Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer (raw, json)
Hash identifier: t/MFk/aXeJP2VzjyqKm7AX62R2z/XRG1WsENsSactEI=
Subject key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBE1855A4C52C41D879C4211D3E788
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209189
IP: 2.57.188.0/22
IP: 2a09:dbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e1:85:5a:4c:52:c4:1d:87:9c:42:11:d3:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:98:47:0d:06:2b:22:04:04:7f:55:ae:fc:
9a:cc:dc:4d:cf:42:37:d0:e2:e7:0e:b8:13:a5:a7:
30:2f:8b:97:1a:0f:1d:bc:f8:c0:c4:32:bb:97:61:
b6:38:4f:16:69:a5:c6:33:77:c3:4a:47:01:b3:04:
40:24:62:39:0f:d7:52:7f:c7:9f:9d:7d:04:c1:e8:
23:aa:0e:4f:ea:2b:63:82:b9:99:df:36:ad:b5:e6:
fd:9b:1c:c6:ba:6f:86:83:17:c9:1b:ab:6e:1c:b1:
1d:c6:fe:8b:73:e5:54:28:c4:20:52:87:88:a1:29:
3f:79:d8:bd:36:bb:92:c7:85:8a:29:31:08:3d:8c:
54:08:c6:8c:e6:86:32:15:0f:36:93:88:a5:51:00:
2a:64:77:b0:6f:20:4c:f9:67:36:67:1e:68:4e:9c:
ac:4a:f5:a9:c8:4a:f4:c1:2a:0f:dd:01:14:75:86:
84:b3:2d:d5:92:2b:52:5f:f7:b6:35:e2:93:db:d9:
4e:93:b9:b6:18:5a:49:12:3f:7e:d6:e5:9d:2e:dd:
a6:bb:23:7b:2e:3b:e7:23:98:71:6a:2f:e4:2d:60:
5a:e2:f0:6c:92:14:92:87:d0:35:58:5f:3c:e9:f0:
fe:70:3e:f8:da:55:b1:8f:22:03:d9:66:cc:57:a5:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.188.0/22
IPv6:
2a09:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209189
Signature Algorithm: sha256WithRSAEncryption
9b:f5:cf:9f:bd:3b:bc:14:4c:83:26:c3:85:cc:ac:35:56:6b:
89:9f:4a:19:60:f2:f2:74:81:6b:59:bf:7b:b4:7f:1d:5d:da:
a1:86:e8:e5:8d:d4:af:aa:9b:2f:ee:63:e2:b5:1e:ff:de:90:
44:18:7c:c8:06:fb:4f:cb:d4:ce:92:33:35:cb:52:2d:4f:d6:
3d:67:b2:87:86:65:31:25:ca:9f:f9:57:17:92:e2:fe:8f:17:
ee:ad:10:09:4b:d0:62:cc:c4:70:29:a8:60:bf:db:39:fb:ef:
92:cf:91:20:1c:30:f3:0d:a8:91:6b:eb:d8:a7:9a:49:4f:66:
5e:a3:1b:7d:8a:52:2b:87:1a:53:c0:5e:f3:41:a7:76:7f:ce:
f4:ce:98:2a:a3:ec:56:42:4a:9a:e7:24:6d:68:97:39:59:15:
81:e5:95:a5:5e:d5:68:d6:27:85:13:64:e6:68:96:34:bb:9e:
fc:80:9e:33:5c:03:1d:d5:34:f7:dc:40:27:c9:d3:c6:9c:2e:
6d:cf:77:36:26:03:d8:9d:60:a3:9b:69:ab:d7:69:b9:d1:44:
f0:88:cb:56:6a:6f:f3:7d:91:55:e5:95:cb:39:11:81:03:08:
57:2f:46:8e:d4:fc:1b:f4:06:14:24:4d:ba:df:aa:be:11:23:
cb:15:72:db
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzF2+GFWkxSxB2HnEIR0+eIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWI4MWY0ZTQ1ZDcxMWRhMGMxNDhkYzJiYWFkMTUwNGRkYmI0MjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TSYRw0GKyIEBH9VrvyazNxNz0I3
0OLnDrgTpacwL4uXGg8dvPjAxDK7l2G2OE8WaaXGM3fDSkcBswRAJGI5D9dSf8ef
nX0Ewegjqg5P6itjgrmZ3zatteb9mxzGum+GgxfJG6tuHLEdxv6Lc+VUKMQgUoeI
oSk/edi9NruSx4WKKTEIPYxUCMaM5oYyFQ82k4ilUQAqZHewbyBM+Wc2Zx5oTpys
SvWpyEr0wSoP3QEUdYaEsy3VkitSX/e2NeKT29lOk7m2GFpJEj9+1uWdLt2muyN7
LjvnI5hxai/kLWBa4vBskhSSh9A1WF886fD+cD742lWxjyID2WbMV6XQUQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJW4H05F1xHaDBSNwrqtFQTdu0J7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzBhYWI3
OC02NmRlLTQ0NGMtYTg0My0wYjNjYjRjNmI3OWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMGFhYjc4
LTY2ZGUtNDQ0Yy1hODQzLTBiM2NiNGM2Yjc5YS8xL2xiZ2ZUa1hYRWRvTUZJM0N1
cTBWQk4yN1Fucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCAjm8MA0EAgACMAcDBQMqCdvAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMxJTANBgkqhkiG9w0BAQsFAAOCAQEAm/XPn707vBRM
gybDhcysNVZriZ9KGWDy8nSBa1m/e7R/HV3aoYbo5Y3Ur6qbL+5j4rUe/96QRBh8
yAb7T8vUzpIzNctSLU/WPWeyh4ZlMSXKn/lXF5Li/o8X7q0QCUvQYszEcCmoYL/b
Ofvvks+RIBww8w2okWvr2KeaSU9mXqMbfYpSK4caU8Be80Gndn/O9M6YKqPsVkJK
muckbWiXOVkVgeWVpV7VaNYnhRNk5miWNLue/ICeM1wDHdU099xAJ8nTxpwubc93
NiYD2J1go5tpq9dpudFE8IjLVmpv832RVeWVyzkRgQMIVy9GjtT8G/QGFCRNut+q
vhEjyxVy2w==
-----END CERTIFICATE-----
Generated at Fri May 3 08:15:16 2024 by rpki-client on console-fra.rpki-client.org