Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
File: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer (raw, json)
Hash identifier: BhnGExjJNGGG2whN1/tBuWBohlD9r/Bb0uHo8P9KkaA=
Subject key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB18242F111F86F9C9CB74A3272D0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59771
IP: 185.205.24.0/22
IP: 2a0b:c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:18:24:2f:11:1f:86:f9:c9:cb:74:a3:27:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:bd:2a:7e:65:59:61:5f:cd:38:34:e1:b9:
6b:33:0f:9c:e3:62:7e:13:cc:8a:59:52:a9:17:79:
c6:bf:c6:34:f1:12:7c:e6:99:7f:e5:4c:2e:7c:4c:
2b:85:ec:44:2b:aa:d8:99:e6:fb:f9:a9:c9:4e:a4:
5b:e2:91:36:ca:4a:c1:e6:f6:93:58:d7:e9:ca:74:
f5:e1:62:94:ca:1b:c9:29:0c:d2:ae:e2:1f:56:ba:
cf:8d:0f:b3:8d:7a:11:80:55:f3:56:35:05:db:e6:
ae:34:fd:5a:ca:cc:f6:b8:c1:15:05:1f:6e:b8:51:
95:f0:95:fa:95:99:54:52:19:45:c9:60:44:48:ca:
d3:f7:ff:d6:8f:f0:f5:d7:80:48:58:16:ad:fb:ae:
42:e8:68:f1:b9:97:0f:d1:67:d2:f8:bd:93:53:85:
bf:79:06:20:41:84:78:42:9c:03:5f:43:1b:0f:55:
01:d1:6c:42:a0:8d:98:c6:27:08:71:5f:cf:2c:b6:
c0:a4:7a:b8:d9:e0:27:62:3b:39:b8:de:81:10:cb:
91:4c:56:6d:a9:16:8d:53:64:06:a4:d6:2b:a6:9d:
e7:9f:dd:00:61:86:90:3e:da:60:b5:ad:65:fd:29:
07:27:20:5f:c1:86:e7:3d:2f:cf:d0:0f:b1:d3:70:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
IPv6:
2a0b:c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59771
Signature Algorithm: sha256WithRSAEncryption
66:6b:8f:49:2e:e3:fb:9c:e8:f5:72:e0:0d:33:29:e3:19:7f:
7d:2d:19:18:15:35:a5:cd:be:7b:76:87:68:1e:1f:ca:66:23:
7c:de:9f:75:64:3f:05:05:ad:70:58:ca:2d:f9:73:ae:63:33:
1f:55:e5:0b:d9:c4:42:d9:2b:21:7a:ce:e2:d3:e7:bf:24:f1:
0e:5f:f0:85:ea:bc:80:4e:83:db:2d:95:22:b0:c1:cd:6f:59:
0d:bc:65:57:a7:3d:5e:2a:1e:6a:54:eb:81:06:a2:19:2e:d8:
7c:0b:eb:fb:96:1d:d9:e2:ae:32:f5:fd:99:ea:62:8a:f0:de:
87:b2:21:f8:8d:7f:de:1e:9e:49:5b:5e:d2:08:97:a7:a7:d2:
8f:14:7f:76:c7:dc:93:c4:ba:14:b0:c7:bf:18:4f:50:e7:e9:
77:0a:77:24:1a:1c:bc:14:eb:51:88:17:41:c4:cd:36:43:e3:
da:38:2f:b5:f6:cb:0f:53:ab:9e:f7:3c:5e:ca:d3:3d:f6:43:
4d:78:25:07:20:d8:9c:d6:17:9d:6b:76:cc:28:8d:b6:a6:93:
5f:61:24:64:da:a4:d1:52:ff:19:91:01:8a:45:3e:d9:ff:ec:
0f:2f:81:1d:9f:ab:91:da:33:42:ca:e7:d7:7e:0f:cf:cc:9b:
1c:a2:f0:67
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzC2xgkLxEfhvnJy3SjJy0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQ3YmE2NTE0MDNkMThkZGRiN2E3NGIyMGRkYzIxZGViOTQyMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tS9Kn5lWWFfzTg04blrMw+c42J+
E8yKWVKpF3nGv8Y08RJ85pl/5UwufEwrhexEK6rYmeb7+anJTqRb4pE2ykrB5vaT
WNfpynT14WKUyhvJKQzSruIfVrrPjQ+zjXoRgFXzVjUF2+auNP1aysz2uMEVBR9u
uFGV8JX6lZlUUhlFyWBESMrT9//Wj/D114BIWBat+65C6GjxuZcP0WfS+L2TU4W/
eQYgQYR4QpwDX0MbD1UB0WxCoI2YxicIcV/PLLbApHq42eAnYjs5uN6BEMuRTFZt
qRaNU2QGpNYrpp3nn90AYYaQPtpgta1l/SkHJyBfwYbnPS/P0A+x03BNLQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJbXumUUA9GN3benSyDdwh3rlCIOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzBkMzNj
OS02YTg0LTRjZTMtODFiMC00MThhZjkwYWNiOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMGQzM2M5
LTZhODQtNGNlMy04MWIwLTQxOGFmOTBhY2I4YS8xL2x0ZTZaUlFEMFkzZHQ2ZExJ
TjNDSGV1VUlnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuc0YMA0EAgACMAcDBQMqCwDAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDpezANBgkqhkiG9w0BAQsFAAOCAQEAZmuPSS7j+5zo
9XLgDTMp4xl/fS0ZGBU1pc2+e3aHaB4fymYjfN6fdWQ/BQWtcFjKLflzrmMzH1Xl
C9nEQtkrIXrO4tPnvyTxDl/wheq8gE6D2y2VIrDBzW9ZDbxlV6c9XioealTrgQai
GS7YfAvr+5Yd2eKuMvX9mepiivDeh7Ih+I1/3h6eSVte0giXp6fSjxR/dsfck8S6
FLDHvxhPUOfpdwp3JBocvBTrUYgXQcTNNkPj2jgvtfbLD1Ornvc8XsrTPfZDTXgl
ByDYnNYXnWt2zCiNtqaTX2EkZNqk0VL/GZEBikU+2f/sDy+BHZ+rkdozQsrn134P
z8ybHKLwZw==
-----END CERTIFICATE-----
Generated at Fri May 3 12:01:02 2024 by rpki-client on console-ams.rpki-client.org