Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.cer (raw, json)
Hash identifier: J8oHuwZQsjquU2gHJ8yDZrDfbbFg8KnDLmzlEufnmhI=
Subject key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC870AE275BDFEFA1033DA14712242BFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 88.151.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:ae:27:5b:df:ef:a1:03:3d:a1:47:12:24:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:2c:81:ae:45:eb:c8:9b:f3:85:c5:7a:37:
0f:2a:91:b5:71:24:d5:da:47:e1:f7:70:bb:04:af:
14:e2:a2:55:e0:8b:ea:7f:e4:d1:37:90:3b:25:cb:
0c:52:32:35:de:01:0b:c4:04:b6:f0:d8:44:8c:69:
36:45:60:95:e1:92:26:91:bf:1c:0c:4d:f3:52:3f:
1b:57:f0:d5:cc:32:6f:e9:cc:7f:b3:b0:b2:fc:d6:
db:21:bd:86:cc:cb:99:45:c5:5a:f2:19:37:db:a4:
bd:5d:39:6d:6b:67:63:4e:c1:a6:14:93:bd:ea:c1:
fe:c2:98:ce:2d:21:f3:20:b1:3f:32:04:76:57:01:
43:ca:da:3c:67:34:92:5a:31:f5:6a:4f:57:1f:b6:
5f:31:da:99:f7:6b:c1:8a:75:9e:f6:2c:ea:c0:c4:
3b:f8:ed:2b:de:78:fe:42:1e:75:b5:d2:92:d7:3e:
d8:99:6b:8b:26:9f:3a:13:99:ee:68:0a:08:42:98:
d2:79:4c:58:37:a3:4d:93:ce:9b:bb:d3:6d:4c:6f:
00:1a:a7:07:1f:a9:29:c6:f3:bd:4f:54:39:82:3c:
b0:1b:58:66:7d:d0:28:27:c3:e6:1a:a7:43:b4:99:
57:81:42:10:47:d4:84:99:26:79:da:6b:1a:6d:6e:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:06:13:51:f1:f6:81:d4:ed:ce:3d:3c:72:e0:3e:db:d1:ad:
ab:d7:0e:ff:69:42:9c:3d:56:f8:c3:6c:10:42:cb:e9:70:e6:
47:f5:30:64:0f:07:7a:74:4a:06:02:44:a4:9a:14:e9:83:a4:
c0:67:94:90:07:75:56:53:e6:bf:3a:8d:45:69:93:d1:f4:fb:
df:47:d8:f2:8e:02:1d:13:c0:f4:a6:d6:a5:47:04:38:25:f0:
f3:8b:46:94:97:d8:73:ef:8b:57:b7:fc:d2:fc:74:5c:31:39:
49:ed:c3:cb:f9:0e:c5:03:6d:a6:26:b2:56:2d:f8:91:63:86:
ae:47:f1:82:f4:bc:83:88:d8:92:ad:d7:76:07:0e:25:cd:e5:
89:8e:da:d8:05:f4:fd:01:14:43:a1:7c:19:a2:74:d1:80:04:
a7:07:02:63:8e:4b:6f:2a:b2:26:28:3b:06:34:ad:3a:d8:c9:
72:3e:64:f3:53:da:09:8a:b1:ed:45:b3:7b:9c:ef:1d:00:1b:
a1:ee:3f:13:25:f9:10:1c:46:a5:d7:e7:43:4c:33:fc:ac:e8:
92:57:5a:04:16:be:f2:f6:70:42:36:25:09:f2:14:86:df:78:
3b:32:f7:33:0a:2f:7c:1d:8a:d0:e1:8d:77:23:e7:96:de:b0:
d5:47:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:54 2024 by rpki-client on console-ams.rpki-client.org