Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.cer (raw, json)
Hash identifier: bUQDM/ErF2M5Z6bRYJNnTpqa+JDatwJtfRl5WuIvUYA=
Subject key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA791405E2B00CA019797048DC6307543
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Feb 2024 12:22:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209455
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:91:40:5e:2b:00:ca:01:97:97:04:8d:c6:30:75:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 12:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:4a:70:95:28:ef:1d:54:27:d6:07:83:7b:
d3:61:3f:c0:98:a2:19:a5:29:26:5c:89:ba:63:a3:
67:8f:a3:32:c1:b8:e0:b0:4a:a9:08:c8:cc:ac:d9:
fa:c0:b5:73:c3:b9:93:4e:59:9b:e3:df:b5:39:67:
67:72:9e:35:12:e0:ce:d7:db:c0:bc:b5:72:af:3e:
6e:8f:45:c5:3d:06:86:2a:fe:22:18:b0:d6:9a:7a:
63:c9:e6:b8:1f:ed:7c:fc:b6:37:5b:9d:c2:bb:0f:
10:06:26:d4:c2:64:7a:f1:27:da:1e:0f:42:aa:70:
d0:d4:9e:54:87:14:a9:bc:43:e5:78:13:61:33:d0:
d5:35:61:39:04:d7:70:09:02:6b:99:4d:1b:4a:58:
81:f4:b4:33:32:18:bf:d8:4e:a0:4b:17:10:0f:d4:
08:81:e1:90:89:4d:b8:c4:22:81:45:5b:a8:bb:6e:
b4:b1:ea:7b:59:a6:fe:58:a0:31:48:b8:6d:6c:a1:
5f:c4:0f:a1:85:98:11:9b:9d:b2:bc:9b:2a:3d:53:
b9:07:86:a2:18:50:d2:4b:48:5e:af:b8:73:dc:5f:
8c:d9:0b:cb:38:86:38:da:22:30:a2:49:40:0b:73:
61:68:cb:4a:7d:58:1c:25:83:d6:91:51:2d:f6:6e:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209455
Signature Algorithm: sha256WithRSAEncryption
9d:43:d8:15:e6:f3:b9:62:29:26:57:36:4c:dd:2d:de:72:98:
53:3c:0a:5c:b3:95:76:e4:48:1e:f4:58:ca:3e:4e:dc:4f:fb:
7f:5c:94:09:3c:53:82:8e:7a:60:c9:29:ae:76:c7:fa:77:d4:
18:6b:f4:00:c7:6f:06:25:a8:a0:f5:b3:2b:f9:c1:d2:8c:3e:
c8:5f:1d:5e:fb:4d:21:f4:fe:f1:b1:19:7d:d5:16:b0:9a:ae:
d4:32:14:79:02:49:0c:17:e7:98:56:86:8a:59:15:5e:c0:db:
5b:13:51:37:2b:de:8a:5d:56:af:01:15:81:5b:d2:68:27:7f:
f4:58:8b:3a:e0:18:2e:69:06:87:eb:cd:36:ab:2d:71:dc:33:
c1:46:b3:ae:e4:de:85:b0:48:d0:17:56:95:b7:11:bd:f8:6a:
f7:c9:dd:03:56:47:9b:4b:64:70:67:db:f8:19:38:00:d6:69:
f5:ca:cf:6f:11:bb:6a:dc:18:3b:f7:af:69:d5:59:e7:fd:8b:
1e:71:61:8d:bc:ab:39:9c:a9:04:4d:54:a4:51:c5:de:1d:75:
05:40:c0:8a:ea:28:bd:55:1d:c6:f7:6f:46:86:ec:e9:28:f7:
b5:61:9d:b8:17:0a:03:b9:96:f8:cb:5c:85:3e:bc:86:08:4c:
c4:ce:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:12:17 2024 by rpki-client on console-ams.rpki-client.org