Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
File: 6SV01xbLvb9yTXBsEReXD2Z7I34.cer (raw, json)
Hash identifier: LcLysd3wdn1boWLMfqd9X3NSw2/xNNeBryxVthe9mX8=
Subject key identifier: E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF9FB1C2B3B41B7C1A367E7C9D52EDF89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 19:23:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203934
IP: 45.90.188.0/22
IP: 185.118.156.0/22
IP: 2a03:6320::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:fb:1c:2b:3b:41:b7:c1:a3:67:e7:c9:d5:2e:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 19:23:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e92574d716cbbdbf724d706c1117970f667b237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:e2:b9:34:c6:3e:9f:db:d6:fb:fa:75:69:
0a:84:e7:00:4b:60:7c:63:c5:05:78:4f:f8:4d:cd:
21:52:64:ec:6b:bd:ff:97:2f:d5:00:e3:82:47:40:
13:12:44:c1:18:88:c0:98:e8:43:80:5b:7c:9a:e8:
a6:fc:b0:8a:d2:f5:63:f8:4c:78:fa:28:aa:fa:e2:
d1:01:17:46:05:b5:24:88:e0:fb:72:38:f6:e3:82:
53:30:f0:e0:36:66:f4:56:29:1d:ca:13:17:4a:b9:
e6:c1:2c:28:82:c9:0a:59:0f:05:90:71:60:38:2d:
f4:bd:6a:23:ab:e7:47:a6:bc:ff:6d:2e:bc:fe:f6:
52:ec:6c:f1:02:c4:d9:d3:c9:6e:98:9a:a2:e0:ef:
f4:f1:6a:9b:e6:7b:b6:36:bc:72:ac:a7:13:9f:df:
f9:3f:27:f2:94:7a:80:f9:31:fc:a1:e7:01:37:75:
10:b4:f1:e7:88:a8:5b:dd:c9:50:c5:f0:6e:21:cc:
c3:df:5a:44:3d:88:68:82:92:79:6f:df:ab:ce:26:
26:98:59:62:0f:5c:22:01:fa:ce:74:53:8f:2c:00:
6f:e9:73:70:03:89:9e:8b:ba:d5:70:fd:11:50:f8:
63:f6:b8:c9:a9:a1:89:29:88:e7:70:c7:d0:7b:62:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.188.0/22
185.118.156.0/22
IPv6:
2a03:6320::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203934
Signature Algorithm: sha256WithRSAEncryption
ae:f3:22:42:c1:53:34:87:b1:80:02:1e:15:ea:a8:de:ac:01:
1d:e5:15:ba:a8:bf:c7:3e:74:97:48:ab:c9:55:ff:27:a3:cc:
1a:eb:5d:e0:ca:43:dd:cf:bb:2b:99:64:b1:c3:56:a4:ce:60:
c2:7e:bc:1e:e9:f8:f9:36:8c:4c:64:fa:82:8e:eb:0b:2d:0d:
4c:f5:ed:0f:4b:c5:21:9f:ab:42:b1:81:13:37:55:12:d3:c2:
79:21:04:0b:30:ae:53:60:79:1b:63:6a:38:0c:ec:0c:87:1c:
40:c9:fb:e2:ff:a3:b3:e1:1c:3e:ec:4e:b6:90:24:fe:b8:79:
de:1a:f2:07:f9:3b:ac:8f:a7:82:65:86:ad:b4:ee:b2:c5:06:
32:d5:75:2e:e6:6f:78:e3:50:42:7a:e2:90:80:22:19:bb:39:
c8:8c:8f:e7:58:b8:c2:53:14:da:c4:09:52:6c:f2:33:63:c0:
3e:cc:b4:17:03:79:69:2b:ac:34:00:9d:05:8e:a7:2e:a5:10:
70:06:69:ce:30:6e:10:39:74:bf:29:e7:5e:91:a6:42:84:f9:
24:aa:3d:30:b2:b6:e9:b6:ef:36:a8:eb:d9:2e:22:a7:c2:bf:
12:88:f5:a2:83:1b:c4:d3:01:4b:da:a6:75:db:f8:e0:03:36:
3d:89:15:5f
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYz5+xwrO0G3waNn58nVLt+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTExMTkyMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTI1NzRkNzE2Y2JiZGJmNzI0ZDcwNmMxMTE3OTcwZjY2N2IyMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps3iuTTGPp/b1vv6dWkKhOcAS2B8
Y8UFeE/4Tc0hUmTsa73/ly/VAOOCR0ATEkTBGIjAmOhDgFt8muim/LCK0vVj+Ex4
+iiq+uLRARdGBbUkiOD7cjj244JTMPDgNmb0VikdyhMXSrnmwSwogskKWQ8FkHFg
OC30vWojq+dHprz/bS68/vZS7GzxAsTZ08lumJqi4O/08Wqb5nu2NrxyrKcTn9/5
PyfylHqA+TH8oecBN3UQtPHniKhb3clQxfBuIczD31pEPYhogpJ5b9+rziYmmFli
D1wiAfrOdFOPLABv6XNwA4mei7rVcP0RUPhj9rjJqaGJKYjncMfQe2LGWwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFOkldNcWy72/ck1wbBEXlw9meyN+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzFmYWM0
YS1hYTMzLTQ0YmMtYjZhMi0xY2YzZGE2ZjdkN2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMWZhYzRh
LWFhMzMtNDRiYy1iNmEyLTFjZjNkYTZmN2Q3ZS8xLzZTVjAxeGJMdmI5eVRYQnNF
UmVYRDJaN0kzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCLVq8AwQCuXacMA0EAgACMAcDBQAqA2MgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMcnjANBgkqhkiG9w0BAQsFAAOCAQEArvMi
QsFTNIexgAIeFeqo3qwBHeUVuqi/xz50l0iryVX/J6PMGutd4MpD3c+7K5lkscNW
pM5gwn68Hun4+TaMTGT6go7rCy0NTPXtD0vFIZ+rQrGBEzdVEtPCeSEECzCuU2B5
G2NqOAzsDIccQMn74v+js+EcPuxOtpAk/rh53hryB/k7rI+ngmWGrbTussUGMtV1
LuZveONQQnrikIAiGbs5yIyP51i4wlMU2sQJUmzyM2PAPsy0FwN5aSusNACdBY6n
LqUQcAZpzjBuEDl0vynnXpGmQoT5JKo9MLK26bbvNqjr2S4ip8K/Eoj1ooMbxNMB
S9qmddv44AM2PYkVXw==
-----END CERTIFICATE-----
Generated at Fri May 3 02:27:54 2024 by rpki-client on console-fra.rpki-client.org