Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
File: S6P83Yf0VkMMzLLYY45hSM06Euw.cer (raw, json)
Hash identifier: xpFrPF5qJXy/2hO7VdjPhOGa0XXTdxdiz4miBPhHS5w=
Subject key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000DED02D3EB34CB6539D5B7E3441D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.231.116.0/22
IP: 2a09:c740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0d:ed:02:d3:eb:34:cb:65:39:d5:b7:e3:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:1a:35:f2:e3:98:3f:b9:22:c5:99:d1:89:
87:17:e8:c0:4e:45:d4:ea:2c:f5:c6:0c:1c:e8:59:
d9:eb:f2:c2:13:48:91:54:0f:c8:29:aa:64:5d:1f:
4e:9c:1d:49:3f:48:93:ff:84:86:a6:49:ed:92:15:
d4:05:2f:c5:c9:55:26:63:78:9a:44:e5:01:78:f1:
ab:31:41:44:be:8b:f9:b7:60:3f:c1:39:07:ab:88:
0d:e7:5d:0f:b9:79:71:bb:88:65:5e:8b:54:fe:c1:
4d:e9:9b:d4:a6:92:1d:02:24:8b:2e:1c:3d:6b:f8:
f3:df:c2:0d:5f:04:c2:38:86:a1:4b:47:6c:be:94:
6b:88:3f:cc:14:dd:5d:82:a7:3b:f6:89:09:ee:d1:
3a:04:26:cb:53:78:77:89:d2:6c:0b:db:50:90:b1:
d9:11:85:4b:31:c4:92:99:2c:fa:8d:ac:16:33:69:
fa:66:f7:a9:35:3f:e3:73:35:11:cf:ba:91:c7:da:
e1:d7:a8:f8:9c:2d:66:16:1b:a4:61:66:d2:e3:84:
6e:84:e6:5f:6c:31:e5:d5:ae:8d:0e:e6:22:02:6c:
03:48:c9:84:46:f6:a1:c0:7a:73:45:1f:0c:03:c1:
77:14:ca:37:d3:95:f4:94:c4:c5:31:fd:67:77:1f:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.116.0/22
IPv6:
2a09:c740::/29
Signature Algorithm: sha256WithRSAEncryption
4f:ac:73:8a:e0:dd:d4:dc:66:f6:6e:a3:35:e0:00:7a:ce:76:
a0:69:78:ce:e0:7e:4f:53:53:d3:0f:8e:1d:23:27:fb:ac:d2:
70:c3:81:f0:54:ab:f0:52:bd:02:c3:32:48:6f:08:b5:eb:61:
51:b2:22:7e:a2:c7:84:4e:b7:db:7f:a8:7f:bc:7d:08:96:6f:
04:fe:2b:fd:e8:9d:e3:5c:14:ec:3a:ad:64:65:d5:2b:0f:74:
38:55:5b:9b:b6:34:43:62:5b:f1:c9:e5:22:30:61:e9:4e:cd:
04:4d:4f:61:10:3b:f5:12:7c:30:7c:b3:80:2d:ad:29:c0:f4:
f1:ff:ce:63:f9:59:57:14:12:d0:76:c2:b0:aa:70:f7:d0:8d:
37:61:30:04:b9:b8:5f:e3:bb:69:da:30:7f:d4:29:6e:88:eb:
b6:fc:dd:3d:90:bd:2b:5f:e5:69:75:cc:dd:2a:a0:94:aa:92:
74:a0:0b:d6:48:48:76:66:ee:67:d8:54:c3:b9:38:7d:39:e6:
f1:84:9b:fc:0f:f8:49:e8:04:dc:f7:4c:82:25:3b:07:7d:e1:
93:bd:8e:9b:59:ec:92:52:f3:32:c3:d9:c1:cf:b5:15:9b:af:
a6:ab:8d:6e:e7:3d:fa:f4:77:81:cd:da:8d:49:99:80:f5:e8:
6f:d8:4d:57
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFAA3tAtPrNMtlOdW340QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmEzZmNkZDg3ZjQ1NjQzMGNjY2IyZDg2MzhlNjE0OGNkM2ExMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb8aNfLjmD+5IsWZ0YmHF+jATkXU
6iz1xgwc6FnZ6/LCE0iRVA/IKapkXR9OnB1JP0iT/4SGpkntkhXUBS/FyVUmY3ia
ROUBePGrMUFEvov5t2A/wTkHq4gN510PuXlxu4hlXotU/sFN6ZvUppIdAiSLLhw9
a/jz38INXwTCOIahS0dsvpRriD/MFN1dgqc79okJ7tE6BCbLU3h3idJsC9tQkLHZ
EYVLMcSSmSz6jawWM2n6ZvepNT/jczURz7qRx9rh16j4nC1mFhukYWbS44RuhOZf
bDHl1a6NDuYiAmwDSMmERvahwHpzRR8MA8F3FMo305X0lMTFMf1ndx+AWQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEuj/N2H9FZDDMyy2GOOYUjNOhLsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2Y5Y2U5
Yi05MDU5LTQ5YzUtYTM2ZC1hNzMxZWE1MWIyMGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZjljZTli
LTkwNTktNDljNS1hMzZkLWE3MzFlYTUxYjIwZC8xL1M2UDgzWWYwVmtNTXpMTFlZ
NDVoU00wNkV1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCued0MA0EAgACMAcDBQMqCcdAMA0GCSqGSIb3
DQEBCwUAA4IBAQBPrHOK4N3U3Gb2bqM14AB6znagaXjO4H5PU1PTD44dIyf7rNJw
w4HwVKvwUr0CwzJIbwi162FRsiJ+oseETrfbf6h/vH0Ilm8E/iv96J3jXBTsOq1k
ZdUrD3Q4VVubtjRDYlvxyeUiMGHpTs0ETU9hEDv1EnwwfLOALa0pwPTx/85j+VlX
FBLQdsKwqnD30I03YTAEubhf47tp2jB/1CluiOu2/N09kL0rX+VpdczdKqCUqpJ0
oAvWSEh2Zu5n2FTDuTh9OebxhJv8D/hJ6ATc90yCJTsHfeGTvY6bWeySUvMyw9nB
z7UVm6+mq41u5z369HeBzdqNSZmA9ehv2E1X
-----END CERTIFICATE-----
Generated at Fri May 3 13:17:30 2024 by rpki-client on console-fra.rpki-client.org