Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
File: lmr8FNShmnwsFo6yyB1WIrMBSes.cer (raw, json)
Hash identifier: v8ldeIW+QClDbfaBEzKIpNdWu3/3wC3b5G4WF4zGz5A=
Subject key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F1493D7732717BE193C2D9B2609AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43273
IP: 5.252.172.0/22
IP: 91.196.248.0/22
IP: 91.238.168.0/22
IP: 185.149.244.0/22
IP: 2a12:6440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:14:93:d7:73:27:17:be:19:3c:2d:9b:26:09:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:4a:04:3d:30:61:7a:80:43:ca:99:f6:11:
4c:07:56:cb:17:a2:6b:af:4b:77:11:77:e3:4d:f8:
c5:17:f8:92:17:3d:9b:75:8f:71:8c:5b:2e:c5:bb:
46:6e:9e:ff:c1:2f:62:b2:61:d0:2d:d7:6b:88:79:
2b:fd:55:85:da:c6:a7:de:30:e2:f4:4f:18:ca:be:
5d:7c:99:10:1e:20:f4:e9:34:4f:26:5b:02:2b:d5:
76:45:27:96:0e:42:ba:f4:5e:cb:f6:3f:1c:cd:24:
ab:f5:8f:c1:4c:86:1d:f5:12:96:f8:2d:89:7c:5f:
66:f9:f0:98:a1:05:0c:3f:4b:14:b2:54:81:a3:75:
43:7a:22:1c:e1:bc:76:5d:e8:8e:2e:be:58:24:78:
13:d8:a4:9a:ac:e2:c4:f9:26:2a:61:b3:fc:04:2f:
d9:e3:8d:10:fc:07:2f:f9:57:9e:3f:ff:be:ae:3a:
cf:50:8f:76:5a:8b:be:72:b1:d5:ca:50:d3:52:2b:
80:c4:55:64:43:a2:52:eb:58:59:86:73:52:a5:2c:
b8:d9:82:61:44:cd:9e:53:5b:e6:2f:2c:ba:db:88:
1f:ea:b2:11:08:d2:91:7a:1a:00:d6:e7:19:34:56:
4e:d4:bf:c4:50:1b:81:ee:d2:0a:ed:2f:08:19:c5:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.172.0/22
91.196.248.0/22
91.238.168.0/22
185.149.244.0/22
IPv6:
2a12:6440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43273
Signature Algorithm: sha256WithRSAEncryption
63:b9:cd:b1:0d:4a:03:6e:63:da:e3:79:57:56:a6:fd:60:52:
18:45:ba:53:78:92:c5:50:39:55:0d:71:84:3c:1a:66:8a:0c:
16:86:7c:ec:a0:91:79:ad:25:0b:11:3a:7b:c3:ec:79:32:27:
2a:fa:dd:ff:4e:36:20:bf:d4:f6:e6:77:3a:c4:02:0f:df:7f:
9b:98:f5:2f:c1:32:89:e2:57:81:ed:54:f1:10:e6:43:85:f0:
7b:bf:a1:b2:2c:cb:dc:76:64:1d:f2:f8:f4:2a:0b:7e:5c:52:
cf:1d:72:b7:0f:42:99:31:c7:c2:bf:73:0e:1a:36:1c:09:11:
df:02:85:2d:ad:78:e1:28:c9:3b:87:6b:f5:17:b5:91:94:cb:
8e:84:de:15:bf:4b:cd:f4:38:7a:b2:83:97:a4:ae:1b:93:8a:
d0:88:29:25:db:21:c2:0c:10:9d:a8:5d:6a:af:05:94:4d:fd:
9f:fa:2a:f0:d1:f7:e7:9d:61:3d:65:43:38:2c:00:1c:91:08:
b1:9b:0e:8b:6e:43:8a:10:c2:3e:63:5b:98:a2:8d:3d:28:41:
6e:9e:0d:2c:4a:b5:5f:c6:96:15:d4:16:48:d9:99:4d:81:29:
57:02:47:4f:e4:43:2c:54:69:d8:75:0c:56:71:28:33:3e:af:
0e:43:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:35:09 2024 by rpki-client on console-ams.rpki-client.org