Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
File: 6czfaVmJN585hMGGQek367aCJZs.cer (raw, json)
Hash identifier: 6f9FOyKVBr02yrN4qOPullkpXjcxhiknJGdnMxP0yCk=
Subject key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E147CABD2A7E6D3753EF9CA092E816FEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Mar 2024 15:58:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.9.128.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:7c:ab:d2:a7:e6:d3:75:3e:f9:ca:09:2e:81:6f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 15:58:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9ccdf695989379f3984c18641e937ebb682259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:85:30:af:3a:a3:f5:9a:70:64:ed:53:02:
19:42:e9:e3:46:51:69:d8:ed:f2:4e:3b:c6:b5:07:
14:2c:0e:8e:dd:84:43:da:f4:ad:bd:84:2a:21:aa:
65:20:40:47:cc:cb:00:6a:fc:cd:ee:15:f9:f7:57:
c1:a8:1d:b9:16:8d:ac:6b:d2:bf:24:0d:ff:5a:bc:
4c:ae:5a:13:fc:8b:4f:f4:ce:af:39:d4:64:15:5a:
85:29:f7:50:89:bc:91:ad:eb:49:ae:58:d7:a4:d1:
fe:73:f1:d9:8d:d5:e8:71:06:bd:b8:cf:6c:88:ce:
72:33:d8:a6:1b:81:42:7f:ed:7e:14:f0:09:95:b0:
e4:f3:25:e6:bc:b9:a0:a1:e9:a5:80:c3:c4:7e:3e:
c5:72:a9:15:35:b2:a5:b1:4e:68:d1:14:cc:fb:29:
30:a1:8f:d0:f2:8b:b0:53:fd:78:6e:fd:aa:b7:20:
55:14:6e:cd:68:b9:30:dd:66:07:b4:0c:99:db:07:
16:9a:b7:8b:3a:39:bc:1d:3b:b1:75:7f:2a:23:f7:
f0:28:94:e3:b8:24:e4:04:1a:9e:f5:1e:70:c9:be:
04:6a:a8:fe:df:42:d5:87:5b:fe:3a:08:b6:b7:64:
bb:dd:28:3a:37:95:2e:ad:bb:d1:48:55:f6:d2:9d:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/22
Signature Algorithm: sha256WithRSAEncryption
80:3e:7c:77:56:d0:1e:3a:75:4d:ef:12:c0:c2:18:81:a1:84:
80:8d:bd:4b:f2:cf:66:01:1b:d8:2b:e4:f6:19:ba:48:98:0b:
47:8d:11:cb:6f:25:41:ce:df:d2:aa:31:6e:fd:c7:5e:49:eb:
90:f6:7e:a6:42:c9:28:d4:c5:20:2d:de:44:37:aa:67:8d:1b:
3c:5a:bf:23:30:e9:ad:20:c8:68:bf:af:48:dd:34:54:53:9f:
cf:04:06:84:ef:99:b5:84:00:76:b1:82:16:e3:49:90:ea:2e:
6d:fd:86:28:6d:39:70:88:6c:c9:2b:74:de:aa:dd:2c:e1:cc:
46:96:cc:90:b5:32:25:c8:78:eb:b5:cc:52:4e:d4:6a:03:fe:
fd:39:fb:7b:37:fa:1f:c5:0f:d0:79:fc:a2:d5:03:c0:0b:52:
86:6e:a6:09:ae:b3:3c:1d:33:88:4a:d2:a8:7c:8d:d3:bf:ea:
72:32:82:6f:f4:1d:de:ef:da:11:02:08:db:35:dc:26:22:02:
f5:36:19:59:4a:c8:a9:41:77:4e:fd:8d:1e:6a:af:8c:fa:a0:
e8:0f:e4:c4:60:e5:c3:24:fe:2e:d6:3c:e7:e5:5a:55:86:56:
b0:c7:74:b3:42:f3:95:da:87:fa:f4:34:40:aa:bc:31:88:d5:
0c:2d:61:0b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY4UfKvSp+bTdT75ygkugW/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzA2MTU1ODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWNjZGY2OTU5ODkzNzlmMzk4NGMxODY0MWU5MzdlYmI2ODIyNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQCFMK86o/WacGTtUwIZQunjRlFp
2O3yTjvGtQcULA6O3YRD2vStvYQqIaplIEBHzMsAavzN7hX591fBqB25Fo2sa9K/
JA3/WrxMrloT/ItP9M6vOdRkFVqFKfdQibyRretJrljXpNH+c/HZjdXocQa9uM9s
iM5yM9imG4FCf+1+FPAJlbDk8yXmvLmgoemlgMPEfj7FcqkVNbKlsU5o0RTM+ykw
oY/Q8ouwU/14bv2qtyBVFG7NaLkw3WYHtAyZ2wcWmreLOjm8HTuxdX8qI/fwKJTj
uCTkBBqe9R5wyb4Eaqj+30LVh1v+Ogi2t2S73Sg6N5UurbvRSFX20p1ywwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOnM32lZiTefOYTBhkHpN+u2giWbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2EwMDY0
MS0zMDg0LTQxZTItOTBhNi1iMzVmNmE3YjcyMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvYTAwNjQx
LTMwODQtNDFlMi05MGE2LWIzNWY2YTdiNzIwOC8xLzZjemZhVm1KTjU4NWhNR0dR
ZWszNjdhQ0pacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLQmAMA0GCSqGSIb3DQEBCwUAA4IBAQCAPnx3
VtAeOnVN7xLAwhiBoYSAjb1L8s9mARvYK+T2GbpImAtHjRHLbyVBzt/SqjFu/cde
SeuQ9n6mQsko1MUgLd5EN6pnjRs8Wr8jMOmtIMhov69I3TRUU5/PBAaE75m1hAB2
sYIW40mQ6i5t/YYobTlwiGzJK3Teqt0s4cxGlsyQtTIlyHjrtcxSTtRqA/79Oft7
N/ofxQ/Qefyi1QPAC1KGbqYJrrM8HTOIStKofI3Tv+pyMoJv9B3e79oRAgjbNdwm
IgL1NhlZSsipQXdO/Y0eaq+M+qDoD+TEYOXDJP4u1jzn5VpVhlawx3SzQvOV2of6
9DRAqrwxiNUMLWEL
-----END CERTIFICATE-----
Generated at Fri May 3 11:12:05 2024 by rpki-client on console-ams.rpki-client.org