Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
File: LkJv6Qhstq8B85H_T2nACDZNbu0.cer (raw, json)
Hash identifier: hJIr6IMPSi3QJlOulswrtJOUy7ONqBX/MAIc1xRbeq4=
Subject key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72DE9AACA9698DC6540E5BBF06B14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.145.247.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2d:e9:aa:ca:96:98:dc:65:40:e5:bb:f0:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:53:5a:c8:4a:cf:ba:3b:71:8a:4a:4e:e0:
19:55:da:d3:0f:89:01:6a:3f:45:a9:75:83:1c:70:
89:71:57:e5:ad:26:b4:fd:c8:0c:e6:d1:76:fb:ce:
4e:bf:81:08:61:dc:26:fd:6a:f1:f9:fb:98:c7:15:
4b:59:8a:9d:5c:50:0c:0a:04:5b:5e:6c:b9:54:30:
20:b9:83:0f:18:0a:22:97:f1:14:39:00:45:41:b5:
74:f6:c6:07:31:d0:15:23:92:fc:ea:bb:b4:d4:a5:
ae:90:34:83:05:df:59:bf:84:f9:e3:85:c1:24:4a:
1d:f5:5f:fc:a0:d3:b8:df:cc:45:70:4a:6a:81:8b:
1f:b6:a5:87:47:57:15:0a:f6:1f:be:5d:a3:56:e3:
cc:27:69:f4:d9:17:a1:46:64:81:72:8a:2f:fe:01:
28:7c:5b:d3:96:49:b2:1d:51:b9:e6:97:56:9f:ce:
39:60:f0:65:0e:e6:16:40:e3:44:31:c4:24:d8:07:
15:a9:18:5d:20:b9:88:16:f4:8c:d3:8f:74:f9:58:
d2:14:d4:b7:59:63:af:bd:7a:a4:78:d4:6b:9e:22:
ca:7f:26:69:b7:98:a5:36:79:0f:3b:83:25:4d:d2:
97:5b:72:32:5d:35:19:ca:e3:3e:75:b0:81:30:50:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.247.0/24
Signature Algorithm: sha256WithRSAEncryption
14:13:74:1c:22:c7:a5:2e:f8:95:32:bb:31:fe:5a:c0:24:ca:
33:49:79:c9:d2:25:f2:4d:dd:28:6a:aa:af:be:56:13:99:37:
72:ae:6b:ca:fc:8a:e6:09:2d:47:0f:20:95:85:d9:83:f0:0d:
50:9c:81:d6:c7:95:1b:65:90:68:26:91:b7:b7:53:05:3d:47:
43:97:8a:f2:37:7a:2e:dd:3c:b1:82:fc:e2:64:7a:1e:90:04:
af:52:13:03:67:c6:36:b2:43:08:08:af:16:a4:35:cb:97:f1:
aa:42:1b:ce:1e:e6:bd:dc:9d:cb:d7:71:45:6a:ac:fc:7f:73:
8c:6c:26:d7:75:cd:f1:e5:b0:8a:8d:ec:0d:ec:4f:ea:4d:e5:
fb:df:8a:ee:70:48:53:a8:3f:44:ec:0f:21:28:ac:81:79:f1:
a3:d8:13:c6:0b:27:cc:78:08:3a:c1:21:4d:8b:dc:64:ee:01:
ea:85:74:79:1e:fe:24:99:cd:75:bd:3c:f8:4a:08:4d:e6:c1:
3d:a6:7a:dc:0f:b9:a3:92:01:9b:47:ea:1f:e4:51:b8:cb:f7:
f2:0d:8d:5a:1f:0b:fa:b1:27:30:93:6c:fe:8c:9e:03:6f:be:
b0:57:9e:fe:b3:8f:a6:78:df:6d:db:a1:7a:f4:15:3b:0b:ab:
c6:8a:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:27:30 2024 by rpki-client on console-ams.rpki-client.org