Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
File: DL6R62OkTx6fGoPt0hih7HXCXpE.cer (raw, json)
Hash identifier: CfaMkmqcJAOk8Ojl6AMWmph5LZCZ5ASZHQAmRfGLjqM=
Subject key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794409F19CC1A1B7BCA42E4318469DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.235.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:40:9f:19:cc:1a:1b:7b:ca:42:e4:31:84:69:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:e2:74:5c:27:03:df:62:ca:3b:b1:be:de:
47:4c:63:de:5f:bc:cc:14:98:69:76:43:26:d3:d4:
3f:95:8c:1b:6e:65:02:cf:e2:e4:f1:ab:45:c1:97:
52:69:8d:bc:b5:b1:a0:f4:79:df:c9:64:e0:81:fe:
ce:89:55:81:79:66:86:5a:66:96:01:5f:3a:43:33:
b1:50:32:bb:9b:60:14:49:c1:90:35:2c:ee:6f:db:
f8:da:cc:95:39:a5:15:8a:a1:68:fd:33:66:2f:59:
57:9e:9d:25:78:b4:70:26:60:1d:be:f2:39:bc:00:
21:90:95:f2:52:0f:ee:e9:e9:0d:b2:17:dc:5a:84:
5f:a3:f1:48:75:a4:92:28:77:36:e7:46:93:85:f7:
21:4e:b0:5b:d8:f5:20:9e:52:09:4b:4c:d7:54:aa:
b7:38:ee:d5:e7:be:99:81:44:4c:ca:11:c4:4a:e7:
7d:e7:fe:5a:75:a2:31:b5:0d:5a:f4:3a:0c:44:b1:
92:65:4b:89:57:04:51:e5:4d:37:53:3c:ce:25:be:
bb:1c:82:94:61:7b:d8:02:eb:6b:33:c8:79:f9:ad:
10:c9:28:e9:ec:b4:27:65:12:d4:2c:5c:22:ae:1c:
70:2c:b0:b8:e2:cd:dc:3e:06:c0:b0:45:55:2b:55:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.199.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6d:75:f9:d7:51:0a:7a:cd:79:54:e3:ba:05:05:a5:a6:f6:
09:db:97:32:83:fc:c4:3d:5f:97:46:ae:87:7e:02:0d:d5:73:
39:4a:85:1d:55:f1:e5:88:d5:6d:9f:96:cd:8d:bb:07:9e:2f:
d6:3f:d5:a4:f7:e4:d1:c0:f8:c9:ba:ef:69:c2:bf:e8:ae:26:
69:64:31:57:fe:c2:f2:e5:88:41:0d:9c:15:54:9d:5a:db:d8:
f8:1c:18:aa:1c:5e:d5:40:37:9e:dd:fe:68:a8:cd:53:5b:f5:
9d:4b:52:1d:be:18:ef:b5:d8:88:b6:68:4d:f3:1b:63:3b:e1:
94:86:67:8e:1f:f1:53:90:0e:69:af:cd:47:be:1a:00:36:a4:
b5:f5:e9:25:99:2f:d7:41:59:1f:37:b2:36:90:e9:e4:52:e4:
05:1e:5e:c0:9f:14:95:98:94:b8:0c:14:f8:2a:21:ab:d9:bd:
9c:53:5c:4a:9e:9c:8d:b5:d5:23:3a:33:2c:69:da:13:f9:85:
53:76:61:bb:13:6a:d3:39:77:ed:c4:56:34:fe:40:13:4b:b2:
b0:32:86:50:2c:ae:ff:74:5e:6d:f1:84:db:c0:ad:0c:45:28:
08:a0:4a:2f:14:d6:fa:d8:3d:78:a2:1c:7b:73:dc:a7:18:a7:
85:47:d7:30
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHlECfGcwaG3vKQuQxhGncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2JlOTFlYjYzYTQ0ZjFlOWYxYTgzZWRkMjE4YTFlYzc1YzI1ZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogbidFwnA99iyjuxvt5HTGPeX7zM
FJhpdkMm09Q/lYwbbmUCz+Lk8atFwZdSaY28tbGg9HnfyWTggf7OiVWBeWaGWmaW
AV86QzOxUDK7m2AUScGQNSzub9v42syVOaUViqFo/TNmL1lXnp0leLRwJmAdvvI5
vAAhkJXyUg/u6ekNshfcWoRfo/FIdaSSKHc250aThfchTrBb2PUgnlIJS0zXVKq3
OO7V576ZgURMyhHESud95/5adaIxtQ1a9DoMRLGSZUuJVwRR5U03UzzOJb67HIKU
YXvYAutrM8h5+a0QySjp7LQnZRLULFwirhxwLLC44s3cPgbAsEVVK1XTqwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAy+ketjpE8enxqD7dIYoex1wl6RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzdlNTFi
NC0wYWI0LTQ3MTktYjMzMC1iZGM1YWU4YWJkYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvN2U1MWI0
LTBhYjQtNDcxOS1iMzMwLWJkYzVhZThhYmRiMS8xL0RMNlI2Mk9rVHg2ZkdvUHQw
aGloN0hYQ1hwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuevHMA0GCSqGSIb3DQEBCwUAA4IBAQCqbXX5
11EKes15VOO6BQWlpvYJ25cyg/zEPV+XRq6HfgIN1XM5SoUdVfHliNVtn5bNjbsH
ni/WP9Wk9+TRwPjJuu9pwr/oriZpZDFX/sLy5YhBDZwVVJ1a29j4HBiqHF7VQDee
3f5oqM1TW/WdS1IdvhjvtdiItmhN8xtjO+GUhmeOH/FTkA5pr81HvhoANqS19ekl
mS/XQVkfN7I2kOnkUuQFHl7AnxSVmJS4DBT4KiGr2b2cU1xKnpyNtdUjOjMsadoT
+YVTdmG7E2rTOXftxFY0/kATS7KwMoZQLK7/dF5t8YTbwK0MRSgIoEovFNb62D14
ohx7c9ynGKeFR9cw
-----END CERTIFICATE-----
Generated at Fri May 3 01:36:37 2024 by rpki-client on console-ams.rpki-client.org