Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.cer (raw, json)
Hash identifier: HIquGjsFsnyLn39evHvYQConsYCW2TVqJs0WO1L2Q6g=
Subject key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DDD28D6826D44DF5D90CAD3FFFA5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214676
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:dd:28:d6:82:6d:44:df:5d:90:ca:d3:ff:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:26:a4:3a:86:56:e4:a9:e0:d5:e9:ad:06:
90:e0:88:97:b5:d8:a0:7b:2f:84:92:00:97:c9:00:
2c:d0:19:bc:92:ab:ce:f8:43:e2:41:d3:7e:89:8b:
b4:fc:2c:1e:09:76:4e:c0:05:3a:28:2c:45:94:08:
16:55:75:e9:99:7c:0b:df:63:c1:b8:39:f1:ae:d8:
bf:8d:8c:66:3c:bb:2e:6f:c5:b4:ca:d1:4c:2c:17:
14:89:f7:ef:9b:2c:91:e2:c5:4b:89:5e:76:18:92:
d8:76:ff:19:a2:ed:c9:f1:63:6b:11:b0:3f:01:ce:
6b:38:8f:d0:49:c2:c6:3f:8d:c4:f1:24:72:00:1f:
92:af:0b:db:66:80:0e:9f:f2:19:fa:d0:3f:60:d4:
44:94:21:f7:d7:80:4e:5c:d6:94:c1:11:79:e8:a8:
2e:33:f6:c0:af:30:ad:dc:62:ea:ed:1e:22:c2:15:
05:19:23:99:b1:41:40:e2:5a:9e:a5:b5:2e:70:22:
cb:3d:33:fd:08:71:4d:35:99:70:80:03:84:7f:70:
14:9f:66:59:9a:4a:7e:56:fe:c4:26:c8:c5:12:8a:
a6:ee:ac:fa:66:0b:dc:6c:0c:a0:86:66:9c:a9:5b:
b0:5a:15:43:55:be:22:57:87:09:fb:30:1a:0a:6c:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214676
Signature Algorithm: sha256WithRSAEncryption
86:e3:0c:ad:53:23:b4:72:0d:13:00:37:1a:56:c2:74:03:f1:
ef:1c:9d:61:a1:2a:bb:c6:a5:ad:72:4a:ad:30:4a:3c:fc:57:
4b:f6:8e:a6:4f:53:d0:8c:82:42:3d:d8:c9:c1:5c:c6:6d:87:
d8:8c:85:9c:51:8a:cb:72:d0:9e:91:bf:e7:d5:3f:19:0b:ec:
a8:56:82:33:85:e0:4e:3c:0a:85:7e:54:3c:05:b5:28:f4:70:
3b:bd:10:1f:98:b9:f3:ce:8e:8c:05:b3:9f:30:1b:d3:91:f8:
13:9c:6a:94:cc:0c:9d:ca:c8:3a:8a:5f:a2:ee:13:ef:98:e6:
3f:41:90:79:42:5a:3c:5b:fa:e0:fd:04:99:f3:a7:d7:94:bd:
b3:72:1b:1b:84:e1:7c:84:a2:5c:aa:04:b3:36:5d:9d:bf:a9:
67:70:55:df:28:a7:05:a3:90:41:65:80:83:02:6e:6d:87:6c:
cf:cd:59:e0:12:9d:c0:c4:38:6c:00:e0:5a:aa:c0:ac:49:d8:
d3:31:db:f0:85:66:e6:6d:b5:6f:90:47:0f:7a:27:df:ac:cc:
37:dc:dc:f3:48:c4:1f:87:bf:c3:c2:4b:6f:f5:b1:c7:67:03:
4b:44:99:68:f5:cc:e3:33:eb:ba:8f:e1:3f:c8:e9:53:2e:12:
b6:ff:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:41 2025 by rpki-client