Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.cer (raw, json)
Hash identifier: lQi4PnqB5iE2BUV1UdtOm2F7Iwjw+HBkg6Wy94akfIc=
Subject key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E1534D6EFAB49AA4BBCD49B3D46E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209455
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:15:34:d6:ef:ab:49:aa:4b:bc:d4:9b:3d:46:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:4a:70:95:28:ef:1d:54:27:d6:07:83:7b:
d3:61:3f:c0:98:a2:19:a5:29:26:5c:89:ba:63:a3:
67:8f:a3:32:c1:b8:e0:b0:4a:a9:08:c8:cc:ac:d9:
fa:c0:b5:73:c3:b9:93:4e:59:9b:e3:df:b5:39:67:
67:72:9e:35:12:e0:ce:d7:db:c0:bc:b5:72:af:3e:
6e:8f:45:c5:3d:06:86:2a:fe:22:18:b0:d6:9a:7a:
63:c9:e6:b8:1f:ed:7c:fc:b6:37:5b:9d:c2:bb:0f:
10:06:26:d4:c2:64:7a:f1:27:da:1e:0f:42:aa:70:
d0:d4:9e:54:87:14:a9:bc:43:e5:78:13:61:33:d0:
d5:35:61:39:04:d7:70:09:02:6b:99:4d:1b:4a:58:
81:f4:b4:33:32:18:bf:d8:4e:a0:4b:17:10:0f:d4:
08:81:e1:90:89:4d:b8:c4:22:81:45:5b:a8:bb:6e:
b4:b1:ea:7b:59:a6:fe:58:a0:31:48:b8:6d:6c:a1:
5f:c4:0f:a1:85:98:11:9b:9d:b2:bc:9b:2a:3d:53:
b9:07:86:a2:18:50:d2:4b:48:5e:af:b8:73:dc:5f:
8c:d9:0b:cb:38:86:38:da:22:30:a2:49:40:0b:73:
61:68:cb:4a:7d:58:1c:25:83:d6:91:51:2d:f6:6e:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209455
Signature Algorithm: sha256WithRSAEncryption
43:9a:47:13:36:7f:d3:f9:fb:ce:0d:5f:38:ce:6e:ed:5b:de:
33:d4:40:f9:7b:bd:9f:48:13:73:ac:42:d6:09:bd:65:72:86:
75:f6:5a:2f:91:9e:0e:74:73:4d:58:7f:4c:5f:50:a9:23:15:
78:71:76:18:29:c4:c8:ab:0b:0f:ee:1f:63:f3:02:7f:60:bb:
75:38:d7:51:1b:21:44:e1:b5:b9:77:1e:a8:1a:17:24:54:6c:
83:9a:5d:e1:17:ec:a6:ed:49:86:76:01:3c:bc:dd:ee:8c:85:
7d:04:af:34:66:af:9c:c7:d4:df:76:84:16:9f:85:eb:2c:31:
7c:ff:fb:5a:b9:39:10:23:65:ca:54:4d:72:ca:8e:e0:04:2b:
e6:8c:89:f5:46:5e:a5:cf:53:d2:5b:3a:9e:59:fa:73:ee:89:
41:1e:8a:92:a9:b3:6a:ef:b0:83:0d:36:0c:a5:8c:65:26:51:
62:ba:4b:b7:48:e9:75:ea:4a:d9:ac:56:a7:8a:d6:1b:9c:c5:
fc:2e:de:1a:55:b5:a8:bc:db:d5:fe:66:5c:1b:34:7b:24:04:
e9:b5:f5:62:cd:07:2f:62:0b:c1:7a:e8:63:72:8d:6a:d0:0d:
40:e4:ea:21:4b:6f:0b:f3:9a:80:4b:47:68:d3:f5:c4:77:ae:
06:46:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:52 2025 by rpki-client