Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
File: LuliCJJdg2-NA30XmYCoOhsME0I.cer (raw, json)
Hash identifier: p7A/NCzeC7hOD5SqAQFLKbDiYxVFDgXwlowDIpBF1mk=
Subject key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D2A6E7520A3003C1ADFB1BB14184F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201107
IP: 193.30.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2a:6e:75:20:a3:00:3c:1a:df:b1:bb:14:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:be:ce:67:c9:86:8d:53:78:9d:6f:3b:93:
88:e2:0b:32:36:7e:7a:7e:53:bc:e3:fa:e7:5b:8b:
fd:53:11:5a:4c:9d:be:17:4b:81:f3:fe:41:69:b7:
80:dc:b8:4d:98:01:07:98:40:b1:86:14:5f:36:b5:
df:0d:04:6a:fa:b2:b6:1c:11:86:14:6d:0c:ec:0c:
29:64:d5:62:64:cd:9b:04:b9:27:3e:21:6a:79:44:
d6:24:fe:aa:36:bc:22:d0:40:d0:46:13:05:79:40:
11:65:d1:e0:96:15:da:9b:61:5c:2e:6d:d8:2f:b3:
43:82:46:a1:af:e6:ad:7d:30:ff:9a:63:91:c9:4f:
d2:74:42:b5:85:7c:e8:dc:dc:a5:5c:f9:58:cf:48:
21:f3:c8:64:bd:e1:02:51:f2:0c:2f:25:21:ca:c4:
7a:98:03:1b:5b:8e:7e:e0:04:9b:f0:11:24:a8:4a:
02:ca:06:61:f4:a8:ed:82:f8:97:cb:3b:7c:ee:29:
dd:c7:32:0b:c5:39:d7:40:5b:5f:d1:4b:fc:90:82:
00:48:e1:c1:1f:68:8c:34:f6:05:e8:a4:ab:b6:cb:
f8:ca:af:2b:ff:5d:03:8d:50:51:fb:10:60:c0:a6:
d1:21:b8:a7:7a:c3:bb:8a:af:de:50:7e:db:d9:08:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201107
Signature Algorithm: sha256WithRSAEncryption
6e:11:ab:67:7b:7a:ea:36:45:30:a3:02:f2:a0:d0:bc:01:b6:
f1:22:fc:ad:ec:2d:25:ec:18:a2:bb:08:53:7d:ce:c6:ae:94:
31:32:8f:37:f2:1b:9b:d2:8f:23:74:c2:da:47:e8:86:30:4d:
eb:3c:29:11:bd:b1:86:f1:25:9f:09:93:df:55:55:df:87:ea:
69:70:02:ee:1d:3e:6b:d3:5e:b4:1d:e8:65:7d:a3:64:f8:d3:
7e:ce:ad:f9:c7:7d:e6:9d:03:e7:22:ea:c6:44:80:37:ad:ab:
9a:42:9e:9d:8a:2b:f7:e0:7a:44:24:a7:a3:7c:84:45:c9:12:
ac:5b:7a:c7:31:7e:ba:f0:e3:d7:e4:11:16:68:dd:03:15:28:
ab:c0:e8:15:4c:a3:09:e8:62:14:c5:b3:6f:2d:8a:a8:ce:34:
7e:55:9d:79:70:e8:23:b0:b5:eb:0e:e7:b6:49:b3:7f:8a:9e:
2c:a5:2b:ec:f7:5f:ff:88:ec:c4:f8:f0:0f:60:69:00:6b:a8:
b1:eb:73:86:69:20:f0:5f:7f:0a:d5:61:91:e4:d2:c9:be:f9:
4d:a6:02:0f:da:65:b0:29:3b:f7:7f:92:4f:8a:62:cb:11:fc:
5f:23:2b:ff:3b:0f:fb:73:37:36:9a:4a:6e:f7:5b:a8:e9:23:
48:0f:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:41:42 2024 by rpki-client on console-ams.rpki-client.org