Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
File: Lt7Joglt7BA7ri18N5bg1HCFwgI.cer (raw, json)
Hash identifier: eeN7ZfAqDWimkZz4nGNk/WqdWsG20IfFCgrqy3GrgKY=
Subject key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E614D61608CE243409012DD1579CB0EF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Mar 2024 13:57:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29687
IP: 77.71.0.0/17
IP: 185.186.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:4d:61:60:8c:e2:43:40:90:12:dd:15:79:cb:0e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 13:57:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:00:23:59:63:1c:3d:65:9b:91:93:b6:a2:
79:85:25:2d:c5:1f:40:65:ce:6f:96:3a:b7:02:fe:
89:b5:a7:3b:c7:3c:ed:10:32:38:26:84:e8:bf:4b:
ac:8f:db:88:8b:21:7d:af:6f:e0:11:31:5d:95:ce:
91:f6:fd:32:6f:29:bf:25:b2:04:f0:f9:3a:28:fb:
37:80:86:64:e8:4e:99:f1:7c:0f:9f:66:b9:c0:85:
76:d2:28:a0:30:59:e6:21:08:e5:4f:3d:b9:3a:54:
29:4e:76:3a:ce:3e:4d:d4:e4:93:27:46:f1:2e:8e:
ad:4e:b9:01:c3:96:d5:6b:95:94:27:f8:7b:20:6a:
78:6f:33:71:96:c2:55:de:5e:c1:a8:28:52:f0:f0:
ef:84:fd:24:11:f5:4d:31:d7:5a:1c:31:b8:bf:4f:
58:17:f8:ca:8c:80:13:e8:b4:81:24:0f:29:f0:1f:
4e:50:c4:5d:6e:fd:d5:ff:e6:05:26:61:f2:3e:e6:
9b:9b:36:83:23:39:58:ee:43:17:06:70:6e:c9:35:
08:d8:45:b2:24:21:7b:86:4b:14:1b:27:58:0f:78:
d7:cc:c1:a6:3d:23:8e:57:d6:40:be:e8:a4:70:19:
55:80:1d:a1:f5:f2:b8:53:74:57:01:d0:12:6c:b9:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0/17
185.186.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29687
Signature Algorithm: sha256WithRSAEncryption
4f:db:4c:71:56:65:ea:dc:d0:16:8b:75:6a:9b:94:16:47:df:
fe:3d:22:92:12:1c:e3:45:64:e9:67:25:ce:f5:b2:fa:b2:44:
a2:20:cb:8b:e8:6b:a9:88:ce:0f:8f:f1:ac:89:2c:ea:5d:46:
ab:7f:e2:28:82:ff:0b:4c:6d:87:ac:79:1b:94:a2:2c:a6:c8:
5d:19:52:a7:e2:55:43:5b:62:32:40:73:1b:4f:8f:64:31:6b:
73:91:6e:45:c8:05:7d:a0:45:78:6d:93:60:61:2d:ac:40:58:
62:2b:11:1e:af:e0:92:75:90:e3:3b:58:47:dd:39:4b:98:f4:
ea:3c:27:c3:40:ef:8d:79:7d:b9:66:77:21:fa:67:bf:1f:bb:
fe:30:2f:d9:2a:e4:31:e4:d2:d2:09:02:53:5c:47:67:9f:d3:
b2:2a:a8:a2:d9:4c:e2:63:15:ee:a9:04:b0:d8:aa:b3:a4:1b:
8d:1e:ba:b4:4d:1b:65:69:48:34:90:fc:b0:ed:a6:98:a0:2c:
e5:1b:c8:63:9f:a9:62:e4:ce:71:27:5e:2e:6a:d0:74:43:6a:
9b:b7:46:50:ce:1d:c0:95:8c:98:0d:da:e0:35:4a:ae:57:42:
73:39:03:07:f8:db:ec:9d:6f:cb:29:a5:de:15:48:4b:30:ec:
97:c8:b0:a9
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAY5hTWFgjOJDQJAS3RV5yw7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzIxMTM1NzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWRlYzlhMjA5NmRlYzEwM2JhZTJkN2MzNzk2ZTBkNDcwODVjMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEwAI1ljHD1lm5GTtqJ5hSUtxR9A
Zc5vljq3Av6Jtac7xzztEDI4JoTov0usj9uIiyF9r2/gETFdlc6R9v0ybym/JbIE
8Pk6KPs3gIZk6E6Z8XwPn2a5wIV20iigMFnmIQjlTz25OlQpTnY6zj5N1OSTJ0bx
Lo6tTrkBw5bVa5WUJ/h7IGp4bzNxlsJV3l7BqChS8PDvhP0kEfVNMddaHDG4v09Y
F/jKjIAT6LSBJA8p8B9OUMRdbv3V/+YFJmHyPuabmzaDIzlY7kMXBnBuyTUI2EWy
JCF7hksUGydYD3jXzMGmPSOOV9ZAvuikcBlVgB2h9fK4U3RXAdASbLmeFwIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFC7eyaIJbewQO64tfDeW4NRwhcICMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2RmMGQz
Ny00ZjY1LTQzOWQtYTUzMS0wNTdkN2FmMGFlZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvZGYwZDM3
LTRmNjUtNDM5ZC1hNTMxLTA1N2Q3YWYwYWVmNC8xL0x0N0pvZ2x0N0JBN3JpMThO
NWJnMUhDRndnSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQHTUcAAwQCubqIMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAnP3MA0GCSqGSIb3DQEBCwUAA4IBAQBP20xxVmXq3NAWi3Vqm5QWR9/+
PSKSEhzjRWTpZyXO9bL6skSiIMuL6GupiM4Pj/GsiSzqXUarf+Iogv8LTG2HrHkb
lKIspshdGVKn4lVDW2IyQHMbT49kMWtzkW5FyAV9oEV4bZNgYS2sQFhiKxEer+CS
dZDjO1hH3TlLmPTqPCfDQO+NeX25Znch+me/H7v+MC/ZKuQx5NLSCQJTXEdnn9Oy
Kqii2UziYxXuqQSw2KqzpBuNHrq0TRtlaUg0kPyw7aaYoCzlG8hjn6li5M5xJ14u
atB0Q2qbt0ZQzh3AlYyYDdrgNUquV0JzOQMH+NvsnW/LKaXeFUhLMOyXyLCp
-----END CERTIFICATE-----
Generated at Fri May 3 11:29:17 2024 by rpki-client on console-ams.rpki-client.org