Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer (raw, json)
Hash identifier: PSebdtRbA3nHAPOMjuIRdXodzxcvKn6g5uOh5Ai0xYE=
Subject key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7936C8A792989B1811B387EFADB98CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42947
IP: 5.181.236.0/22
IP: 45.14.120.0/22
IP: 45.95.76.0/22
IP: 89.34.28.0/22
IP: 91.213.74.0/23
IP: 91.213.120.0/23
IP: 94.154.3.0/24
IP: 95.214.240.0/22
IP: 176.101.72.0/21
IP: 185.50.116.0/22
IP: 185.88.232.0/22
IP: 185.110.224.0/22
IP: 185.152.108.0/22
IP: 185.213.108.0/22
IP: 193.31.96.0/22
IP: 193.32.72.0/21
IP: 193.150.16.0/22
IP: 193.187.184.0/22
IP: 194.36.200.0/22
IP: 2001:67c:283c::/48
IP: 2a02:2b60::/32
IP: 2a09:f080::/29
IP: 2a0b:8740::/29
IP: 2a0e:d80::/29
IP: 2a0e:4800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6c:8a:79:29:89:b1:81:1b:38:7e:fa:db:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:4d:16:5d:57:85:6c:3c:12:b5:df:4b:d2:
eb:46:53:d7:d5:0b:7e:7a:d0:61:12:cd:8d:94:ab:
04:11:a6:df:d0:15:77:df:7a:8c:8d:2d:f2:fd:fa:
da:f1:b6:e5:75:18:3b:8f:8d:59:a5:9a:71:64:8a:
78:02:6b:f0:d6:c4:23:6d:8d:80:57:7e:5d:16:b7:
70:8e:0a:72:a8:99:ab:be:5c:9e:80:d8:58:ce:9f:
47:ae:22:d5:5b:72:cc:12:c3:59:36:04:84:74:97:
c1:c9:ed:7c:f1:c3:ff:87:a0:84:78:ff:6b:b8:92:
8e:81:66:de:02:60:07:a8:bf:1d:60:02:ab:ac:a9:
a1:d6:52:1d:1a:0b:e2:55:7c:56:d6:96:08:e6:ad:
ac:38:90:25:57:6b:65:d7:70:0f:b2:f1:5c:64:6f:
4c:9a:f0:2e:4c:85:fe:cb:6a:78:3e:4e:c1:2c:c3:
73:4a:27:fa:aa:73:64:f2:b3:0f:ba:ad:77:37:c0:
25:ad:e8:e7:d0:d5:20:9c:b3:f4:eb:7a:df:e6:69:
d0:e9:34:2e:5e:39:d0:16:54:44:22:d6:11:f7:b0:
34:f0:63:ab:70:77:6b:26:38:5d:af:87:f0:3b:b8:
84:2b:3b:57:fa:31:d8:4c:14:6a:9a:0d:06:c9:6b:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.236.0/22
45.14.120.0/22
45.95.76.0/22
89.34.28.0/22
91.213.74.0/23
91.213.120.0/23
94.154.3.0/24
95.214.240.0/22
176.101.72.0/21
185.50.116.0/22
185.88.232.0/22
185.110.224.0/22
185.152.108.0/22
185.213.108.0/22
193.31.96.0/22
193.32.72.0/21
193.150.16.0/22
193.187.184.0/22
194.36.200.0/22
IPv6:
2001:67c:283c::/48
2a02:2b60::/32
2a09:f080::/29
2a0b:8740::/29
2a0e:d80::/29
2a0e:4800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42947
Signature Algorithm: sha256WithRSAEncryption
4c:59:58:51:31:e9:2f:90:86:19:a0:8a:5f:93:d1:ac:b3:af:
8b:45:d7:34:5e:5c:21:02:80:f1:1a:73:4d:b8:14:d1:0c:1f:
54:5c:ce:d4:7e:80:43:3d:dc:47:2e:8a:4f:f9:f4:62:46:c7:
bf:1d:a9:8d:11:b0:07:ad:fe:25:bb:59:04:5d:63:67:0a:09:
30:6b:4c:f7:cc:05:f8:c1:7e:d3:44:2c:17:fb:b2:f5:0c:9d:
02:19:85:fa:e8:b5:82:ab:34:9a:ba:db:a8:7a:71:29:e1:89:
29:b0:24:a7:51:88:6f:66:2d:27:f6:3b:a3:57:b2:30:d0:39:
01:28:da:74:54:22:53:44:62:6e:a8:51:41:03:b2:e9:c2:be:
8c:dc:09:b4:a9:d8:15:59:a8:58:71:eb:a4:03:0e:6e:98:ec:
51:cf:6c:70:e1:12:79:72:c2:fd:05:31:ef:44:5c:e1:d7:d7:
7d:48:d0:69:54:11:ba:da:74:e1:46:d7:8c:ab:c2:80:6e:47:
d0:40:ce:55:2c:7c:1d:19:8f:e0:aa:88:7b:41:98:79:1b:0c:
63:7b:a3:48:ec:32:29:72:33:84:6c:53:b0:8d:40:a9:ed:fe:
5b:06:d8:15:6a:15:7b:c9:10:30:24:22:21:5c:f5:17:f8:97:
13:17:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:35:14 2024 by rpki-client on console-ams.rpki-client.org