Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
File: Lokc9xG_fhxC4ILWoviaBL7rldE.cer (raw, json)
Hash identifier: s+4ZdeDOGoFRuqdGQ8OU/hcU0BKDX0GEQhSBqoE4cGs=
Subject key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019465AF3D7CA3A40EE63675F2F8A9BBEBBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Jan 2025 16:39:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196979
IP: 193.203.56.0/22
IP: 194.88.214.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:af:3d:7c:a3:a4:0e:e6:36:75:f2:f8:a9:bb:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 16:39:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:d7:57:38:7c:11:8b:79:4d:41:95:52:42:
7b:39:cd:73:88:66:a6:f3:cd:9f:bf:03:a2:e4:90:
9d:91:b8:86:fc:92:fb:16:07:59:6c:1b:40:fd:07:
01:c6:d2:db:dd:7f:bc:0c:a8:2c:76:54:e2:82:ae:
0f:f1:b6:74:dc:47:0a:cf:75:e7:2a:bf:a4:4f:04:
2b:08:76:af:e2:85:1b:8c:0d:21:8f:1a:db:15:33:
ec:27:4c:32:4a:d0:25:1c:83:9b:8f:fb:00:d8:81:
58:fa:18:24:58:1b:c4:a2:54:36:22:cb:31:db:37:
3c:4c:cb:82:88:bd:dd:92:c1:d7:ee:de:9e:24:f2:
34:2f:46:c7:f5:74:23:e7:ce:e9:45:b4:20:09:7a:
af:e3:69:2d:63:4f:77:01:d3:4f:b3:bb:ad:30:c4:
bd:d5:05:0f:f0:59:32:d9:35:b3:a7:72:04:f8:45:
4a:6d:35:b3:12:39:b2:db:46:85:26:03:44:48:33:
48:2f:f6:4e:78:94:54:fc:de:f3:46:7e:45:25:c4:
8a:ea:96:4e:0d:7a:28:2b:ee:30:d0:fe:79:58:47:
af:69:93:02:e6:58:bf:89:41:dd:16:e5:4d:dd:c7:
7b:e2:68:43:c1:70:5c:8d:e8:75:27:7f:40:02:1e:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.56.0/22
194.88.214.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196979
Signature Algorithm: sha256WithRSAEncryption
6e:fb:8c:e3:6b:df:2a:70:3f:08:c5:87:b2:84:b0:4d:16:44:
99:5c:eb:22:0a:9c:6e:15:92:57:6b:bc:af:0e:31:6d:38:45:
b4:c1:b0:27:78:3a:75:4f:02:19:28:82:b6:a8:9d:e1:67:da:
bd:62:01:05:b3:bf:8c:6b:10:be:14:df:26:b1:e9:96:fb:e6:
54:eb:53:a3:b5:34:3d:bb:e7:f8:82:0b:c4:8d:04:a5:1f:09:
89:d3:ef:39:b4:a6:ae:f8:0c:95:50:12:1a:ce:1e:d5:7d:52:
fd:95:c9:4b:54:98:c0:1e:3d:d2:b5:2d:e4:e2:cd:d2:d9:66:
32:38:25:75:4b:27:fe:ed:2a:b7:e4:7e:49:eb:52:51:bd:93:
ab:30:be:dd:78:52:03:c5:72:db:dc:55:57:cf:66:9a:84:f2:
0e:43:e3:94:fe:4d:70:9d:74:26:e0:57:57:e3:b0:ca:52:b7:
6f:b9:7c:59:ec:bd:88:4e:a9:b6:e7:c8:1c:21:b6:76:c9:e0:
3a:e1:a1:d3:35:08:33:09:d4:cd:e1:c4:a1:37:f2:0a:c2:3c:
52:35:0c:9b:a6:cf:0c:27:e8:27:4f:ba:82:14:56:7f:a8:a2:
d8:da:06:9d:99:6a:d5:d8:05:d9:64:86:69:19:b7:6b:0c:ab:
1f:3f:ae:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:15 2025 by rpki-client