Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer (raw, json)
Hash identifier: D9hEvLYVKNfDPI8cUcBGl1c+Ft//rfcJG5danRycVY4=
Subject key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7E2B83F9647D03DB9E86F00EEAB76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.145.240.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e2:b8:3f:96:47:d0:3d:b9:e8:6f:00:ee:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:91:73:2a:d4:b5:c3:b9:1d:28:56:c6:7b:
6e:be:66:45:07:26:92:25:7d:00:43:03:b0:b8:79:
54:f2:d5:59:bc:da:bd:de:1f:bd:1c:be:0d:7b:51:
7c:4c:bb:61:9e:03:8c:77:6d:98:a0:38:8e:81:42:
5a:98:4f:83:b7:0c:8a:e1:b9:e1:69:66:b0:dd:55:
e2:ed:ec:e6:d4:c8:7f:00:d1:62:43:0f:b1:f2:b1:
58:82:67:00:bd:48:2f:eb:d4:6d:4b:ca:3c:f4:1d:
67:a4:2a:57:02:95:b9:a5:ef:ab:ab:1e:70:9d:d6:
0c:f6:29:a3:48:03:3f:ae:cf:ac:08:6e:3a:cb:9a:
17:0c:88:50:ab:48:f2:d6:39:39:06:45:2e:8e:f9:
54:ae:2c:b6:aa:b2:64:77:01:1b:8a:ed:30:83:72:
4f:c5:a7:cf:4b:6e:ed:5a:e1:98:2d:72:f9:d6:9d:
da:b0:6c:46:88:1e:81:72:90:91:bc:ac:f0:6d:f1:
aa:80:3f:f3:9b:42:89:de:15:30:92:dd:70:d9:6b:
24:60:21:bd:d1:2f:31:89:23:40:49:00:cc:95:f9:
5b:9a:db:d5:af:28:66:62:13:02:c6:06:60:e6:a6:
bf:1e:4e:15:b7:cf:39:c5:86:09:fa:ea:84:54:da:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.240.0/23
Signature Algorithm: sha256WithRSAEncryption
17:62:96:f3:90:f0:96:bd:b5:c6:2f:52:68:4e:8e:f3:c8:9a:
5c:54:d0:e0:0f:f3:0c:f3:8b:04:43:1c:e5:1a:2c:08:9c:ab:
bb:b8:80:f0:f9:ce:37:31:fc:7d:73:02:db:48:aa:97:e4:59:
99:c1:dd:08:88:ee:0e:bf:6a:1e:e9:06:b2:57:19:e2:2d:1e:
56:21:ed:be:9f:6e:54:90:93:16:87:fc:de:76:ff:f1:d7:7a:
be:65:5e:e8:ac:1a:ef:53:7b:c7:9d:eb:e3:73:54:71:9d:40:
cc:9b:d0:ea:67:8a:ad:b8:84:55:78:b0:17:71:12:cd:95:e1:
3d:6e:33:a0:94:95:f2:61:7b:d5:4a:31:0e:11:f3:e6:71:b4:
b8:25:f9:02:20:a9:eb:14:fb:0a:d9:1a:64:35:05:76:47:d9:
13:e5:af:76:a6:5a:94:99:90:f1:3e:a0:19:2b:af:e2:74:e5:
38:bb:b0:32:87:fd:1f:f7:d7:bf:d7:73:11:3f:02:5a:ff:ad:
76:5f:ff:8c:9a:d9:f0:1d:54:b4:3e:cf:6e:4d:4e:d0:04:06:
a9:af:84:b2:e5:1f:54:f1:cc:7c:88:4b:57:1c:8c:8d:eb:39:
bd:79:6f:24:35:bc:e3:c1:00:25:cb:71:13:2d:7d:9c:51:c6:
75:26:50:40
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYzGt+K4P5ZH0D256G8A7qt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGFlOTg4MWJmMTEyMDk4YTJiZmQ0OWEwYmNmZmRjY2NlN2JjMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR2RcyrUtcO5HShWxntuvmZFByaS
JX0AQwOwuHlU8tVZvNq93h+9HL4Ne1F8TLthngOMd22YoDiOgUJamE+DtwyK4bnh
aWaw3VXi7ezm1Mh/ANFiQw+x8rFYgmcAvUgv69RtS8o89B1npCpXApW5pe+rqx5w
ndYM9imjSAM/rs+sCG46y5oXDIhQq0jy1jk5BkUujvlUriy2qrJkdwEbiu0wg3JP
xafPS27tWuGYLXL51p3asGxGiB6BcpCRvKzwbfGqgD/zm0KJ3hUwkt1w2WskYCG9
0S8xiSNASQDMlflbmtvVryhmYhMCxgZg5qa/Hk4Vt885xYYJ+uqEVNqvtwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFPiumIG/ESCYor/UmgvP/czOe8IIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzVkOWY1
Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRmODcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3
LTBmMTAtNGUxNC1iNGFmLTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNh
QzhfOXpNNTd3Z2cubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcKR8DANBgkqhkiG9w0BAQsFAAOCAQEAF2KW
85Dwlr21xi9SaE6O88iaXFTQ4A/zDPOLBEMc5RosCJyru7iA8PnONzH8fXMC20iq
l+RZmcHdCIjuDr9qHukGslcZ4i0eViHtvp9uVJCTFof83nb/8dd6vmVe6Kwa71N7
x53r43NUcZ1AzJvQ6meKrbiEVXiwF3ESzZXhPW4zoJSV8mF71UoxDhHz5nG0uCX5
AiCp6xT7CtkaZDUFdkfZE+WvdqZalJmQ8T6gGSuv4nTlOLuwMof9H/fXv9dzET8C
Wv+tdl//jJrZ8B1UtD7Pbk1O0AQGqa+EsuUfVPHMfIhLVxyMjes5vXlvJDW848EA
JctxEy19nFHGdSZQQA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:46 2024 by rpki-client on console-ams.rpki-client.org