Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.cer (raw, json)
Hash identifier: eCwoo8QNkEpxWM7mt2CXQHr+fl/Ec4gLFaolFLDOQxg=
Subject key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649B9984267130BB0A57487DE2C13DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.202.119.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:b9:98:42:67:13:0b:b0:a5:74:87:de:2c:13:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96eab19bec222c705a1eb03a80df341539d97f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:41:49:37:ee:54:49:b5:b9:8e:ed:56:87:
98:e7:d2:70:42:f6:3f:36:bc:61:2d:2d:04:78:18:
39:92:44:cf:5f:f3:65:98:38:68:6d:c9:b3:f9:f7:
d9:0b:3b:ec:8e:f6:95:cc:18:b6:9a:b5:26:4e:9f:
25:12:d0:0e:ef:14:e7:f6:ae:07:0f:1c:3d:22:62:
03:82:c8:40:8f:98:df:1c:d6:05:76:7c:58:69:07:
02:3c:0e:64:b1:16:cc:5f:b4:24:25:11:f8:e9:1c:
91:20:b9:f9:fd:6f:a0:7c:dd:0a:e0:be:24:36:83:
f9:73:95:7e:2f:14:78:a6:a7:de:cf:99:84:e6:f8:
f2:eb:f7:c6:40:39:5e:af:1f:24:fb:30:72:24:d0:
7c:4f:9e:80:43:6d:65:93:18:67:24:fb:db:93:f1:
d8:35:2b:5b:af:b9:95:57:69:a3:3a:12:5a:1a:d3:
b0:f9:eb:e0:a0:90:cb:05:14:9f:c1:9c:a2:12:10:
42:b0:64:c7:7e:ff:6b:31:40:fc:ab:20:ae:2c:6f:
f3:f1:bc:e1:3e:db:a0:9a:79:2e:9e:32:9c:a2:d4:
43:e3:d9:0f:52:5e:e7:06:e1:0a:38:60:fc:d3:7a:
62:95:6c:5a:47:c5:e7:c1:1d:00:06:b3:c0:33:b2:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e1:1f:a0:39:b3:38:db:e2:bf:15:be:94:d2:b4:c0:27:40:
02:aa:4e:b6:41:63:ae:28:5d:e3:17:5b:9b:bd:c4:df:b0:b3:
e5:8b:ab:b9:84:2e:a3:a8:ff:94:01:d1:43:17:3f:ac:bc:1c:
2e:5b:40:81:cc:d8:ac:bb:4f:9e:c0:5d:0c:0b:ec:df:a4:14:
5b:38:4e:7e:32:0c:21:81:a0:33:77:1b:04:86:01:ae:5c:e8:
2b:cb:ba:39:2b:c7:5f:d0:d1:3f:ca:ed:2a:ff:02:db:9e:25:
70:66:c0:0f:de:23:a5:2c:b9:0f:55:93:ed:22:9c:c7:b4:10:
d4:73:7f:f5:0a:4b:af:4d:30:ab:ba:ce:4c:44:17:f3:d6:53:
0e:f8:d3:db:a0:b8:c3:49:0c:16:2e:e3:dc:73:36:d9:9b:f3:
24:ee:67:59:8e:75:f5:8d:ec:b6:aa:00:79:3f:8b:20:f6:ec:
6d:7e:7e:72:1f:5d:65:b5:8e:04:0d:bf:33:94:1c:a9:72:09:
0e:25:00:9f:82:a9:9e:8d:0c:6c:51:fa:40:17:c9:9c:17:91:
b2:bd:b0:d4:76:8e:4d:b1:03:ce:c6:a2:9d:05:e2:7e:64:93:
0e:51:1a:15:9b:7b:64:6a:c8:d8:24:59:d9:f6:22:2d:63:c8:
4f:43:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:03 2024 by rpki-client on console-ams.rpki-client.org