Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
File: LrTU3kCE88jhpPbU01U5B6sMgIo.cer (raw, json)
Hash identifier: vOSXLTuFdedLW/JBpgxOMRny6d5ABS556m2Gv/glGq0=
Subject key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72750F26BEB403DF310D44B978CBAC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.11.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:50:f2:6b:eb:40:3d:f3:10:d4:4b:97:8c:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:3f:10:22:1d:ca:4f:43:ab:91:d1:37:54:
4c:9f:1e:08:9a:1c:d0:50:43:d6:80:cf:ec:ff:9e:
b7:61:eb:1e:05:37:38:29:67:5d:ea:c1:d1:7e:bf:
5c:41:c8:eb:07:d4:09:1d:13:91:6e:b6:90:d2:af:
fd:d7:9d:c6:da:a2:67:d8:5e:e9:a5:27:16:77:79:
66:4d:cf:f0:59:1a:d1:9e:d7:ce:60:3f:91:c6:c0:
b4:d9:d7:89:6a:49:ea:66:f6:4b:6f:f9:85:46:51:
56:e7:14:e2:43:84:24:40:4d:fb:66:33:37:32:f7:
a1:7c:56:cd:b4:e6:35:15:5e:55:86:e3:89:98:f2:
4d:77:43:e5:a9:e3:57:38:96:f1:d4:15:7f:ac:9e:
3d:72:78:55:f5:ce:9f:e1:d2:d6:38:7b:e3:14:e5:
5d:17:ab:59:af:4b:79:ec:fb:7a:df:dc:5a:06:04:
c2:b7:76:8a:5f:41:76:0e:2c:be:34:de:8f:64:be:
10:a6:d2:9f:bd:9c:67:20:29:e5:c3:bc:42:c8:bb:
b7:39:aa:44:8b:0c:3d:29:25:5e:6f:a7:95:d1:e6:
c8:8d:19:14:d4:20:34:2d:ea:de:48:23:16:8e:e3:
87:1c:af:94:3f:6e:e9:bf:fa:c4:61:e3:13:09:2c:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.64.0/22
Signature Algorithm: sha256WithRSAEncryption
73:fa:f8:db:27:e6:ec:dd:84:12:4a:53:2b:7f:f6:b9:2d:3a:
5d:3e:4c:36:fe:7a:11:dd:d0:3e:a5:51:89:fa:c7:af:42:1e:
4d:e8:a3:01:cc:1e:7e:a3:6c:b8:de:75:96:4e:c6:2c:66:36:
a2:1d:e1:3a:3a:bc:dd:d8:70:18:5b:87:ff:46:e8:c7:6e:0a:
55:b2:93:61:45:38:9c:6b:b7:18:f9:4b:5d:ba:c1:e5:0a:30:
64:1a:27:0f:6c:04:3b:5e:34:54:21:ec:1a:bd:a9:ce:d3:fb:
35:87:0f:a1:e2:cb:84:bc:47:87:7b:f3:f5:10:60:13:fb:1a:
47:e9:e5:9e:2b:86:63:07:7a:d9:d7:84:d9:70:47:d0:81:0e:
e8:64:92:9b:b2:73:31:d8:75:94:23:2d:c0:8f:12:6d:ac:2e:
8f:69:5d:22:a5:be:8f:6a:9a:6f:d5:ce:42:9b:3b:94:51:90:
68:e6:3f:c1:25:d7:49:c4:5f:d3:59:0e:13:34:3e:f4:99:dd:
86:1d:9d:82:20:39:68:d4:6c:57:0b:4c:95:31:4c:cf:0d:78:
f4:d1:87:93:b4:e6:bc:04:ef:21:90:12:15:fa:8b:4a:65:4a:
f0:5c:1a:77:c4:89:49:39:1d:a6:17:18:58:c2:c4:e2:1d:d8:
f6:6b:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:56 2024 by rpki-client on console-fra.rpki-client.org