Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
File: LxiqH1XWNcliBMp5qCmT-87BUSw.cer (raw, json)
Hash identifier: QyIS+W69/xw84JRjI9YJXMscnTUqTHmqDNMXloBbzFQ=
Subject key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9153055265DDED8761C960E8B8C0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209607
IP: 91.200.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:15:30:55:26:5d:de:d8:76:1c:96:0e:8b:8c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:4f:29:1f:4a:17:d1:fc:9f:bf:74:cc:99:
c0:fc:79:bb:5a:a1:68:d1:c1:f1:1c:98:ce:01:10:
eb:ba:85:1b:b6:22:f8:37:23:8e:04:65:f1:9c:be:
28:38:45:ca:5e:85:72:2d:b4:6d:3b:5c:97:97:5c:
6f:a4:0e:16:18:8f:22:52:50:c7:c2:04:9e:38:c0:
37:b6:59:a2:81:ea:00:29:8d:bc:65:92:74:05:f2:
50:0b:82:09:bd:49:81:c6:7b:6c:65:ed:e4:15:a9:
b8:8a:4f:ea:b1:13:a5:bb:dc:12:2d:c9:df:de:ce:
13:9f:9c:d6:34:be:c8:16:31:7d:28:5d:07:da:44:
97:90:7c:29:72:cb:50:82:fb:c5:04:a7:b7:a3:4f:
74:b2:4a:42:dc:3c:13:2c:75:42:d3:5a:2a:70:bb:
02:2e:b9:bb:4c:7b:33:6f:e5:c0:87:95:7d:ff:c5:
7e:f0:38:31:b2:62:e1:fa:cb:a5:27:2e:cd:f0:8f:
fb:b9:03:a0:6a:2b:90:d3:29:64:a0:3d:39:34:da:
af:c7:cb:ce:9f:ac:9a:d6:a2:e3:49:28:36:34:0c:
7e:d5:45:b5:41:90:40:fc:12:bb:7d:43:89:12:50:
30:c2:f8:a9:93:ba:10:c4:b6:49:4f:d6:8a:a7:e2:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.75.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209607
Signature Algorithm: sha256WithRSAEncryption
9d:7f:76:5f:57:5c:ae:d8:4b:84:2b:50:46:fa:1f:ae:d2:9a:
68:2b:98:e7:37:8c:87:8c:c0:6a:bb:e4:fd:bc:83:95:0e:44:
20:55:d0:f5:3c:07:60:4c:42:2b:b3:84:de:23:09:5b:61:79:
63:fc:1b:ed:9b:0d:f7:94:30:5d:75:e3:4f:09:a7:08:3e:8a:
f5:1d:d7:77:c0:f1:c8:01:4f:63:7b:40:06:ab:90:ae:b1:e4:
f3:65:10:ac:1f:bf:e3:06:c4:e1:08:c1:5d:96:c1:e5:69:26:
9c:f7:b4:c3:9b:8a:ca:3f:cb:7a:c7:a6:05:b2:d7:5a:ef:a7:
85:02:73:b8:83:f0:1a:05:76:02:af:92:73:6b:e5:f7:d3:20:
1a:7d:b2:d5:8c:bb:02:90:ee:75:d4:fb:19:4e:5a:26:40:e9:
f0:35:c3:87:e5:a8:72:6f:e0:8f:6a:9d:e2:38:e6:83:ab:d9:
89:c4:96:d8:da:bc:6a:c9:ff:40:d1:80:08:21:05:10:55:2f:
64:12:ae:38:9e:9c:b3:2c:a1:12:58:0a:1f:5a:7c:3f:51:eb:
ee:ed:87:61:d2:75:78:2b:c7:97:63:8d:09:84:a9:a5:ed:87:
08:e0:aa:ad:0e:c6:8d:88:72:5d:37:1d:34:6d:d3:29:3b:d5:
3c:22:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:04 2025 by rpki-client