Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.cer (raw, json)
Hash identifier: rjfz6h9R1q7/fUYPKHRkvIit2Z+6+m5LVV89VBjFBH4=
Subject key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1B5CB77FDD4F0EE3E3FB9C7F3F17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210985
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1b:5c:b7:7f:dd:4f:0e:e3:e3:fb:9c:7f:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:49:d9:ec:60:06:ed:18:13:46:ef:66:15:
c1:ca:c4:5f:1c:dd:f4:81:da:0e:f3:cb:dd:59:ab:
04:98:0f:7e:3d:b0:40:6b:06:4b:8b:ef:31:dc:93:
37:f6:7c:69:16:8b:6a:fd:05:01:61:c5:7b:70:4e:
4d:67:d5:0f:96:e0:c3:bc:41:53:23:01:d4:3d:67:
6b:e1:01:ea:50:92:b8:89:4e:c3:04:70:a8:f9:e8:
0c:e3:f2:e6:1f:f5:e5:43:32:05:74:bb:06:4e:e6:
4f:e6:f3:cf:23:16:4a:9a:cd:6f:df:18:cc:71:31:
2b:f0:36:60:af:09:11:4b:bc:25:3b:09:6d:09:68:
38:08:0e:21:3b:51:32:6c:d3:51:3b:7c:75:b5:57:
76:0a:a8:bf:7c:94:5e:2e:e8:a7:57:11:48:99:26:
02:bd:b0:b1:3a:8e:e2:4d:6c:d0:84:e4:ce:65:3d:
3d:f3:cd:4e:12:e4:8c:4c:00:1a:a2:aa:00:9e:75:
45:1c:87:a4:05:a2:89:8f:54:43:57:dd:f3:03:9c:
eb:0d:49:77:67:f1:14:d5:61:be:82:44:5e:46:3d:
da:57:ba:30:de:53:f8:93:59:96:7d:ff:c3:de:11:
86:64:98:53:a5:92:5c:18:c9:80:53:53:b3:31:d2:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210985
Signature Algorithm: sha256WithRSAEncryption
13:39:05:c2:ea:77:a5:dc:c8:56:b5:0d:b6:76:99:47:54:29:
9f:0a:b2:55:27:de:0d:f7:e4:79:b7:57:e5:1c:2f:bd:b1:42:
88:4b:28:d9:79:80:ec:3c:d6:bf:df:ef:f7:d2:42:db:87:68:
85:46:e3:a4:d7:71:9b:72:2f:b1:c6:39:c5:1d:2b:f2:46:7c:
02:85:2f:b7:f1:29:88:81:b1:55:05:f9:76:61:ed:75:f7:3e:
c9:90:6a:91:af:e8:a5:da:1e:f0:ec:5a:ba:11:58:29:cb:b3:
2c:1c:8f:c9:cb:2f:1f:38:a8:ad:87:b9:d1:73:ca:64:f6:4c:
67:1c:97:21:b4:8f:1a:91:23:48:13:e1:b4:52:99:0d:c3:b1:
03:97:9f:68:a9:bc:86:b3:44:dd:e9:07:e1:d5:71:cf:30:ab:
0a:23:b1:1b:fa:bc:63:41:64:2d:75:af:43:2b:ee:d2:e8:ed:
7d:35:1e:14:59:f4:2f:cb:30:c9:c6:5f:03:fc:38:f5:9e:45:
82:91:d8:af:a4:31:40:05:89:92:c8:55:f2:82:9c:d4:6e:00:
c8:5f:40:2c:cf:91:ff:af:05:c1:43:e6:cd:7e:7c:20:38:ca:
4d:fb:85:a5:d3:af:e2:72:52:28:8e:cf:18:b0:7d:44:1a:bc:
8d:4c:62:80
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzCbRtct3/dTw7j4/ucfz8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2FjM2U4ZDYzYjFjM2FmYzdjNmMwYmZkYTlkNWFjODE3YjZlZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SBJ2exgBu0YE0bvZhXBysRfHN30
gdoO88vdWasEmA9+PbBAawZLi+8x3JM39nxpFotq/QUBYcV7cE5NZ9UPluDDvEFT
IwHUPWdr4QHqUJK4iU7DBHCo+egM4/LmH/XlQzIFdLsGTuZP5vPPIxZKms1v3xjM
cTEr8DZgrwkRS7wlOwltCWg4CA4hO1EybNNRO3x1tVd2Cqi/fJReLuinVxFImSYC
vbCxOo7iTWzQhOTOZT09881OEuSMTAAaoqoAnnVFHIekBaKJj1RDV93zA5zrDUl3
Z/EU1WG+gkReRj3aV7ow3lP4k1mWff/D3hGGZJhTpZJcGMmAU1OzMdLrdwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCysPo1jscOvx8bAv9qdWsgXtu5tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzE3ZTk5
OS1lNTNkLTQ4Y2EtOTgwYS05NWFlNjRiZDU2ZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMTdlOTk5
LWU1M2QtNDhjYS05ODBhLTk1YWU2NGJkNTZlYy8xL0xLdy1qV094dzZfSHhzQ18y
cDFheUJlMjdtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4KTANBgkqhkiG9w0BAQsFAAOCAQEAEzkFwup3pdzI
VrUNtnaZR1QpnwqyVSfeDffkebdX5RwvvbFCiEso2XmA7DzWv9/v99JC24dohUbj
pNdxm3IvscY5xR0r8kZ8AoUvt/EpiIGxVQX5dmHtdfc+yZBqka/opdoe8OxauhFY
KcuzLByPycsvHziorYe50XPKZPZMZxyXIbSPGpEjSBPhtFKZDcOxA5efaKm8hrNE
3ekH4dVxzzCrCiOxG/q8Y0FkLXWvQyvu0ujtfTUeFFn0L8swycZfA/w49Z5FgpHY
r6QxQAWJkshV8oKc1G4AyF9ALM+R/68FwUPmzX58IDjKTfuFpdOv4nJSKI7PGLB9
RBq8jUxigA==
-----END CERTIFICATE-----
Generated at Fri May 3 06:56:34 2024 by rpki-client on console-ams.rpki-client.org