Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
File: lugqtki4s_iFdWnDmvlUSt_BfAE.cer (raw, json)
Hash identifier: 57R17fNEtqaRGdvEP1MUaBx2IfDLJN1NRgnhRKd9F1A=
Subject key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B91961D04401A9EC25739347CEDD57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 9103
AS: 13065
IP: 89.28.224.0/21
IP: 185.9.56.0/22
IP: 212.109.128.0/19
IP: 2a00:6c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:19:61:d0:44:01:a9:ec:25:73:93:47:ce:dd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:3a:1a:df:21:1c:a9:66:f1:63:30:dd:b4:
b3:c6:f3:f8:b2:e8:d7:71:a5:51:9d:fa:f6:2f:36:
5c:57:13:f1:03:af:46:55:09:5a:ae:50:33:b7:c9:
36:5c:99:a4:9e:94:ea:66:dd:fb:a0:6a:c4:11:9e:
61:44:b5:af:25:98:57:81:1e:54:95:dc:d7:ff:cd:
a3:9f:87:5a:57:8c:d6:7a:6b:35:41:bd:eb:0e:63:
59:ff:d3:75:4a:55:e3:66:a7:34:43:a3:97:d3:42:
2c:bb:de:65:ba:2b:01:45:e2:fb:9a:0e:c9:d4:43:
00:03:ad:77:46:b8:f8:cc:0c:b6:aa:09:b9:04:b8:
96:e5:47:70:9c:78:86:c0:7b:cf:7b:ef:b0:85:bd:
a3:98:d6:dd:db:48:3f:95:a7:0e:2a:29:2b:e0:aa:
39:2c:a6:c6:d8:fc:0d:59:95:70:3d:37:37:e5:e1:
0a:61:ef:ab:d4:b9:11:a8:d8:b5:6a:c4:ac:9c:8c:
d6:bf:31:42:66:5d:97:5f:b7:dc:73:56:36:7d:d9:
ed:9e:a6:35:21:9e:21:61:50:51:3e:32:0b:20:b7:
7a:ba:75:85:7f:cd:46:cc:30:27:23:ae:17:7e:ee:
07:b2:e0:18:de:4f:de:ce:31:cf:de:d8:87:e3:17:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.224.0/21
185.9.56.0/22
212.109.128.0/19
IPv6:
2a00:6c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9103
13065
Signature Algorithm: sha256WithRSAEncryption
87:a4:2e:f2:91:33:bd:08:d1:e3:f9:e0:88:15:e6:5b:c2:83:
b2:8e:1e:6e:20:10:9c:af:1d:c6:4b:ce:d4:13:01:18:71:85:
7a:96:a2:cb:57:c4:7f:db:23:26:69:d4:f5:ea:cb:50:60:15:
b8:31:1c:2e:97:e6:82:96:8a:b0:6a:86:f7:b7:f6:50:c8:4d:
97:6d:17:d2:1b:ee:ef:68:05:89:3e:a1:58:62:5d:50:33:f4:
cd:87:ee:11:01:0f:1b:41:cd:a8:e3:da:a8:7d:ef:0a:37:da:
c3:59:97:b8:76:5b:b9:66:d8:0a:f4:a4:86:78:0c:b1:a8:c2:
88:25:29:b5:c4:9b:c0:1f:94:fc:3e:57:19:ad:64:8b:16:ec:
a5:3f:ef:42:0c:32:44:f0:c4:d5:52:7f:1f:aa:99:3a:1d:5c:
45:51:16:25:1e:b3:6f:4e:9b:61:23:e6:29:f3:a5:19:7c:a1:
15:78:82:ed:86:8e:a2:ff:a7:cc:8a:a9:d5:7e:f0:c5:4e:04:
a7:a3:56:25:b1:3f:dc:95:14:ff:38:c1:68:56:90:96:0f:53:
c1:39:80:26:9f:d5:70:b8:1c:f1:91:0a:04:f1:01:bd:1a:e3:
a1:93:8b:17:6c:7d:74:c7:79:29:e5:eb:ed:b4:d4:c8:83:e9:
8c:c0:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:28:11 2024 by rpki-client on console-ams.rpki-client.org