Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
File: 6NHRX1kR1I0cWe7zdPezf3HU678.cer (raw, json)
Hash identifier: rYwZLN5mAC7jQBq7z0g0x6R4PMqJhz2H6hRetADacG4=
Subject key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D877F4A1261694CB660861BFDDBE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.10.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:87:7f:4a:12:61:69:4c:b6:60:86:1b:fd:db:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:3b:74:93:f5:be:a1:1c:fc:b5:86:93:67:
d1:a8:94:63:b9:67:9a:e9:2d:32:fb:a7:65:0c:9e:
9f:a2:6b:04:3f:c0:24:69:2c:fe:b8:61:f8:f2:d3:
87:22:9b:e0:da:a8:27:91:23:f0:c6:92:2a:57:00:
79:78:a6:0d:08:12:b7:0e:02:63:df:48:a3:cf:15:
66:e4:0b:00:ec:1d:53:df:b1:b3:54:a1:96:c4:28:
4a:1c:38:55:32:d6:4b:26:fc:6f:ca:f0:10:b5:28:
ee:0f:16:71:e7:cb:2d:57:87:e2:01:ca:03:b9:20:
75:58:e0:b2:6b:ee:66:0d:a3:14:82:a3:d0:b1:7c:
51:6c:e6:d5:95:81:bf:f5:f6:00:a9:c1:2e:49:72:
b5:63:b7:cd:be:cb:f5:45:29:61:68:37:0e:89:69:
29:b7:4a:3d:7c:f9:3e:5d:69:27:f0:cb:93:ce:28:
4c:0b:55:1d:96:76:74:82:8e:08:6b:2b:ab:6b:95:
95:e3:a4:60:3d:c9:ea:ff:ea:a8:85:0f:86:a2:29:
07:a3:0c:ca:e8:76:6c:03:a8:14:da:a6:63:92:34:
f2:d8:35:ac:e0:d2:b4:68:ad:8c:ee:b4:5b:e6:18:
d8:b4:cf:1a:1e:10:46:49:0f:0f:b1:32:9f:92:d3:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.10.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ce:4c:a7:09:d2:2f:97:33:68:a5:1b:81:79:79:96:eb:4d:
2a:2d:64:0a:8c:29:25:75:46:6c:1c:9e:62:75:00:6e:59:ea:
15:f1:5c:62:2d:85:d7:50:cc:8b:17:f7:f5:34:af:66:21:29:
b1:7e:d9:5b:82:9f:44:67:83:78:04:6f:ae:e5:96:ef:cd:1d:
8a:76:e9:3a:8b:45:a7:cf:15:87:49:f5:7f:a7:18:b8:9d:81:
51:7b:bb:cf:54:a0:9a:de:19:3a:e5:ed:2c:da:96:05:fe:9e:
93:6e:57:58:30:51:1a:5a:f7:8c:61:94:b0:95:ca:77:d4:57:
bb:66:39:b0:a8:0e:cd:aa:52:0e:dd:c2:99:99:a4:cb:8b:23:
c9:3c:9e:a3:da:e0:75:f8:36:10:2e:7f:23:95:61:04:ff:fb:
42:97:99:f3:8b:6f:2f:0e:33:cb:3d:a3:9e:9c:fb:2f:8c:52:
1a:ea:85:57:fa:c6:99:af:7f:5d:94:e1:3c:1a:8a:d5:24:3a:
6e:07:45:aa:e2:79:53:a9:bf:ca:75:21:0a:eb:be:79:d9:bf:
28:bc:7b:03:c7:ed:18:2a:b6:6f:65:e1:d5:a4:9a:1a:60:7f:
bb:34:89:f2:bb:d5:21:83:2b:f7:10:96:7b:a8:16:b4:f9:9e:
54:16:62:8c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzCbYd/ShJhaUy2YIYb/dvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQxZDE1ZjU5MTFkNDhkMWM1OWVlZjM3NGY3YjM3ZjcxZDRlYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00k7dJP1vqEc/LWGk2fRqJRjuWea
6S0y+6dlDJ6fomsEP8AkaSz+uGH48tOHIpvg2qgnkSPwxpIqVwB5eKYNCBK3DgJj
30ijzxVm5AsA7B1T37GzVKGWxChKHDhVMtZLJvxvyvAQtSjuDxZx58stV4fiAcoD
uSB1WOCya+5mDaMUgqPQsXxRbObVlYG/9fYAqcEuSXK1Y7fNvsv1RSlhaDcOiWkp
t0o9fPk+XWkn8MuTzihMC1UdlnZ0go4Iayura5WV46RgPcnq/+qohQ+GoikHowzK
6HZsA6gU2qZjkjTy2DWs4NK0aK2M7rRb5hjYtM8aHhBGSQ8PsTKfktMPDQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOjR0V9ZEdSNHFnu83T3s39x1Ou/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzc3Mjll
NC02YTZkLTRiYzUtODhlMS02NmY4YjZlMTZiOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNzcyOWU0
LTZhNmQtNGJjNS04OGUxLTY2ZjhiNmUxNmI4YS8xLzZOSFJYMWtSMUkwY1dlN3pk
UGV6ZjNIVTY3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9gKMA0GCSqGSIb3DQEBCwUAA4IBAQA4zkyn
CdIvlzNopRuBeXmW600qLWQKjCkldUZsHJ5idQBuWeoV8VxiLYXXUMyLF/f1NK9m
ISmxftlbgp9EZ4N4BG+u5ZbvzR2Kduk6i0WnzxWHSfV/pxi4nYFRe7vPVKCa3hk6
5e0s2pYF/p6TbldYMFEaWveMYZSwlcp31Fe7ZjmwqA7NqlIO3cKZmaTLiyPJPJ6j
2uB1+DYQLn8jlWEE//tCl5nzi28vDjPLPaOenPsvjFIa6oVX+saZr39dlOE8GorV
JDpuB0Wq4nlTqb/KdSEK67552b8ovHsDx+0YKrZvZeHVpJoaYH+7NInyu9Uhgyv3
EJZ7qBa0+Z5UFmKM
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:40:44 2024 by rpki-client on console-ams.rpki-client.org