Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
File: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer (raw, json)
Hash identifier: h4tK8IX5lhnpRJTWR+bRr9n/de4v/adBl/e16q7jM0U=
Subject key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEE1B191A34CB5EF69CA88CA5D5AFBD9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 12:03:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.209.40.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:1b:19:1a:34:cb:5e:f6:9c:a8:8c:a5:d5:af:bd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 12:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:8c:36:19:76:5c:42:cc:b3:12:fc:09:05:
7a:79:03:a8:c2:8f:d0:53:cc:be:8a:5b:64:f6:3a:
c1:5b:61:b6:6d:5c:fc:a1:93:2e:8e:73:7e:f7:38:
01:e6:08:79:2e:e6:73:e4:70:ae:57:1c:82:18:b5:
f5:17:05:1e:ad:0c:c0:e2:bd:1d:d8:35:64:5e:c8:
c4:c5:f7:30:5d:e3:86:b7:d0:50:0f:9d:0e:55:54:
94:12:a1:14:02:22:d9:44:f2:4a:1f:bc:5c:53:9c:
5e:33:78:fa:1f:2e:4a:ef:bf:93:93:e2:93:e6:11:
c4:d5:ee:3a:89:9a:22:4f:a5:2a:14:af:6e:e5:18:
20:c0:e5:ef:0d:2a:55:00:03:79:5c:48:f7:c9:9c:
e3:1f:27:66:c5:cf:84:22:d5:b6:ee:25:9d:89:a4:
bd:8a:9f:a5:1a:87:69:df:91:fa:54:5d:f1:8b:b7:
82:93:5b:0a:f5:ae:da:6d:34:ee:1b:14:d4:d3:c1:
cb:05:5b:78:04:94:81:c5:9b:81:ce:8f:ee:6d:d4:
39:38:d9:1b:01:67:7e:df:fd:33:4b:d8:a4:b7:4c:
30:20:6f:4f:65:3d:d1:84:dd:89:25:73:95:a1:0d:
9a:2c:37:71:a4:f7:6d:dd:4c:f7:a8:a0:27:80:e4:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:81:0f:51:da:03:6c:a3:45:b7:38:3b:9f:b8:4d:c8:6e:4d:
3a:b9:4e:75:28:7e:67:08:0a:e4:ef:61:4c:16:02:bd:d3:d1:
b8:c4:0d:77:0a:62:e1:17:97:6d:55:7d:7e:b2:4c:c6:d3:af:
ec:d8:8f:16:7f:11:7b:e2:75:34:0d:35:6a:37:1b:7f:39:a4:
0d:94:5e:0d:96:7a:4f:63:eb:1e:02:cb:62:05:7d:5b:97:bb:
b1:c4:e4:ab:75:a8:62:e3:eb:74:30:9d:ba:ce:d2:a5:dc:70:
03:f6:74:56:06:2b:18:4f:a4:68:e0:16:3e:c7:b7:27:17:4b:
45:4d:cb:62:f5:6f:f9:bf:91:e5:b1:08:01:2b:0c:8f:0c:00:
a5:08:43:69:6b:ff:03:be:c1:4f:51:e7:9d:74:f4:27:70:53:
fc:9a:9c:64:32:88:9c:fa:0b:65:72:2e:ee:3b:ff:86:12:0a:
8c:79:8c:17:f2:bb:03:4c:f2:ea:10:d8:5a:0f:9b:76:a0:bc:
a8:d0:2b:49:0a:66:af:75:56:43:99:e6:ed:30:6f:74:a8:ae:
55:4b:21:39:88:e1:5e:0e:69:02:59:88:e7:ee:96:a4:bf:b4:
88:55:28:90:34:69:a8:f9:2f:ff:7d:6f:bf:14:bb:da:3a:c6:
be:3c:76:c6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzuGxkaNMte9pyojKXVr72fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTA5MTIwMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTllOTUyZTQ0OGI4MmZmNDU3OGVjZWI2NDQ4ZTZmYmZjNjExM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+WMNhl2XELMsxL8CQV6eQOowo/Q
U8y+iltk9jrBW2G2bVz8oZMujnN+9zgB5gh5LuZz5HCuVxyCGLX1FwUerQzA4r0d
2DVkXsjExfcwXeOGt9BQD50OVVSUEqEUAiLZRPJKH7xcU5xeM3j6Hy5K77+Tk+KT
5hHE1e46iZoiT6UqFK9u5RggwOXvDSpVAAN5XEj3yZzjHydmxc+EItW27iWdiaS9
ip+lGodp35H6VF3xi7eCk1sK9a7abTTuGxTU08HLBVt4BJSBxZuBzo/ubdQ5ONkb
AWd+3/0zS9ikt0wwIG9PZT3RhN2JJXOVoQ2aLDdxpPdt3Uz3qKAngORnTQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCWelS5Ei4L/RXjs62RI5vv8YRPgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzJjZjhk
YS00YjRlLTQ0ZDEtOGIxMC0wOGMwNmI3NjhjMmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMmNmOGRh
LTRiNGUtNDRkMS04YjEwLTA4YzA2Yjc2OGMyZS8xL0paNlZMa1NMZ3Y5RmVPenJa
RWptLV94aEUtQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCVdEoMA0GCSqGSIb3DQEBCwUAA4IBAQB6gQ9R
2gNso0W3ODufuE3Ibk06uU51KH5nCArk72FMFgK909G4xA13CmLhF5dtVX1+skzG
06/s2I8WfxF74nU0DTVqNxt/OaQNlF4NlnpPY+seAstiBX1bl7uxxOSrdahi4+t0
MJ26ztKl3HAD9nRWBisYT6Ro4BY+x7cnF0tFTcti9W/5v5HlsQgBKwyPDAClCENp
a/8DvsFPUeeddPQncFP8mpxkMoic+gtlci7uO/+GEgqMeYwX8rsDTPLqENhaD5t2
oLyo0CtJCmavdVZDmebtMG90qK5VSyE5iOFeDmkCWYjn7pakv7SIVSiQNGmo+S//
fW+/FLvaOsa+PHbG
-----END CERTIFICATE-----
Generated at Fri May 3 09:02:32 2024 by rpki-client on console-ams.rpki-client.org