Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lMVIiWcJhv9QH8N5dgfCGbJKGk4.cer
File: lMVIiWcJhv9QH8N5dgfCGbJKGk4.cer (raw, json)
Hash identifier: hixN9uiMjJjRWiK7tD4hDOOMDGDlHIX2p/m1u+PgjCY=
Subject key identifier: 94:C5:48:89:67:09:86:FF:50:1F:C3:79:76:07:C2:19:B2:4A:1A:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56F0013BEDAFCC2EB6413247930B65C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/d3fd95-ba97-49b7-8bea-57c4b7a964e9/1/lMVIiWcJhv9QH8N5dgfCGbJKGk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/d3fd95-ba97-49b7-8bea-57c4b7a964e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206139
IP: 2001:678:3c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:00:13:be:da:fc:c2:eb:64:13:24:79:30:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94c54889670986ff501fc3797607c219b24a1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:86:16:cd:87:e5:e6:da:7b:f3:68:dd:64:
55:aa:58:59:bb:61:92:f9:a2:a9:af:e7:d2:1e:39:
ed:62:68:71:f9:0f:98:02:e4:e2:2d:ce:a0:28:a9:
f3:05:2e:63:da:aa:0a:e0:82:6e:b1:e6:a6:bd:e1:
0c:2c:7e:33:8b:b8:3c:7e:67:ae:88:4f:2c:46:7e:
1c:c7:be:aa:7a:82:48:e5:32:43:a1:0e:d7:31:21:
a3:45:d9:ad:72:b1:ce:b2:cb:3c:aa:ea:a6:c2:13:
7f:03:e8:28:78:68:c9:3f:5a:0d:14:1f:39:17:0a:
fa:d6:1d:30:00:6b:91:1f:53:f6:bc:79:ff:f4:4b:
0a:9c:3e:85:e1:fd:59:b8:70:e3:16:ba:76:d8:3b:
b1:c0:99:e9:9f:e8:ee:50:69:cd:f9:b0:41:83:fb:
3e:d9:4b:fb:0c:ac:5a:f9:2d:f7:77:53:bc:7d:15:
b5:a5:c7:67:48:6b:cf:f3:12:5b:c9:84:90:51:2c:
52:9a:aa:e5:f6:1b:fe:69:c2:03:0f:39:71:69:5b:
7b:94:d2:12:cb:9f:a8:4d:d8:23:6f:11:7d:8c:db:
53:6f:d7:ad:cd:72:a1:67:a9:ad:e0:c7:f0:c0:5b:
87:27:01:0d:d3:c2:81:01:a7:60:64:68:85:65:dc:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:48:89:67:09:86:FF:50:1F:C3:79:76:07:C2:19:B2:4A:1A:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d3fd95-ba97-49b7-8bea-57c4b7a964e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d3fd95-ba97-49b7-8bea-57c4b7a964e9/1/lMVIiWcJhv9QH8N5dgfCGbJKGk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206139
Signature Algorithm: sha256WithRSAEncryption
4e:83:bb:2e:18:dc:f5:c0:34:f0:c6:55:3c:bc:4b:49:09:22:
d3:4c:76:14:a5:aa:5c:67:57:59:97:fb:43:a7:7a:e9:88:04:
3b:d2:43:d8:3b:96:8f:30:46:5f:5c:19:52:58:96:28:91:7e:
96:ae:9c:d1:fe:0d:ec:ac:e5:ea:11:0f:e0:40:04:8f:e0:6c:
bf:6f:31:cc:d9:4b:05:f8:f0:c5:e2:c5:6b:3c:30:6e:b2:8d:
ef:a7:17:61:2f:b2:37:ba:7f:86:00:ba:b3:1d:ce:2f:bd:af:
bc:49:9c:4c:5d:fa:3d:d7:e2:c8:0b:7b:84:25:e7:18:b6:ff:
8e:41:a6:e8:bf:c7:7f:f4:80:28:5d:89:22:62:36:63:cc:6f:
e1:94:ff:cf:7b:d7:2f:00:6e:19:53:ff:2c:64:e1:d1:6a:b8:
eb:ba:76:ce:5e:c6:e7:b4:7e:09:46:3c:1d:21:f9:9b:bb:55:
c6:ab:23:e7:f1:89:5b:ac:1c:8e:8d:0f:de:0e:67:fe:0c:49:
dc:de:4b:1b:04:76:e2:e3:03:0b:2b:d3:5a:b3:db:4d:69:e7:
66:cd:8a:04:fd:96:6a:5f:1c:c7:57:90:23:24:a6:ef:6b:8b:
b3:0e:e2:63:84:c6:0c:a3:16:41:eb:80:99:0e:1d:da:b0:8e:
09:cd:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:15:05 2024 by rpki-client on console-fra.rpki-client.org