Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
File: LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer (raw, json)
Hash identifier: WmQRi6+0kFZHrMes2p8ZgnkuZIgoDFLpXlhsjojxZRY=
Subject key identifier: 2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF027CAA8DD557AD5042F30F3B983D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.37.134.0/24
IP: 193.37.155.0/24
IP: 193.37.224.0/24
IP: 193.37.229.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:02:7c:aa:8d:d5:57:ad:50:42:f3:0f:3b:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:bd:d2:06:e7:77:8a:d1:c3:32:bc:31:2c:
7c:d0:5e:b1:ab:38:23:cd:27:fe:c9:27:b3:15:c0:
82:18:78:da:f6:d4:21:af:b4:1e:a2:fc:49:8e:63:
31:26:3d:6b:bd:61:9d:75:46:55:e9:56:81:d3:fd:
c1:e4:1a:ab:ff:28:74:45:8f:d2:89:4d:61:bb:d2:
59:2b:40:f2:a2:80:98:7f:24:10:89:46:56:f2:e3:
92:7f:38:a9:8f:c6:d6:56:41:7c:44:97:72:bf:c9:
42:76:68:5f:93:36:95:d7:8a:8a:5f:f8:11:72:1b:
cd:e9:2f:1a:09:b6:2d:ad:f7:c6:d9:83:6a:a3:53:
4c:3a:7b:17:11:51:b2:d0:cb:1e:93:a0:a0:e4:e3:
c3:12:8a:8b:80:3a:36:bc:38:92:a3:c5:f4:c0:47:
bf:bb:88:2f:e2:d2:04:b1:d3:85:c7:db:8e:52:16:
a2:ba:df:7a:10:6a:84:1b:d7:19:4c:ec:61:f3:24:
5b:d0:cd:c5:d1:64:93:5d:40:14:9d:f0:29:2f:72:
59:91:85:84:f4:50:b4:e5:84:22:6b:d0:60:0a:fa:
a8:b3:73:e6:f5:00:9d:9d:2b:57:e4:3c:f0:36:d4:
93:54:e6:8f:42:f0:bf:b2:65:33:08:26:95:f9:d4:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.134.0/24
193.37.155.0/24
193.37.224.0/24
193.37.229.0/24
Signature Algorithm: sha256WithRSAEncryption
11:39:17:69:a7:6a:be:8e:22:22:19:9d:d1:0f:6a:ed:05:c7:
f2:dd:95:cc:6d:98:7e:00:43:27:be:d8:d0:9f:4c:df:3f:22:
6a:4e:7e:19:34:fc:14:a0:a5:74:24:dd:09:a8:0b:e0:13:f4:
cc:e2:ec:d8:b6:44:f3:02:17:c5:c0:71:c3:c0:d5:34:9f:87:
ab:0c:10:35:2d:24:cf:49:e2:6f:a2:4c:8b:2f:95:29:59:bc:
9f:78:4f:55:16:80:0c:29:ca:07:9e:9d:f1:e5:4a:14:7a:9b:
b7:00:23:05:fc:64:94:e7:8e:49:24:5b:f9:38:ca:ee:77:6c:
d5:9a:a1:c5:98:86:65:d3:94:fd:8e:a0:10:29:70:64:4a:52:
f8:f6:8d:3d:7d:08:75:e2:45:e6:87:10:dd:3d:6e:c4:5e:93:
86:62:90:de:98:f6:5b:f7:f3:0c:a5:7f:b1:c4:64:47:6b:5d:
c7:6e:fe:87:10:87:e5:93:c4:9a:12:89:37:f8:92:05:c1:f1:
6a:43:da:e4:14:7b:1a:29:3c:68:51:56:bf:6a:da:5e:b9:b5:
26:46:3e:4e:6a:d5:a4:94:6f:0a:32:2d:94:36:5c:2f:a4:de:
bd:cc:bf:c5:d8:9c:a2:11:93:17:24:b5:60:f8:62:af:4a:49:
62:24:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:03:50 2024 by rpki-client on console-ams.rpki-client.org