Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.cer (raw, json)
Hash identifier: xVM4LDAseos2g0/nUPSGc6ip5BFAabAUlo3qWKA/re0=
Subject key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01905F08A198ACCE675549EC179C4803BE28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Jun 2024 13:28:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a04:ac40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:08:a1:98:ac:ce:67:55:49:ec:17:9c:48:03:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 28 13:28:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:7a:4a:e7:c3:49:48:03:f7:5f:a4:8d:40:
b2:6f:37:41:09:da:e1:44:6d:5f:89:58:6b:73:8c:
f6:06:ad:5b:f4:e8:ef:f9:b0:66:f1:52:b2:8c:5c:
1d:8d:1c:2e:20:b2:a3:b2:42:03:4a:b0:9e:86:d8:
70:fd:ba:ac:5e:49:b0:6b:e4:b6:a4:5d:08:c1:19:
77:b4:71:2e:5d:6c:70:3c:77:74:d1:bf:35:88:dc:
fd:90:80:e4:2f:b7:7a:59:8c:96:07:aa:b7:29:6d:
4e:31:de:3b:aa:e2:b5:06:4d:92:11:cc:b9:a7:4f:
08:10:3b:6b:0a:33:51:1d:40:4b:5c:c9:90:38:67:
cf:3b:4e:cb:5b:e0:10:1c:2c:51:cd:0e:b0:78:e9:
68:96:31:34:22:63:96:9a:a2:e7:a9:f2:8e:ce:53:
b7:d4:83:8e:a7:23:ab:a3:20:0a:d0:6e:d6:00:2a:
18:3b:0e:fa:d7:06:29:b2:14:16:1c:fa:62:80:1b:
4f:73:5a:98:8e:de:82:ee:0a:65:ed:fb:1f:1d:05:
6c:ec:61:b7:1b:01:65:91:49:eb:94:e4:86:6a:fa:
a2:d7:1c:a5:15:d8:37:19:36:e1:c3:f1:d3:02:06:
b7:c3:62:ec:e5:ef:76:fb:8e:0c:83:e3:d1:00:d8:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:f3:55:a6:37:1e:dc:cc:6b:9e:a5:06:aa:20:6b:06:3f:ce:
e4:69:65:bc:d7:cc:eb:0c:06:b7:55:35:89:38:85:b5:c0:e1:
24:47:d0:64:2c:52:c3:9e:54:93:b1:27:e3:90:13:03:df:f4:
06:25:ac:30:cb:39:62:22:32:fd:4f:89:2a:00:80:e1:41:d1:
fb:48:45:84:54:9e:87:4c:c2:71:6a:0f:3f:67:03:73:07:bf:
ce:76:1a:b1:0b:fc:aa:d2:90:c3:47:55:35:1b:3e:9d:22:6c:
3c:b9:a4:30:44:bc:77:20:87:ce:af:ff:04:5b:d3:cc:d8:00:
c7:52:c1:30:f2:be:12:95:99:f3:50:83:55:c0:06:99:71:19:
49:f4:49:ca:21:6b:a7:98:2d:c8:ee:ff:75:ec:7e:f8:55:13:
29:05:70:2a:4b:b3:27:8c:82:7a:d5:c4:ba:e0:71:42:9f:29:
02:f4:69:47:4b:66:30:83:70:7a:95:42:46:ed:66:b3:5a:a0:
f3:ae:6c:c6:84:2b:3a:c7:c0:7c:32:8f:b1:f1:07:27:5b:62:
d9:ac:04:46:3b:72:c8:d4:32:68:4b:09:f6:61:f5:39:24:fd:
48:46:21:35:56:52:7f:58:4c:39:cb:e7:6a:d3:f3:82:00:32:
72:1e:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:34:15 2024 by rpki-client on console-fra.rpki-client.org