Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
File: lZCfz5xup2MAznHQlNMl9X1knL8.cer (raw, json)
Hash identifier: Luj/1ltJWmpem7ilQNzRgdkAM1t3tVgjre0x4yLAt9g=
Subject key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D1C9644425FDEB97EBB19149B751
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198146
IP: 192.166.202.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d1:c9:64:44:25:fd:eb:97:eb:b1:91:49:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:43:7d:bc:0d:0b:6e:b5:b2:83:99:fd:ae:
60:03:e0:e2:39:0d:df:b2:83:37:4f:2b:12:d7:ad:
c1:ad:c8:17:49:c3:71:56:f0:7b:cc:03:ec:c1:47:
57:a9:3a:34:17:1b:82:61:cf:ee:f2:f0:45:35:d6:
a7:b6:5b:47:fa:0f:5e:c4:c7:50:60:d6:83:be:99:
10:45:87:64:8d:81:9b:f6:ec:24:3a:5d:0e:04:e7:
b1:b3:c7:18:21:04:9a:b5:16:31:1e:16:b1:90:91:
29:38:15:2d:4e:6f:d8:bf:ff:9d:f2:74:f5:b6:6e:
e2:bf:ea:e4:bc:10:a5:54:a4:19:e8:56:0c:66:5c:
55:85:54:4c:ec:f1:36:1f:65:ce:3d:21:ec:f0:63:
ac:78:ea:80:29:98:6d:1b:9c:35:7e:0e:aa:58:99:
bf:14:46:d4:2b:de:1a:e2:12:a8:06:9e:30:70:40:
bf:0f:83:43:6a:38:6a:82:32:29:b2:12:18:e9:92:
b2:51:bf:db:e2:f8:8a:fd:05:bc:69:dc:94:38:a4:
ca:84:9a:58:83:51:ae:2f:2c:8e:3b:58:d0:51:c7:
ba:49:50:ac:76:62:27:c2:fc:88:74:b5:10:53:b6:
6a:7d:16:21:1e:32:0b:c4:57:05:52:e2:38:eb:66:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.202.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198146
Signature Algorithm: sha256WithRSAEncryption
ae:a0:fa:91:51:12:90:5e:05:aa:19:f0:39:e9:2f:18:36:cf:
62:db:e7:3f:42:86:1b:64:9b:a2:60:55:ea:d5:ab:82:6d:95:
51:52:bb:3f:d5:6a:4f:f3:62:86:5f:8f:21:4b:c1:86:20:61:
6c:54:a9:62:48:8e:3a:88:6b:64:57:e0:22:ea:94:81:fa:ed:
01:8f:92:7a:d3:3f:17:fb:68:18:4e:7d:2a:6e:0b:be:2d:8d:
da:c2:bc:2b:b6:9f:52:0a:c6:14:f9:21:7c:fc:0c:1b:09:83:
fc:50:5d:07:71:c0:5a:68:a9:b4:ad:4b:a1:34:ae:a1:35:b4:
6b:c0:8e:38:c1:30:af:4f:7c:c7:0b:6b:1c:21:43:cb:cb:a7:
3c:79:41:b3:c1:88:15:e9:75:d2:aa:b6:b8:81:42:fd:d9:2a:
72:d3:ca:38:cf:69:1b:4a:1a:2a:ea:e1:ff:de:4f:70:3d:0e:
06:2c:fe:a9:f2:ad:0d:d5:63:1b:84:80:4d:57:9f:21:9a:19:
f6:ff:d5:37:a1:7a:91:20:f1:df:e8:42:10:c4:4e:50:09:5d:
00:fe:bc:03:be:07:b9:ab:bf:8e:a7:ff:74:28:c9:b7:78:c7:
cd:34:da:fe:43:93:c7:0b:52:92:fd:9f:1e:77:3d:57:f0:9e:
b5:ef:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:40 2025 by rpki-client