Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer (raw, json)
Hash identifier: 0lpL82I0o9xL/R+5ut5m8IvTOVlmPueeDkQZS1Sh0KQ=
Subject key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F6B11318D313CBCF9E4C969A35EB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.64.140.0/22
IP: 2a04:fa80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6b:11:31:8d:31:3c:bc:f9:e4:c9:69:a3:5e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:67:6b:cf:30:9a:51:59:eb:9b:9f:5b:e1:
fd:1f:11:f6:83:cf:9f:77:f8:7f:84:dd:7a:37:aa:
83:d4:18:8c:e2:fb:60:bb:aa:76:cc:13:51:be:c3:
8f:ce:5f:b7:18:62:a7:d2:f9:4c:3d:d0:76:dd:48:
7e:2f:61:3b:41:bc:ad:5f:bb:de:4b:ad:48:7f:c4:
4e:a3:46:8f:e0:aa:92:e1:92:c4:bc:0d:cb:3c:b7:
7a:18:f2:0f:67:5a:b8:7c:fb:d0:a5:73:ef:bf:d5:
2b:50:72:d1:91:70:20:18:d5:3f:52:7b:81:d3:ed:
44:32:ad:9e:52:16:5f:3d:18:32:fd:de:08:8e:45:
8e:c5:7c:c6:7c:0f:c5:71:bf:8c:7a:7f:4c:bd:a7:
a6:7a:16:24:6c:41:9a:a7:ed:af:4b:5d:d8:73:4c:
6c:6d:c0:bf:ca:9c:5f:8a:ee:66:eb:55:72:ca:1a:
b1:08:8c:0c:00:90:9c:d8:a0:6d:3b:0c:b5:0d:0a:
40:25:aa:14:98:e2:d8:f5:10:d2:93:ad:c6:e1:3b:
ec:5b:c5:80:60:11:1e:0a:56:8c:74:2b:a5:13:ea:
c9:b9:50:1a:77:0e:1e:91:44:22:62:9d:ea:fe:a6:
c2:a9:6b:55:e4:a3:49:14:a6:33:cc:fd:ef:eb:27:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.140.0/22
IPv6:
2a04:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
34:72:14:ef:ee:d0:64:82:c6:f1:e6:d9:af:ea:51:56:24:4f:
a2:8d:79:e3:89:1e:ce:c9:e7:e9:17:b1:c1:82:ab:0c:ed:14:
8a:a6:69:f4:ef:86:57:89:b5:0e:82:7c:36:3d:6d:3a:60:85:
07:50:6c:d4:06:5b:19:3a:57:53:c7:91:d3:40:5e:ba:a1:e8:
a4:d7:9d:de:8c:22:ea:48:40:bd:7a:ab:e0:e9:b2:b1:f4:76:
ad:bb:bd:bf:8d:1f:a4:93:a8:87:f0:fe:09:d7:88:01:51:0c:
8e:b0:10:d3:b8:da:10:8a:67:e8:28:41:f4:e2:1b:cb:0f:42:
6c:75:f0:07:ad:b7:85:37:90:c3:fd:76:19:e4:07:e1:f4:8a:
4c:76:c9:55:02:a1:9c:52:7e:f0:8e:db:a7:85:10:74:d6:2e:
15:03:c9:c2:f4:bc:a4:d6:24:f1:88:16:b4:0a:ab:b8:07:0e:
b8:26:a8:18:69:e0:5f:30:c1:87:d2:03:91:0c:21:15:31:92:
fb:30:5f:71:c6:bb:4a:c6:ed:54:ad:c0:05:b3:d0:bc:13:67:
ab:b2:1b:2e:fa:68:a1:dd:e3:d1:00:aa:81:ec:9e:25:f8:55:
48:48:61:d3:29:25:be:6c:87:75:fe:82:26:45:39:0f:9c:7e:
3b:5c:23:9e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzIb2sRMY0xPLz55Mlpo16zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmFjYjI2OWZhOGE1NTRmNTI0M2EzYWJkNjhkNWI4ZDc2ZmU1ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrFna88wmlFZ65ufW+H9HxH2g8+f
d/h/hN16N6qD1BiM4vtgu6p2zBNRvsOPzl+3GGKn0vlMPdB23Uh+L2E7QbytX7ve
S61If8ROo0aP4KqS4ZLEvA3LPLd6GPIPZ1q4fPvQpXPvv9UrUHLRkXAgGNU/UnuB
0+1EMq2eUhZfPRgy/d4IjkWOxXzGfA/Fcb+Men9MvaemehYkbEGap+2vS13Yc0xs
bcC/ypxfiu5m61VyyhqxCIwMAJCc2KBtOwy1DQpAJaoUmOLY9RDSk63G4TvsW8WA
YBEeClaMdCulE+rJuVAadw4ekUQiYp3q/qbCqWtV5KNJFKYzzP3v6yclgQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPassmn6ilVPUkOjq9aNW412/l67MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzI5NTVm
ZC0wOTJhLTRlY2MtYTkyZi1mYmIzM2E1NGZhZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvMjk1NWZk
LTA5MmEtNGVjYy1hOTJmLWZiYjMzYTU0ZmFkZS8xLzlxeXlhZnFLVlU5U1E2T3Ix
bzFialhiLVhycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUCMMA0EAgACMAcDBQMqBPqAMA0GCSqGSIb3
DQEBCwUAA4IBAQA0chTv7tBkgsbx5tmv6lFWJE+ijXnjiR7OyefpF7HBgqsM7RSK
pmn074ZXibUOgnw2PW06YIUHUGzUBlsZOldTx5HTQF66oeik153ejCLqSEC9eqvg
6bKx9Hatu72/jR+kk6iH8P4J14gBUQyOsBDTuNoQimfoKEH04hvLD0JsdfAHrbeF
N5DD/XYZ5Afh9IpMdslVAqGcUn7wjtunhRB01i4VA8nC9Lyk1iTxiBa0Cqu4Bw64
JqgYaeBfMMGH0gORDCEVMZL7MF9xxrtKxu1UrcAFs9C8E2ershsu+mih3ePRAKqB
7J4l+FVISGHTKSW+bId1/oImRTkPnH47XCOe
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:15:18 2024 by rpki-client on console-ams.rpki-client.org