8e:fc:d4:22:33:
c6:ce:2f:69:da:11:3e:04:ee:59:9e:83:30:5c:c3:
3d:75:e9:e0:43:ab:c9:87:a1:a4:75:d3:9c:c3:da:
9f:6f:b2:ca:bd:f8:26:68:3a:6e:b1:f4:ad:61:94:
59:06:6b:ff:ef:2f:7a:5d:56:25:d3:4b:6b:fc:f7:
15:fc:cb:00:a2:ee:78:17:61:9c:e7:0f:b3:b2:3e:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.124.0/24
IPv6:
2a13:7100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210419
Signature Algorithm: sha256WithRSAEncryption
48:86:13:e9:ad:10:38:94:08:75:08:50:ec:b5:de:2f:f3:54:
85:0c:92:48:cb:5d:b8:92:da:21:6c:04:70:4c:78:5e:e1:dd:
e2:0f:a7:e4:aa:30:54:0d:6e:0a:b7:ae:a0:3d:55:6b:c8:19:
24:14:17:d0:20:1c:3f:2a:a6:0a:a6:3b:44:93:d7:32:29:d4:
39:a6:6b:ba:4f:15:34:94:a6:e6:5f:2f:5f:02:d6:f6:c1:04:
0a:21:a5:7f:ab:f5:bf:f3:09:f2:73:85:be:56:46:a2:d5:78:
68:7a:0a:00:6a:fd:02:38:a5:49:f5:56:4d:b0:b6:d1:9d:9d:
7d:d3:65:fc:6d:41:e7:f1:65:12:c9:b5:25:5d:60:08:8b:c1:
16:de:75:b7:57:c0:d4:a0:a0:1b:3b:34:80:da:f6:3d:0f:31:
5f:af:42:37:a4:48:05:a2:8a:23:3f:a6:68:8c:bb:cb:e9:c1:
5b:48:d2:02:c2:53:14:70:7a:85:bd:cb:63:d1:20:11:cf:16:
20:14:e7:62:2d:16:3d:d2:76:d7:39:3c:f1:d5:7e:a2:e6:ef:
5f:ad:a9:5e:36:fe:6d:37:d8:5f:a9:8f:5c:50:2e:51:89:48:
8e:8d:41:c2:53:a1:cc:74:6a:f5:2b:aa:29:98:dc:bd:4f:f8:
23:17:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:03 2025 by rpki-client