Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.cer (raw, json)
Hash identifier: yOG7ToRI40z6/pwZTkKJJf6x1fllemxr3pazQEzsCWY=
Subject key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196199A7F86F17C435D1866046FFB202F4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Apr 2025 08:11:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.97.216.0/22
IP: 2a06:7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:9a:7f:86:f1:7c:43:5d:18:66:04:6f:fb:20:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 08:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9708724593b4753175b214812cf6891a645f84c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:0b:e5:3b:f6:df:2b:d6:88:4a:f6:67:73:
08:fd:67:48:0b:ce:d9:31:b8:e1:6b:a9:d1:cc:d6:
81:53:5b:39:4c:e2:b2:24:27:68:23:19:bf:76:c4:
0b:71:18:51:52:93:3a:36:97:48:e9:0f:f4:c0:b1:
e6:22:68:2f:a2:a2:12:e6:89:61:94:d5:c5:c1:18:
4b:f8:35:be:fc:3b:d5:0d:d6:e7:4c:b5:b2:14:cb:
d9:2a:4d:4b:4f:2a:e4:53:63:ba:89:94:b7:d9:46:
96:1d:ad:fc:eb:a1:c9:26:06:aa:4e:43:16:f6:e1:
31:96:07:a2:be:ef:c9:31:cb:7f:19:4a:ec:49:ac:
43:5f:79:d6:04:2e:4d:fe:c2:99:d5:31:28:c1:e4:
42:e7:a0:2b:6b:b1:3b:99:f4:b3:37:7d:f9:3a:5f:
5d:19:b0:4a:e2:7f:02:89:74:34:ae:e1:da:13:37:
42:f9:0f:07:f4:6f:70:bc:87:7f:10:45:74:67:6a:
c5:35:d9:bd:87:5d:f9:8f:6c:2c:e0:90:26:93:0b:
fe:d1:5a:fb:ef:59:77:10:20:22:82:f1:88:46:c7:
f9:4d:1c:e8:78:af:c4:ab:35:51:b3:05:76:b4:c7:
a7:e5:de:1a:16:2b:12:3e:24:d2:ba:23:5d:34:8f:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.216.0/22
IPv6:
2a06:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:cd:eb:f1:6a:d1:05:1b:1f:65:4a:41:96:e2:3d:c2:7d:d3:
ed:58:b8:29:76:ad:e4:4b:69:49:fc:c6:63:0d:8c:e2:0c:b8:
75:0c:e8:b1:e6:89:56:65:10:da:89:07:f7:02:9b:6f:e7:2d:
ed:0a:8a:7a:22:4a:a1:e7:74:ad:34:0c:cb:5d:aa:53:e0:ba:
85:35:38:51:4b:87:c7:79:8b:87:27:83:93:5b:e1:64:20:8d:
b8:4b:ce:1d:5c:06:e0:c0:cd:8c:c1:08:30:93:0b:9b:16:d4:
80:d3:dd:b5:14:12:ec:70:bd:0f:61:c3:e1:f5:b4:e0:8f:9f:
2c:f1:8c:50:79:98:38:2f:b6:ad:97:94:2d:6c:af:cc:73:07:
41:b8:31:ca:c8:71:e5:52:f4:60:43:48:e0:11:e4:b1:85:15:
83:97:ce:8f:db:64:15:b5:58:7b:14:18:43:92:d5:a8:d1:fa:
00:5f:d3:58:f7:cd:a4:3a:80:52:f5:74:65:3e:da:ee:16:22:
87:76:55:ae:f4:26:d5:54:9c:37:87:aa:34:cd:5b:d0:bd:a8:
dc:ef:c8:54:2c:54:fa:7d:47:94:6f:0b:c6:08:be:61:15:13:
6f:9c:da:bb:50:b2:c6:d4:2c:a5:b4:7d:a0:10:c1:59:fc:f6:
8b:45:36:39
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZYZmn+G8XxDXRhmBG/7IC9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDA5MDgxMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzA4NzI0NTkzYjQ3NTMxNzViMjE0ODEyY2Y2ODkxYTY0NWY4NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEEL5Tv23yvWiEr2Z3MI/WdIC87Z
Mbjha6nRzNaBU1s5TOKyJCdoIxm/dsQLcRhRUpM6NpdI6Q/0wLHmImgvoqIS5olh
lNXFwRhL+DW+/DvVDdbnTLWyFMvZKk1LTyrkU2O6iZS32UaWHa3866HJJgaqTkMW
9uExlgeivu/JMct/GUrsSaxDX3nWBC5N/sKZ1TEoweRC56Ara7E7mfSzN335Ol9d
GbBK4n8CiXQ0ruHaEzdC+Q8H9G9wvId/EEV0Z2rFNdm9h135j2ws4JAmkwv+0Vr7
71l3ECAigvGIRsf5TRzoeK/EqzVRswV2tMen5d4aFisSPiTSuiNdNI9RTwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJcIckWTtHUxdbIUgSz2iRpkX4TFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2FlOGMz
NS1mOWQ3LTQzN2ItODk5Ni0zMmE0Mjc4ZTViYzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYWU4YzM1
LWY5ZDctNDM3Yi04OTk2LTMyYTQyNzhlNWJjNS8xL2x3aHlSWk8wZFRGMXNoU0JM
UGFKR21SZmhNVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWHYMA0EAgACMAcDBQMqBgfAMA0GCSqGSIb3
DQEBCwUAA4IBAQA2zevxatEFGx9lSkGW4j3CfdPtWLgpdq3kS2lJ/MZjDYziDLh1
DOix5olWZRDaiQf3Aptv5y3tCop6Ikqh53StNAzLXapT4LqFNThRS4fHeYuHJ4OT
W+FkII24S84dXAbgwM2MwQgwkwubFtSA0921FBLscL0PYcPh9bTgj58s8YxQeZg4
L7atl5QtbK/McwdBuDHKyHHlUvRgQ0jgEeSxhRWDl86P22QVtVh7FBhDktWo0foA
X9NY982kOoBS9XRlPtruFiKHdlWu9CbVVJw3h6o0zVvQvajc78hULFT6fUeUbwvG
CL5hFRNvnNq7ULLG1CyltH2gEMFZ/PaLRTY5
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:23 2025 by rpki-client