Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
File: lris-hevk77b78b-tGiPmGBLiq4.cer (raw, json)
Hash identifier: zShNm90QAHUp0bBOxQLUZTbf+EuB2TxhYNlWeFuBeUM=
Subject key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E9787985D23E3BA2A35330AE82BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.88.9.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:78:79:85:d2:3e:3b:a2:a3:53:30:ae:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:03:7d:29:1e:06:3d:93:6e:67:62:cd:57:
62:6b:d0:84:38:d6:32:24:8d:a3:11:16:2e:e4:49:
4f:3a:aa:40:20:fb:90:74:07:89:cd:ef:61:79:27:
79:1b:d1:2e:f4:b5:e1:b8:86:95:69:0f:1b:f9:1e:
26:a0:97:b6:ca:72:0d:84:23:1c:35:04:50:1f:6d:
80:ff:19:e7:c0:cd:22:66:e7:f2:f6:b0:fb:62:41:
27:53:06:53:b3:89:4b:9a:50:d8:61:92:d1:22:bb:
72:0f:1f:f4:a8:52:32:c8:71:3f:60:94:a2:f1:86:
1d:3a:3b:26:13:ea:75:a9:9f:22:c2:92:c4:e6:47:
f6:f3:1c:00:a5:81:46:de:bd:6b:f0:5a:a5:16:73:
09:7b:02:b5:08:ed:02:7f:d9:19:0b:e2:94:8b:48:
28:2c:92:19:c7:2d:e2:38:c7:8a:6b:2f:db:d8:2e:
3c:4d:f6:2c:85:55:05:fd:63:28:aa:bf:67:b6:fc:
44:bc:af:91:ed:56:18:e3:f1:fe:a8:2d:0f:fd:27:
86:e5:f2:ac:5b:ad:ba:c8:a1:77:26:da:b1:a4:0d:
14:72:64:31:dd:ce:30:48:82:e6:32:92:b7:9b:2d:
4c:3e:23:f3:ca:58:28:6f:12:9b:7d:27:12:d9:b9:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bd:4d:5e:0f:73:69:48:2a:36:52:ac:13:29:07:15:a1:c9:
5d:e6:f6:43:65:9b:24:14:b2:77:e4:96:28:9d:94:d6:2e:50:
fe:33:03:96:dc:b5:26:3f:8e:43:60:9f:09:21:34:dc:53:fb:
0f:e8:54:2d:76:c9:12:7a:9b:e6:38:64:98:c0:99:90:80:d6:
4a:a9:8f:e9:a8:04:f6:1f:9a:75:6e:d6:3d:0b:52:d5:e9:32:
96:9d:be:f9:8a:0c:2d:3f:f6:74:2f:7f:cc:49:b6:f8:6d:2d:
ba:a2:9e:fb:3e:49:32:14:45:5d:a0:73:dc:2c:be:51:f7:dc:
36:14:c1:66:93:77:1d:d3:da:c9:4c:5a:07:d5:cb:2d:3c:44:
d8:6d:6c:75:05:3e:9b:20:70:c1:44:50:6c:59:7a:d8:77:0b:
5b:eb:1b:01:a8:a4:db:e5:fb:5e:9b:9c:ee:69:f3:d9:10:01:
2a:c9:2b:f0:de:0f:17:31:f1:b7:10:e8:55:16:88:b4:34:69:
ab:ff:9e:7a:0e:2c:11:2e:e0:fa:8b:2b:68:6f:6a:35:b8:2e:
27:ed:52:62:b1:b0:10:9a:12:47:b4:02:2c:58:97:0a:0e:dd:
19:8b:32:cc:d7:c6:1a:04:87:8b:10:33:83:03:cb:e4:0f:03:
75:97:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:52 2025 by rpki-client