Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
File: 6Zam_9rVzrJiZhe9btnE7FcdDzo.cer (raw, json)
Hash identifier: 6YBXAtmy3gJAk84ZmQsmgBwH2oDa1pTbg6ZTWJt4xRM=
Subject key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34961B9763C9C2DCD8B8DEA3D25AFFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47993
IP: 91.208.168.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:61:b9:76:3c:9c:2d:cd:8b:8d:ea:3d:25:af:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:8a:31:ef:4c:4a:d2:b4:92:c6:00:1f:c2:
36:c0:d6:70:67:4b:46:9f:19:21:03:17:87:a2:8e:
fb:03:81:7c:b1:8e:a7:98:34:3a:ab:5a:9b:2b:74:
a0:be:a0:f1:30:eb:cb:9a:15:70:4c:98:70:e4:e6:
e9:21:f2:a9:07:b0:d8:dc:29:8b:ba:01:ad:71:5f:
56:f1:5f:c4:c7:d6:4e:1d:b5:3c:04:7f:3f:96:24:
1f:dd:27:bb:78:89:e0:2b:dc:44:10:44:ea:1e:9e:
88:aa:5d:d1:fa:fe:f9:70:a2:eb:6c:cb:00:41:98:
48:c8:3b:05:23:20:b9:e1:4c:3b:e1:e0:f3:4e:76:
70:53:32:ca:d0:5a:15:fd:0f:4b:ee:a2:68:ae:4e:
c3:56:a8:22:97:10:4c:21:44:27:05:0f:4f:7d:0c:
07:40:45:49:ee:98:25:24:1e:b7:5d:7c:84:38:16:
74:04:b0:64:42:aa:68:cb:09:cf:54:dc:5b:32:84:
85:0b:78:b0:37:7e:85:aa:86:09:db:8a:9a:77:23:
39:70:51:dc:fb:ab:2c:a6:cd:69:7a:a6:bb:8e:76:
21:16:da:28:35:96:b1:95:5c:1d:85:1c:12:97:37:
6b:cb:63:2e:46:ac:0f:4f:0a:e9:c9:c1:86:35:cc:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.168.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47993
Signature Algorithm: sha256WithRSAEncryption
11:cc:86:ec:e9:cd:a3:d8:4b:5e:1f:08:aa:25:fd:78:cd:9e:
76:32:e7:68:55:bd:f1:52:10:76:d9:b9:3f:18:86:2f:6f:36:
60:c5:d5:c4:2b:9b:9d:0f:d0:dc:98:d2:c1:3b:b2:e6:27:2f:
00:ac:fe:47:95:ad:f5:53:c0:fe:a4:1d:27:49:9d:68:b6:38:
02:83:52:de:f7:18:ae:d8:34:01:03:47:06:37:5f:6c:93:b4:
43:6a:0b:4d:13:0e:71:3c:3c:cc:58:a2:e6:65:fa:46:6e:35:
1b:ae:b3:22:32:cc:e0:cf:65:75:90:36:6c:cd:1c:71:a2:55:
a8:63:c5:67:9a:3c:4a:e6:c1:6d:02:c1:61:18:f4:69:bc:7e:
1c:66:b5:10:43:63:d5:23:9e:28:48:7e:d0:94:77:06:7b:02:
9a:9a:5f:22:08:c1:e8:4e:85:5d:80:ed:38:c1:17:4f:9b:4e:
2c:8c:51:f0:5d:4d:6b:f4:70:05:72:17:79:e6:b3:d2:b6:26:
05:2a:c3:f1:e7:f5:4a:b2:f7:8d:10:ea:06:a6:ed:d9:ed:57:
fe:fe:e0:af:46:6c:ab:28:36:ad:92:60:97:40:cf:f1:2f:74:
2e:88:d5:81:fc:e8:9a:fa:23:d8:b5:ec:b3:8d:bc:43:3e:39:
81:f6:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:00:27 2024 by rpki-client on console-fra.rpki-client.org