Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
File: lris-hevk77b78b-tGiPmGBLiq4.cer (raw, json)
Hash identifier: HsekB+xN+cK1PBnih2Cc+xq7Lv2YuzJQNqxnhWUfTio=
Subject key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCCD65B906C9FACC28EEEAC7A6AB38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.88.9.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:cd:65:b9:06:c9:fa:cc:28:ee:ea:c7:a6:ab:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:03:7d:29:1e:06:3d:93:6e:67:62:cd:57:
62:6b:d0:84:38:d6:32:24:8d:a3:11:16:2e:e4:49:
4f:3a:aa:40:20:fb:90:74:07:89:cd:ef:61:79:27:
79:1b:d1:2e:f4:b5:e1:b8:86:95:69:0f:1b:f9:1e:
26:a0:97:b6:ca:72:0d:84:23:1c:35:04:50:1f:6d:
80:ff:19:e7:c0:cd:22:66:e7:f2:f6:b0:fb:62:41:
27:53:06:53:b3:89:4b:9a:50:d8:61:92:d1:22:bb:
72:0f:1f:f4:a8:52:32:c8:71:3f:60:94:a2:f1:86:
1d:3a:3b:26:13:ea:75:a9:9f:22:c2:92:c4:e6:47:
f6:f3:1c:00:a5:81:46:de:bd:6b:f0:5a:a5:16:73:
09:7b:02:b5:08:ed:02:7f:d9:19:0b:e2:94:8b:48:
28:2c:92:19:c7:2d:e2:38:c7:8a:6b:2f:db:d8:2e:
3c:4d:f6:2c:85:55:05:fd:63:28:aa:bf:67:b6:fc:
44:bc:af:91:ed:56:18:e3:f1:fe:a8:2d:0f:fd:27:
86:e5:f2:ac:5b:ad:ba:c8:a1:77:26:da:b1:a4:0d:
14:72:64:31:dd:ce:30:48:82:e6:32:92:b7:9b:2d:
4c:3e:23:f3:ca:58:28:6f:12:9b:7d:27:12:d9:b9:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
49:42:a6:1f:d1:77:ce:2e:b2:58:40:af:38:90:eb:d1:17:94:
9d:2b:f5:5e:64:4d:bc:b0:40:04:fc:e6:bb:2c:ae:dc:bc:a7:
f1:ac:16:f1:58:64:03:ad:ec:8d:6d:50:82:d0:8c:dc:33:a2:
14:53:f9:13:0e:4c:b1:62:54:01:81:89:bf:c8:4d:f9:60:6f:
e2:74:09:b2:c0:a4:14:5c:1d:8f:db:52:ac:64:d8:ca:fe:91:
f8:06:75:93:f1:3f:c0:4f:c7:03:f4:5b:1a:f5:78:9e:ef:0f:
06:4c:9e:07:f1:7b:1b:94:56:50:cd:08:14:76:b0:22:03:c4:
6c:65:c2:17:2b:72:63:b2:bf:92:dd:da:a4:9b:90:2a:05:7a:
3f:03:66:ad:d8:13:89:45:62:98:9a:ac:a8:02:01:25:db:dd:
3f:d0:f8:cc:fb:e6:f8:37:18:30:95:f9:30:b5:5d:80:66:21:
41:9a:67:91:de:b8:33:c2:d0:f8:fe:45:ad:73:b8:87:87:f0:
aa:dc:41:0f:a6:f9:80:3a:35:ca:f7:cf:df:74:61:31:bf:cf:
e7:9c:b6:22:b7:62:f1:5a:01:ef:51:46:54:9e:46:cc:41:30:
7b:a0:bd:09:41:a0:46:3e:a8:85:71:aa:11:74:b6:dc:2e:57:
1c:e4:6c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:35:11 2024 by rpki-client on console-ams.rpki-client.org