Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer (raw, json)
Hash identifier: c9nTN+7489qtpj7C7I1oCEGtt2MdLWV/FNVAPva9b2M=
Subject key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019001EBDE06AE998CF9721ACBAFA89084DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Jun 2024 11:32:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 109.94.160.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:eb:de:06:ae:99:8c:f9:72:1a:cb:af:a8:90:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 11:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:5a:28:cc:f2:1c:5c:ad:6d:31:dd:7a:89:
19:0f:77:c5:85:cf:b8:64:56:57:f1:20:ba:23:ed:
2a:17:63:55:e5:f2:f5:cf:00:4f:17:5b:fa:20:eb:
50:cd:cf:ef:a0:51:6b:71:3d:cb:4a:ba:23:79:99:
fd:ea:73:3f:6a:d4:f0:ab:91:99:36:84:01:e4:43:
f1:a7:24:bd:af:4f:37:fb:75:05:39:5e:0b:fc:a6:
61:90:33:7a:91:26:63:dc:1c:cf:cc:0e:ba:81:4d:
7b:74:1f:1e:12:43:ef:02:c0:0a:cf:80:5e:66:be:
9e:a2:ae:39:54:4b:6c:03:d7:0d:3b:fe:30:0a:f8:
34:83:3a:b8:2c:e7:de:c5:b4:2a:e7:ae:bb:34:e5:
13:b2:f8:39:ef:9b:28:a9:cb:b2:ff:a3:62:57:a3:
8a:fc:0e:66:54:f1:18:68:19:73:d7:5f:57:d4:0d:
93:11:50:f3:7e:82:57:18:9e:b6:d1:78:48:c2:cb:
52:d3:bc:a5:c7:b8:a9:b1:9c:c4:b0:31:29:a5:06:
fd:ff:22:97:91:9e:b3:72:51:cd:6d:33:46:43:5d:
32:e7:19:53:f3:eb:e4:39:81:54:21:fd:a5:ec:e9:
97:75:ed:48:bd:2e:95:43:5d:5e:9a:38:58:56:90:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.160.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4c:2e:b3:99:f8:75:6b:57:d4:ee:9d:8d:50:bb:0e:2d:42:
2d:0c:a8:03:9b:bf:23:8f:1b:92:82:1c:b7:92:51:27:9d:1f:
a4:8e:3f:b9:67:76:b3:ce:6a:d1:52:41:fa:85:ce:50:60:15:
20:d4:16:25:d8:da:3d:75:b3:57:a8:1f:cf:03:4a:5a:32:61:
c4:82:f1:17:3c:d9:c8:44:8c:52:6b:ad:f8:ea:5a:66:aa:25:
41:0e:c8:92:61:25:a1:40:b3:bd:86:21:68:20:84:e3:9c:86:
06:d0:53:d6:88:a4:8f:f9:25:1b:e7:54:9b:00:9d:0e:28:ba:
d8:a9:11:a8:31:dd:47:a5:b4:0e:fb:6d:6c:3a:45:00:90:63:
54:f5:c1:d1:57:e5:cb:9a:d9:90:c5:72:5c:01:20:3b:16:ac:
91:65:e4:cc:f7:1d:52:de:46:11:62:ea:d7:38:f4:f9:50:d6:
40:26:ed:12:44:fa:c5:18:85:92:93:20:22:26:97:43:e5:60:
7c:29:58:f2:74:95:c0:af:47:65:63:a7:af:40:a2:41:6f:f4:
b7:6d:24:c8:1d:55:60:46:a3:54:95:1a:6d:3a:42:79:f1:ca:
04:97:8f:e3:6d:d3:69:04:c6:5b:ee:09:76:22:7f:f7:fa:b9:
17:02:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:21:57 2024 by rpki-client on console-ams.rpki-client.org