Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer (raw, json)
Hash identifier: ruyMIRl0c5OTLE9hALnjKSKMkjzR2NTvIq/IVYFhcR0=
Subject key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B51BDFB79CBF0734844396B58C2ED6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209189
IP: 2.57.188.0/22
IP: 2a09:dbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1b:df:b7:9c:bf:07:34:84:43:96:b5:8c:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:98:47:0d:06:2b:22:04:04:7f:55:ae:fc:
9a:cc:dc:4d:cf:42:37:d0:e2:e7:0e:b8:13:a5:a7:
30:2f:8b:97:1a:0f:1d:bc:f8:c0:c4:32:bb:97:61:
b6:38:4f:16:69:a5:c6:33:77:c3:4a:47:01:b3:04:
40:24:62:39:0f:d7:52:7f:c7:9f:9d:7d:04:c1:e8:
23:aa:0e:4f:ea:2b:63:82:b9:99:df:36:ad:b5:e6:
fd:9b:1c:c6:ba:6f:86:83:17:c9:1b:ab:6e:1c:b1:
1d:c6:fe:8b:73:e5:54:28:c4:20:52:87:88:a1:29:
3f:79:d8:bd:36:bb:92:c7:85:8a:29:31:08:3d:8c:
54:08:c6:8c:e6:86:32:15:0f:36:93:88:a5:51:00:
2a:64:77:b0:6f:20:4c:f9:67:36:67:1e:68:4e:9c:
ac:4a:f5:a9:c8:4a:f4:c1:2a:0f:dd:01:14:75:86:
84:b3:2d:d5:92:2b:52:5f:f7:b6:35:e2:93:db:d9:
4e:93:b9:b6:18:5a:49:12:3f:7e:d6:e5:9d:2e:dd:
a6:bb:23:7b:2e:3b:e7:23:98:71:6a:2f:e4:2d:60:
5a:e2:f0:6c:92:14:92:87:d0:35:58:5f:3c:e9:f0:
fe:70:3e:f8:da:55:b1:8f:22:03:d9:66:cc:57:a5:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.188.0/22
IPv6:
2a09:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209189
Signature Algorithm: sha256WithRSAEncryption
82:4c:e4:f0:f3:da:2b:f1:a8:8b:ab:27:4a:d9:00:ba:5b:33:
65:d1:d7:8e:e3:82:86:f0:06:71:6f:4b:87:9d:e4:06:de:18:
b3:aa:a4:57:75:eb:ad:a2:5e:fa:8d:d9:8c:63:63:9b:5b:da:
e1:be:8a:4a:8f:0e:b7:66:e1:0e:bc:9a:37:30:d0:a4:fc:b4:
8f:43:db:75:9d:12:16:3f:2c:94:66:69:51:d8:19:d3:80:d0:
c4:56:00:a1:1b:a5:b5:69:ae:b1:3e:1f:71:d6:2d:ea:90:15:
5e:7b:65:03:74:12:2c:89:ba:68:83:59:18:8b:4a:42:03:14:
97:10:ed:a8:f0:21:26:83:06:ee:0b:4e:d6:33:81:69:99:ee:
67:12:f9:e7:f9:12:2e:fd:03:8f:25:c9:23:1e:bf:91:26:de:
0a:f0:72:7f:e3:7a:27:3f:77:a6:bc:07:f9:ee:6a:18:83:e7:
7d:fb:b1:7e:a5:aa:a1:81:1b:b3:f2:e0:fa:fb:d7:54:cd:2c:
ed:e6:93:b4:7e:88:2a:5f:cb:ff:cc:72:4e:9d:b3:35:5e:88:
00:be:52:8b:ba:11:4c:46:00:4d:39:05:d3:ab:d1:f0:a2:21:
19:9e:2a:06:31:e0:4e:06:ac:e7:e7:94:3d:23:70:a2:02:ff:
a0:2b:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:25 2025 by rpki-client