Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
File: 6wK1I7069vxsN93WbN9HmT24Yys.cer (raw, json)
Hash identifier: FGjpwum/csD0dRqfdSqVrv33V1cAOhyDQfluobYwWcY=
Subject key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B2B0C5DC4E58C345229DE9E3F557A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.197.97.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2b:0c:5d:c4:e5:8c:34:52:29:de:9e:3f:55:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:36:c1:83:90:db:c9:6a:24:66:10:3c:99:
d5:fa:4b:ed:59:41:80:ea:fc:8c:47:70:86:11:30:
60:b3:17:63:43:f0:22:c5:f1:df:69:83:d7:23:7a:
60:88:c1:0b:2b:23:46:b8:d0:f0:d3:0a:a9:66:29:
ae:6f:24:90:1a:2a:0e:d7:6b:3f:32:b8:35:34:d1:
50:5e:0d:ae:70:3b:30:39:cf:b8:d4:01:d1:aa:80:
b6:cf:3a:35:af:f6:fb:bf:ac:c0:83:59:a3:d5:10:
88:f7:82:3f:a2:26:bc:fe:19:b8:41:96:70:12:8d:
45:06:57:c6:e6:c3:e6:b0:2f:74:dd:b2:9a:17:f7:
9e:7d:27:b1:bc:29:da:58:d5:1e:17:83:d5:ba:3b:
e8:8c:01:d0:4c:06:4b:ef:94:d3:14:ff:17:4d:f4:
38:7b:48:0f:fe:fc:80:49:1a:76:a7:c1:10:65:cf:
ae:9a:a1:e1:fa:05:46:12:a4:6a:0e:f6:c1:43:8a:
5a:a9:94:0f:8b:95:f7:34:89:ac:5e:bc:58:85:62:
97:7d:c6:a0:8c:0c:66:7d:ab:fd:0a:c2:5e:4d:9d:
07:41:3a:b7:94:3e:f9:45:65:25:bd:ac:59:ba:b7:
6b:bc:78:96:1e:53:a1:58:89:ad:8e:a7:81:18:e2:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.97.0/24
Signature Algorithm: sha256WithRSAEncryption
16:87:be:95:e9:c6:f9:cb:c0:9a:50:f1:0d:a3:37:39:a3:28:
06:71:7e:f1:16:c4:07:c2:cc:92:e6:0d:3f:43:d6:bf:2d:80:
ab:f7:88:68:0c:1f:12:61:1e:15:8e:52:ad:f5:16:6b:a2:23:
da:2f:e0:3d:65:25:f4:c2:e3:18:55:36:44:45:e8:16:ec:a7:
f3:f5:2a:e6:25:fe:fa:86:b8:6c:fc:3f:26:83:51:bf:b3:05:
60:e2:26:96:4f:31:b4:0d:17:5b:f1:1c:99:1b:8d:2f:1e:55:
65:01:75:89:ef:01:9c:16:dd:c7:f8:f2:8d:40:d9:57:81:8b:
14:59:0d:60:90:d3:ae:28:d8:3e:aa:6e:ad:e3:dd:c4:e4:60:
fe:88:3c:ae:d3:d9:48:ad:5b:88:12:4f:cd:5d:22:82:49:f7:
52:c0:cc:60:b4:11:2b:a2:89:42:83:e7:78:2c:77:a1:db:d4:
09:d4:df:e4:2c:f5:37:b7:a7:cf:6f:81:55:6d:be:c5:b1:fa:
6f:73:4b:f1:29:13:bd:b1:ee:45:a3:a1:b9:d3:3b:62:1d:24:
2c:44:36:b7:d3:62:6b:90:a2:36:e3:0e:16:e2:04:be:bc:b4:
cb:e2:8c:d5:be:30:cb:ab:e3:3a:f0:5c:f6:88:d8:50:f8:ad:
4b:dc:1c:23
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSysMXcTljDRSKd6eP1V6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjAyYjUyM2JkM2FmNmZjNmMzN2RkZDY2Y2RmNDc5OTNkYjg2MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfY2wYOQ28lqJGYQPJnV+kvtWUGA
6vyMR3CGETBgsxdjQ/AixfHfaYPXI3pgiMELKyNGuNDw0wqpZimubySQGioO12s/
Mrg1NNFQXg2ucDswOc+41AHRqoC2zzo1r/b7v6zAg1mj1RCI94I/oia8/hm4QZZw
Eo1FBlfG5sPmsC903bKaF/eefSexvCnaWNUeF4PVujvojAHQTAZL75TTFP8XTfQ4
e0gP/vyASRp2p8EQZc+umqHh+gVGEqRqDvbBQ4paqZQPi5X3NImsXrxYhWKXfcag
jAxmfav9CsJeTZ0HQTq3lD75RWUlvaxZurdrvHiWHlOhWImtjqeBGOIFSQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOsCtSO9Ovb8bDfd1mzfR5k9uGMrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzMzMTg3
NC03YjMxLTQ4NzktYmYwYi0wNTg1ZTllZGMzMzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvMzMxODc0
LTdiMzEtNDg3OS1iZjBiLTA1ODVlOWVkYzMzMC8xLzZ3SzFJNzA2OXZ4c045M1di
TjlIbVQyNFl5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA2cVhMA0GCSqGSIb3DQEBCwUAA4IBAQAWh76V
6cb5y8CaUPENozc5oygGcX7xFsQHwsyS5g0/Q9a/LYCr94hoDB8SYR4VjlKt9RZr
oiPaL+A9ZSX0wuMYVTZERegW7Kfz9SrmJf76hrhs/D8mg1G/swVg4iaWTzG0DRdb
8RyZG40vHlVlAXWJ7wGcFt3H+PKNQNlXgYsUWQ1gkNOuKNg+qm6t493E5GD+iDyu
09lIrVuIEk/NXSKCSfdSwMxgtBEroolCg+d4LHeh29QJ1N/kLPU3t6fPb4FVbb7F
sfpvc0vxKRO9se5Fo6G50ztiHSQsRDa302JrkKI24w4W4gS+vLTL4ozVvjDLq+M6
8Fz2iNhQ+K1L3Bwj
-----END CERTIFICATE-----
Generated at Fri Apr 19 17:03:30 2024 by rpki-client on console-ams.rpki-client.org