Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
File: CzEv6XRkvA5qHv-i8ciW96igJng.cer (raw, json)
Hash identifier: pZucZfkV6dIfCbSmTr+sin6bpa9cDqNjr6xT8t8yk1Y=
Subject key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8F72799E59B9A29306391C67999B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.247.84.0/23
IP: 2a0d:b380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f7:27:99:e5:9b:9a:29:30:63:91:c6:79:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:89:2a:70:d4:11:33:20:1d:f5:09:17:63:
c6:db:f9:1a:c3:8c:ad:4e:f9:d3:a5:c8:9e:b3:dd:
87:fb:e7:f4:c9:67:a1:8b:dc:ea:a0:f6:44:42:5f:
6a:13:ec:1e:4b:dc:be:af:16:bd:87:fa:05:8a:68:
fb:9e:b8:49:b8:ca:c8:42:65:98:e2:5a:93:71:b3:
27:8f:37:59:c9:4b:2c:0a:53:fa:5b:c6:aa:2b:49:
aa:4b:e1:bd:84:d8:9a:1d:af:e6:a6:9b:1c:53:66:
54:fe:d2:99:7f:e2:95:ac:24:83:6b:26:b7:02:13:
da:46:8a:f4:09:25:ec:71:50:93:18:bb:dd:3c:c6:
0f:dd:4e:1c:a6:0b:35:65:36:29:cc:f8:c4:ad:54:
e0:e3:56:bf:31:1a:9f:8e:4c:42:54:75:2f:cf:d1:
a7:9a:07:c6:06:84:47:27:41:f7:09:ed:23:32:d2:
40:6e:8c:b6:fb:04:b9:40:3f:8f:73:1b:ec:c4:93:
09:df:10:73:98:3f:21:ec:1d:d3:41:e0:f2:c3:99:
4b:71:8a:58:f3:61:c2:d8:d0:0f:35:8a:3c:81:4a:
6b:5a:6c:08:80:c5:24:df:c6:79:32:0b:a8:7f:c2:
71:43:4c:63:67:15:43:bd:1f:06:a2:79:ac:c4:ae:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.84.0/23
IPv6:
2a0d:b380::/29
Signature Algorithm: sha256WithRSAEncryption
68:2f:21:6b:91:ee:9d:b9:82:bf:ef:5e:18:7f:68:49:7d:d1:
ec:a2:b6:96:d8:c5:ec:14:17:64:74:95:30:e0:5f:b7:1f:c7:
44:f6:89:d7:be:b2:6c:03:77:17:2a:34:1e:e2:1b:38:c5:ee:
bb:08:cc:94:f8:0d:fe:45:af:b1:14:64:b0:a1:60:93:93:79:
cf:de:7f:b8:84:92:35:f9:28:dc:a3:2a:cb:c8:90:5e:52:f2:
4d:47:fe:18:41:7e:26:67:29:83:0e:e4:9a:22:72:8b:65:a7:
db:f6:31:9b:e8:26:af:fb:ec:57:21:73:43:4c:6b:f7:ac:00:
9a:b4:21:c8:4d:b6:53:d9:44:4e:62:03:fa:2c:0f:fc:1a:5e:
73:7e:74:8d:e4:92:6e:7c:de:b6:df:0b:98:48:15:3b:12:da:
82:84:ef:0c:2f:68:00:8f:f9:79:18:68:a4:18:98:fb:fd:98:
25:96:c1:12:46:ba:3a:e0:73:59:61:20:ea:fd:a9:1a:db:f4:
fe:1b:b4:e4:5f:2d:30:51:54:f5:89:eb:6e:f2:08:1a:e1:45:
6a:6d:ca:9e:97:0c:42:f3:ba:af:c1:71:71:62:c9:c8:71:b8:
17:fe:88:62:a4:6f:69:4a:18:ba:7d:a8:59:78:71:a7:09:d2:
b0:a8:e7:0c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGuPcnmeWbmikwY5HGeZmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjMxMmZlOTc0NjRiYzBlNmExZWZmYTJmMWM4OTZmN2E4YTAyNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivqJKnDUETMgHfUJF2PG2/kaw4yt
TvnTpcies92H++f0yWehi9zqoPZEQl9qE+weS9y+rxa9h/oFimj7nrhJuMrIQmWY
4lqTcbMnjzdZyUssClP6W8aqK0mqS+G9hNiaHa/mppscU2ZU/tKZf+KVrCSDaya3
AhPaRor0CSXscVCTGLvdPMYP3U4cpgs1ZTYpzPjErVTg41a/MRqfjkxCVHUvz9Gn
mgfGBoRHJ0H3Ce0jMtJAboy2+wS5QD+PcxvsxJMJ3xBzmD8h7B3TQeDyw5lLcYpY
82HC2NAPNYo8gUprWmwIgMUk38Z5Mguof8JxQ0xjZxVDvR8GonmsxK6W/wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAsxL+l0ZLwOah7/ovHIlveooCZ4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzZiMmM5
ZS1lNTBlLTQ4ODctYjQ4Mi1mYTFiNTU1ZGFhOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmIyYzll
LWU1MGUtNDg4Ny1iNDgyLWZhMWI1NTVkYWE5MS8xL0N6RXY2WFJrdkE1cUh2LWk4
Y2lXOTZpZ0puZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQBufdUMA0EAgACMAcDBQMqDbOAMA0GCSqGSIb3
DQEBCwUAA4IBAQBoLyFrke6duYK/714Yf2hJfdHsoraW2MXsFBdkdJUw4F+3H8dE
9onXvrJsA3cXKjQe4hs4xe67CMyU+A3+Ra+xFGSwoWCTk3nP3n+4hJI1+SjcoyrL
yJBeUvJNR/4YQX4mZymDDuSaInKLZafb9jGb6Cav++xXIXNDTGv3rACatCHITbZT
2UROYgP6LA/8Gl5zfnSN5JJufN623wuYSBU7EtqChO8ML2gAj/l5GGikGJj7/Zgl
lsESRro64HNZYSDq/aka2/T+G7TkXy0wUVT1ietu8gga4UVqbcqelwxC87qvwXFx
YsnIcbgX/ohipG9pShi6fahZeHGnCdKwqOcM
-----END CERTIFICATE-----
Generated at Thu Apr 18 18:45:47 2024 by rpki-client on console-ams.rpki-client.org