Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.cer (raw, json)
Hash identifier: eJmFpkoKY+4l3aepguXPiZNTP99UrqedvECdN9RNIEo=
Subject key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019206318BAFCADCDA877F225807F845A6D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Sep 2024 17:32:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24889
IP: 46.253.176.0/20
IP: 80.254.64.0/20
IP: 93.94.240.0/21
IP: 109.205.168.0/21
IP: 185.196.120.0/22
IP: 2a02:200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:31:8b:af:ca:dc:da:87:7f:22:58:07:f8:45:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 17:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:e5:2a:e5:e6:67:82:21:37:ce:bf:3a:34:
c6:1b:b0:2e:9e:dc:b1:a9:6e:b1:3c:29:e3:1e:f9:
15:b1:9d:93:eb:92:8d:81:11:15:63:10:7a:6c:b5:
fa:5f:55:99:45:45:6b:e5:a3:77:25:7e:92:b4:94:
69:e6:dd:fb:58:7f:c4:85:ef:03:92:90:91:26:c3:
34:78:73:f9:5d:f7:eb:98:c3:59:18:36:7a:33:95:
c6:da:1d:ea:08:9d:f5:aa:45:e1:a5:41:5c:73:d7:
82:ec:36:a1:a1:a4:95:ff:0e:1f:e9:00:84:1c:42:
bb:c9:fe:2a:a1:0d:53:f1:ee:61:0c:96:96:83:05:
3c:d8:bc:6d:c5:2f:3c:a4:24:2f:47:7c:71:27:12:
18:3b:df:a7:0b:30:f2:4c:60:d6:68:52:31:94:7f:
60:2d:bf:01:87:63:80:0c:6d:95:b5:4f:5d:cd:23:
5d:a6:6d:88:fb:ee:c1:f6:71:2a:7d:94:b1:13:a0:
69:15:2d:c3:5f:89:a4:6d:66:32:c5:a2:61:2c:bf:
53:72:10:c7:f6:af:91:e1:99:5c:fa:5b:23:e5:55:
94:5f:b3:f1:73:33:09:8d:7f:44:fc:e8:90:a2:43:
d5:8d:f3:77:0e:5f:c8:13:a5:30:59:8f:a7:c9:35:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.176.0/20
80.254.64.0/20
93.94.240.0/21
109.205.168.0/21
185.196.120.0/22
IPv6:
2a02:200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24889
Signature Algorithm: sha256WithRSAEncryption
05:2a:99:ae:04:1a:2d:b1:01:dc:c0:d0:7d:06:79:1c:88:a2:
c9:bb:1e:e5:8f:ea:e8:b9:8a:fc:c2:c7:cb:24:28:16:83:08:
af:8a:32:21:af:4b:80:0f:c6:df:9d:dc:51:d0:ed:68:dd:bd:
77:9a:37:aa:49:cc:f7:f3:95:fe:31:fd:e6:67:aa:61:f7:da:
c4:55:9e:fb:35:1b:61:c8:9a:02:06:07:23:9e:c7:da:e3:c8:
98:9c:97:24:3c:2c:39:69:05:86:d9:aa:0a:88:74:b7:a6:e5:
82:c9:3f:2f:b2:8a:f9:ab:ca:cf:77:8b:74:12:f9:f8:61:96:
55:1d:82:35:23:96:4a:dd:9a:69:6d:c2:69:06:cb:c2:c5:ce:
6d:35:37:bc:7a:b7:03:f8:b9:97:be:3f:d7:57:8a:eb:c9:e7:
c1:6e:a1:cd:dc:ee:fe:29:71:cb:6d:27:0c:db:34:a2:3f:65:
77:c3:b8:71:0c:4e:96:5b:e5:1e:73:78:ba:19:02:30:30:e0:
7a:c9:5f:ea:66:2e:e5:b0:5a:54:87:86:a1:3d:ec:eb:2d:85:
76:22:51:82:88:c3:5b:d5:3a:df:46:1e:d1:58:60:b1:20:c5:
44:fc:d9:f6:f9:ef:5d:88:9c:86:28:92:86:12:33:78:1a:79:
a4:1d:17:56
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZIGMYuvytzah38iWAf4RabVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTE4MTczMjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTc2ZGJiNzY5OTViNDk1MGE4NmM1ZjA3Y2E4ZGIzZWI0OTY3OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbblKuXmZ4IhN86/OjTGG7Auntyx
qW6xPCnjHvkVsZ2T65KNgREVYxB6bLX6X1WZRUVr5aN3JX6StJRp5t37WH/Ehe8D
kpCRJsM0eHP5XffrmMNZGDZ6M5XG2h3qCJ31qkXhpUFcc9eC7DahoaSV/w4f6QCE
HEK7yf4qoQ1T8e5hDJaWgwU82LxtxS88pCQvR3xxJxIYO9+nCzDyTGDWaFIxlH9g
Lb8Bh2OADG2VtU9dzSNdpm2I++7B9nEqfZSxE6BpFS3DX4mkbWYyxaJhLL9TchDH
9q+R4Zlc+lsj5VWUX7PxczMJjX9E/OiQokPVjfN3Dl/IE6UwWY+nyTUPXQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFJV227dplbSVCobF8Hyo2z60lnj2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzA5MjYz
Yy1hNWNjLTQ0ZDYtOTFjNC02MTgwMmQ5YzkzNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMDkyNjNj
LWE1Y2MtNDRkNi05MWM0LTYxODAyZDljOTM0NC8xL2xYYmJ0Mm1WdEpVS2hzWHdm
S2piUHJTV2VQWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQELv2wAwQEUP5AAwQDXV7wAwQDbc2oAwQCucR4
MA0EAgACMAcDBQMqAgIAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmE5MA0GCSqG
SIb3DQEBCwUAA4IBAQAFKpmuBBotsQHcwNB9BnkciKLJux7lj+rouYr8wsfLJCgW
gwivijIhr0uAD8bfndxR0O1o3b13mjeqScz385X+Mf3mZ6ph99rEVZ77NRthyJoC
Bgcjnsfa48iYnJckPCw5aQWG2aoKiHS3puWCyT8vsor5q8rPd4t0Evn4YZZVHYI1
I5ZK3ZppbcJpBsvCxc5tNTe8ercD+LmXvj/XV4rryefBbqHN3O7+KXHLbScM2zSi
P2V3w7hxDE6WW+Uec3i6GQIwMOB6yV/qZi7lsFpUh4ahPezrLYV2IlGCiMNb1Trf
Rh7RWGCxIMVE/Nn2+e9diJyGKJKGEjN4GnmkHRdW
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:35:48 2024 by rpki-client on console-fra.rpki-client.org