Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.cer (raw, json)
Hash identifier: T+iP/lpP2ZsAhHU7XCnBn1TXgR5f0mjQG75qBxnifww=
Subject key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F63419F97A24B28563CAEF78DD290
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.169.6.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:63:41:9f:97:a2:4b:28:56:3c:ae:f7:8d:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f809613877deab874a9401d156db14ff4d2814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:b9:51:2a:88:6e:fb:66:14:bd:e5:53:dc:
fb:1a:87:8f:9b:0a:20:b2:cf:a5:9f:11:f9:60:61:
60:62:b9:18:ea:90:86:55:fc:dc:b8:19:2f:76:c1:
d3:49:a5:c7:f8:dc:a6:dd:e8:4a:8f:cf:d1:66:a5:
ff:43:a5:f8:65:55:3c:32:74:15:97:d3:29:0d:73:
dc:e1:76:a2:35:c7:00:c2:32:88:43:25:fe:fe:cf:
bb:36:79:b1:d8:2b:69:d1:ba:c5:2a:2e:ff:f9:47:
31:66:e0:a9:f2:9d:75:f6:e5:e7:18:5e:11:66:82:
ad:05:26:4e:ef:39:ad:2c:15:53:90:80:09:a5:a6:
76:a3:51:ed:0e:93:6a:72:09:c4:16:2b:26:35:86:
1e:9a:2c:8d:da:bd:b4:a3:8a:0e:6f:ff:aa:e8:2d:
6e:f1:4b:89:81:9a:bd:55:eb:8e:48:d3:38:a4:70:
d9:33:ab:a7:ca:c3:64:ef:8b:25:d4:91:35:b1:d3:
1a:ec:99:da:91:d9:a9:c8:1e:e0:a0:83:f8:f5:19:
b2:58:28:c8:a5:4f:1f:2e:c9:2d:5c:43:77:7a:02:
b5:ae:30:12:b5:13:34:e1:e0:85:0f:55:47:f9:2f:
f0:a7:48:e4:ea:84:29:78:48:d9:5f:b5:12:40:3a:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.6.0/23
Signature Algorithm: sha256WithRSAEncryption
90:79:3d:89:9c:e7:b1:7c:44:87:0d:27:6c:cc:20:f8:c1:b2:
31:8f:ab:24:2f:7a:c7:23:14:b6:f5:5b:bd:26:d5:88:af:c0:
d3:c0:73:6e:f5:f6:ca:51:00:dd:e3:b4:a3:60:48:60:50:e4:
95:20:14:e3:4a:e5:9e:11:f0:4c:88:5f:ee:f8:4a:a6:32:6d:
c4:e4:66:6d:dc:94:4f:f8:74:21:2b:37:d5:ac:cb:99:17:6d:
71:a2:4a:8c:bc:19:f2:21:63:b7:77:09:85:57:60:71:80:5b:
2e:9e:80:a3:d2:a8:87:7a:20:17:ab:2a:c0:17:46:0a:dd:58:
2e:bb:e7:29:e7:37:c1:60:06:e1:8c:88:87:5c:25:a0:8b:e8:
03:1a:c1:bc:9e:84:db:a0:1d:f7:b8:8b:c2:f9:72:b3:d1:58:
9d:dc:7a:a1:57:ab:09:85:80:32:35:ac:33:d7:c5:9d:8c:fa:
61:ea:6f:7e:3b:a4:6b:bf:8b:d8:72:e1:f5:8b:9d:c1:47:5e:
04:af:97:ab:64:ae:0e:d0:05:43:d0:5c:52:46:3a:f7:58:f1:
88:c0:a7:bd:c7:4c:50:59:21:83:21:31:de:19:51:24:77:f3:
48:17:f1:8e:74:1c:5e:9d:40:cf:dd:c0:71:65:a3:9b:a0:08:
e9:62:a4:6f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIb2NBn5eiSyhWPK73jdKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmY4MDk2MTM4NzdkZWFiODc0YTk0MDFkMTU2ZGIxNGZmNGQyODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoC5USqIbvtmFL3lU9z7GoePmwog
ss+lnxH5YGFgYrkY6pCGVfzcuBkvdsHTSaXH+Nym3ehKj8/RZqX/Q6X4ZVU8MnQV
l9MpDXPc4XaiNccAwjKIQyX+/s+7Nnmx2Ctp0brFKi7/+UcxZuCp8p119uXnGF4R
ZoKtBSZO7zmtLBVTkIAJpaZ2o1HtDpNqcgnEFismNYYemiyN2r20o4oOb/+q6C1u
8UuJgZq9VeuOSNM4pHDZM6unysNk74sl1JE1sdMa7JnakdmpyB7goIP49RmyWCjI
pU8fLsktXEN3egK1rjAStRM04eCFD1VH+S/wp0jk6oQpeEjZX7USQDpWVQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJb4CWE4d96rh0qUAdFW2xT/TSgUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2FkMjc4
Mi1mNTNhLTRiYjQtYjhkNy02NDY2ZDQ4MzQ1OWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvYWQyNzgy
LWY1M2EtNGJiNC1iOGQ3LTY0NjZkNDgzNDU5Yy8xL2x2Z0pZVGgzM3F1SFNwUUIw
VmJiRlA5TktCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwakGMA0GCSqGSIb3DQEBCwUAA4IBAQCQeT2J
nOexfESHDSdszCD4wbIxj6skL3rHIxS29Vu9JtWIr8DTwHNu9fbKUQDd47SjYEhg
UOSVIBTjSuWeEfBMiF/u+EqmMm3E5GZt3JRP+HQhKzfVrMuZF21xokqMvBnyIWO3
dwmFV2BxgFsunoCj0qiHeiAXqyrAF0YK3Vguu+cp5zfBYAbhjIiHXCWgi+gDGsG8
noTboB33uIvC+XKz0Vid3HqhV6sJhYAyNawz18WdjPph6m9+O6Rrv4vYcuH1i53B
R14Er5erZK4O0AVD0FxSRjr3WPGIwKe9x0xQWSGDITHeGVEkd/NIF/GOdBxenUDP
3cBxZaOboAjpYqRv
-----END CERTIFICATE-----
Generated at Fri May 3 09:35:14 2024 by rpki-client on console-ams.rpki-client.org