Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer (raw, json)
Hash identifier: YSiO+wi23T549iSF866nxws+kR/IO72hfUKPKS1prtQ=
Subject key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB476D17FD13EA4F90F95F10B90848
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.82.32.0/22
IP: 2a05:8b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:47:6d:17:fd:13:ea:4f:90:f9:5f:10:b9:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:89:ab:56:96:d8:33:a6:6f:c6:0a:62:95:
c6:96:0a:44:d0:c5:30:22:6d:72:90:f7:a1:5c:5e:
b8:af:a4:40:05:db:09:a4:4b:df:4c:18:f3:13:41:
cf:17:3a:71:6b:e6:42:ca:4d:5e:01:5b:5a:b5:bd:
78:0a:c7:17:ff:62:06:ad:dd:46:91:97:79:11:f1:
54:7c:92:94:2f:93:3e:20:d9:f9:1b:b8:0c:55:1d:
f8:15:47:76:ff:4c:db:c7:ca:53:e6:0c:96:55:42:
9a:82:0d:4a:ba:74:28:51:cb:f1:ac:8c:b8:a0:e5:
f1:b7:83:55:7a:9c:61:2e:77:8e:d6:18:88:d4:f6:
bd:ac:b4:ce:f6:27:2d:11:9d:f3:23:d3:d6:99:4f:
d5:ef:39:33:37:b5:b9:9f:1c:27:13:3e:1d:7d:55:
6e:89:7c:c8:ea:01:75:60:ad:ba:0e:87:27:a5:2d:
07:91:f5:29:d1:39:6a:10:88:b9:f2:83:09:9f:3c:
c1:cf:b0:67:c7:59:cf:d1:65:c8:e1:b4:b4:bb:0b:
ef:7d:9c:e0:58:c8:91:77:d4:52:90:7d:f2:04:88:
09:39:f8:f7:d2:46:7f:bf:88:83:2e:b5:82:c9:09:
ed:ee:62:65:19:83:b8:34:96:1d:06:81:48:7e:5a:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.32.0/22
IPv6:
2a05:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:56:b6:1b:7a:24:4e:b5:ed:79:5d:77:d7:b2:78:89:4a:60:
74:fd:e7:ca:65:08:ae:86:1a:03:8d:19:5a:36:3f:d2:58:96:
1e:c7:49:31:dd:af:3e:d9:f7:b5:0d:a3:18:0c:3e:eb:b7:91:
22:ca:1e:c6:32:70:e7:c5:49:f5:96:4a:5b:9b:50:da:d8:2d:
8e:f2:af:94:4d:76:ef:3d:f8:36:96:d9:e9:84:32:9a:2f:f0:
70:de:56:9b:2a:85:5c:ba:e5:5b:60:f7:37:c4:6d:a2:64:90:
c1:1c:c9:a2:e7:06:09:72:da:ee:87:a8:6f:30:2d:7e:82:f9:
a8:7c:0f:4b:ca:2a:bf:5d:8a:38:38:79:7b:9b:46:f4:d0:8f:
5d:e6:a1:f4:f1:bf:a7:6f:53:1d:be:09:5f:28:12:8f:30:a8:
ad:c7:98:15:87:58:84:de:65:1f:8b:88:9a:89:9b:fc:d8:d3:
6b:fc:d3:4f:54:e0:6f:2e:f4:7b:e2:4b:ab:56:d5:d0:74:c6:
72:6f:90:e5:f1:4b:a6:59:9f:11:a5:43:18:e2:e5:8a:6b:71:
45:a6:85:df:ea:86:03:85:9a:ac:d9:4b:87:84:a0:dc:6f:86:
4f:3c:35:88:a5:72:da:35:cd:92:2e:38:86:a9:98:95:3e:62:
25:e8:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:52 2024 by rpki-client on console-fra.rpki-client.org