Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
File: LkFFfaHqbHmxtr6lLGSnobXylkg.cer (raw, json)
Hash identifier: l5rrg0oU6ia33q3Aesw2D4Vfo41o6wCJfUgOQW0PwVM=
Subject key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011C8442BB2D0B0EEE7F6773742107
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202060
IP: 2001:67c:558::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1c:84:42:bb:2d:0b:0e:ee:7f:67:73:74:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:f5:40:75:f9:fd:bd:a5:65:bc:84:64:37:
31:4a:56:77:f0:96:2e:db:85:18:92:ac:f8:74:d7:
c3:84:9a:76:d5:d4:80:36:16:af:16:eb:91:51:2b:
a9:f8:35:c2:35:19:2b:b1:07:18:d0:7c:88:0c:64:
37:a6:1e:51:10:64:ce:36:17:d4:a7:5a:76:30:68:
04:72:8f:be:96:2f:fb:33:2a:ad:02:fb:34:2f:a9:
f3:19:95:91:f2:ef:5d:2c:58:ef:7a:c6:ef:d9:65:
b6:bf:9b:ac:47:d7:b3:27:de:a2:9e:a4:ff:38:c3:
e6:71:9c:23:15:a6:60:42:64:37:07:bc:0a:47:2c:
01:0e:87:d6:69:2d:f4:72:d1:22:81:71:cc:db:a9:
65:51:56:03:fc:d0:31:7c:6d:6a:4e:94:53:0e:10:
5e:76:79:c7:17:43:c2:3d:d6:39:0d:6c:3d:a9:76:
c4:fa:1e:61:ba:87:17:29:c5:c1:9b:ce:ed:77:02:
fa:e7:75:ec:c1:d2:02:d8:51:04:88:5e:31:ac:40:
59:f3:ad:9b:a1:0a:af:00:76:51:3c:a5:01:8c:7a:
c8:23:a9:6a:57:26:2d:52:3c:79:ac:85:e1:8b:cf:
38:0a:5e:f5:a6:30:84:be:89:60:bb:42:7b:be:bf:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:558::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202060
Signature Algorithm: sha256WithRSAEncryption
85:58:38:fd:7b:71:82:6f:fe:45:33:f4:03:ef:a7:2a:7b:cf:
d2:d1:60:bc:43:87:57:3f:f1:24:05:25:8d:0a:35:8c:f9:19:
73:50:d8:54:4c:3d:29:1b:1f:e3:4e:e9:6f:01:be:a0:ed:54:
af:13:cc:75:5d:25:3a:91:1c:00:39:43:6d:6d:9e:2c:ba:94:
a6:0f:09:5d:f4:ef:ca:62:e4:d1:05:23:9e:28:11:d9:87:b8:
d0:47:b3:f1:ea:3d:08:2b:c3:bb:b3:c2:7b:9d:1c:80:d5:1e:
72:98:22:ff:d4:d8:7c:00:9e:25:79:5e:c1:10:dd:5a:aa:6b:
64:17:9a:44:0f:14:65:7f:51:6b:34:9e:97:b4:e8:bf:b6:23:
bd:f9:cd:bf:46:3f:10:07:93:f3:66:72:1a:16:92:8b:2b:cd:
9b:b4:9c:86:1c:77:64:89:dc:b4:2f:f6:75:8f:5f:8c:5a:67:
19:7a:02:00:7a:ed:11:aa:a3:56:25:92:0a:d4:98:5c:99:44:
c8:47:4d:39:c0:06:b0:a3:19:b6:c1:fa:0d:cb:a5:59:64:33:
e0:55:88:42:d0:f8:61:52:31:90:f5:80:a3:f8:77:0e:2a:82:
a6:73:66:a7:7a:1e:cc:8b:5a:88:55:5b:4f:93:5b:43:7e:57:
d9:d2:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:29:13 2024 by rpki-client on console-ams.rpki-client.org