Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer (raw, json)
Hash identifier: s6Ohzi63MpHFuLOrvJwmBSgSbqAYpX1cWw67kty3a20=
Subject key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D7915A402CD610AD494A39917E733DF69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 11:44:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.246.243.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:15:a4:02:cd:61:0a:d4:94:a3:99:17:e7:33:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 11:44:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e994e74064158e97904990947510eb9941986ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:ea:53:85:54:0b:18:9e:d3:8b:4e:fc:4d:
0a:55:78:f3:ef:b8:bc:27:32:ed:b3:56:86:5f:6f:
59:f8:78:12:95:c9:3e:4a:16:5e:c5:2a:eb:41:bd:
71:ad:d8:4f:99:1e:1b:c6:7d:9f:5f:40:6e:be:bb:
8f:24:1d:73:6b:17:f3:f7:96:0e:fe:cc:60:71:ec:
70:81:99:ee:8b:82:51:0d:ac:bc:a1:b0:46:58:e8:
38:62:d0:96:10:d2:16:ca:77:99:c3:e4:c7:9b:3e:
40:9c:db:2e:a2:d6:a4:c9:85:18:a6:9e:67:b5:28:
fe:49:50:90:38:ea:73:74:b3:8b:5b:88:1b:45:04:
fb:a1:7a:f3:f9:7e:fa:c9:aa:e8:c4:58:b7:d5:90:
7b:31:14:5d:9e:00:62:9b:2e:29:ca:3d:89:6d:59:
7f:1f:b4:70:a7:0a:08:5e:31:76:10:8a:88:64:a2:
62:3f:95:6f:09:1e:c9:d5:b1:77:1d:6c:4d:11:67:
56:bf:51:f1:09:77:f5:2c:b2:8f:2e:98:c7:f4:42:
05:a0:45:4f:07:e2:e0:f1:69:d3:d0:dd:bb:eb:50:
ec:8f:d1:06:2a:4d:96:31:4e:db:6f:43:4c:3d:c3:
b3:dd:0d:e5:4b:26:ca:2f:2d:b9:b6:f3:bd:88:f4:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5e:99:b1:b5:33:2d:87:4b:02:83:38:7a:81:b3:b1:c3:86:
67:32:d0:e6:aa:af:6c:c0:0a:4b:b8:84:86:a4:c7:93:70:fc:
15:18:b6:b8:01:fb:d2:1e:52:6f:15:f2:a7:ee:77:4b:8d:34:
71:49:b6:09:07:d1:25:7e:35:3f:13:73:5d:0b:13:2b:9e:6c:
fe:8c:fa:41:fb:bd:ed:60:88:89:94:00:3e:e7:b5:9e:71:c5:
5d:c5:eb:da:74:4a:a5:0a:89:e3:a1:84:e9:7c:80:9d:0a:04:
79:1d:d0:f7:69:85:22:92:a5:1a:9a:8b:ad:82:68:64:b9:12:
b1:72:ad:c3:95:63:43:da:4f:e7:a8:82:36:7e:0c:c8:fb:af:
44:c0:34:cc:e3:9a:a0:aa:96:53:e3:7c:5f:8c:a6:08:34:e2:
70:7d:70:37:37:e8:ce:12:e1:50:b4:43:7e:8f:b8:3e:8e:26:
19:64:98:9f:06:54:6b:d4:d8:83:0d:11:57:f3:2e:bb:e1:b4:
d7:66:96:fe:eb:01:93:0a:13:b8:0d:d8:47:f6:8f:dd:ee:12:
71:9e:79:29:40:84:d4:fd:24:4b:77:70:e6:08:54:ea:2a:d6:
14:a1:c2:63:32:b8:a7:42:65:30:15:9c:ce:a1:8c:8f:3f:b9:
9f:bc:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:44:23 2024 by rpki-client on console-fra.rpki-client.org