Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer (raw, json)
Hash identifier: 6KsJBxBYYu3CTbc2vm4kiyLY86aBUBMKuPGDgeGFBC0=
Subject key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F60960E6991F2D4EB03ED9AE29EA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.49.240.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:60:96:0e:69:91:f2:d4:eb:03:ed:9a:e2:9e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:17:6d:5f:e9:03:07:6a:29:66:0b:c1:ce:
24:61:78:94:93:fb:92:be:32:5b:3d:4c:95:f6:74:
8c:cc:2c:1f:dc:47:ef:a3:b4:ff:8f:aa:80:b1:4c:
65:5c:1a:e6:bb:bb:e0:38:f1:82:ac:70:1c:a6:b8:
51:bd:64:32:49:9e:7a:c7:48:bc:25:67:d2:12:ee:
a6:1a:be:48:0e:0a:de:e7:7f:86:22:f3:b5:cb:6f:
d8:d8:05:0e:6e:50:d5:67:2e:c3:bf:6d:b5:e5:df:
0c:9e:42:4f:3a:f4:cf:63:86:47:13:27:11:41:a5:
9f:34:15:99:4d:ad:97:7d:74:0e:9c:55:94:9d:d7:
fa:be:75:4c:4b:2e:42:2b:87:0c:ab:eb:86:e8:d3:
5e:9f:61:52:c1:e2:22:f2:ea:91:95:70:89:57:39:
e2:e1:c0:38:a5:58:5d:15:e9:a8:37:af:c8:51:06:
5a:48:7c:0a:a2:e0:a2:52:bd:7b:63:1d:47:7d:89:
83:b1:8f:28:7a:27:20:1b:f8:76:c7:0b:2f:c5:df:
18:ca:e4:0c:9c:8c:4f:8d:f9:0a:31:d7:99:55:1a:
22:cd:1f:98:fc:0e:b5:9d:f6:f9:c3:bf:75:fc:6f:
80:0a:2c:06:ea:1c:54:44:7e:fe:f7:9a:cf:23:5f:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:e6:eb:a2:24:ff:51:b2:e7:bc:8b:73:29:36:01:9a:c9:65:
ad:9a:03:45:5c:6e:ec:5a:27:ca:87:c1:c8:00:94:9e:47:c5:
26:6f:f6:aa:35:e6:b3:a2:5e:44:d4:94:7e:50:36:79:83:15:
1a:c6:44:45:52:b8:97:46:0e:f5:d3:f7:75:12:16:62:c2:13:
c8:cd:79:37:b2:b2:93:84:b6:3d:6f:16:e8:3b:31:dd:be:25:
c5:ca:09:e0:61:62:2e:9b:1f:7f:68:3e:53:84:23:09:12:4a:
7a:81:b2:90:72:c6:71:c5:70:20:ea:a3:91:43:fb:bf:27:4f:
1c:6a:10:16:29:6b:0a:b1:68:08:ec:2e:75:e7:8d:5b:39:60:
06:50:43:f4:c8:6f:19:e1:c5:f4:e1:10:f0:05:94:a1:01:4a:
98:37:db:0b:a0:a2:6e:50:5b:53:f7:8f:f4:cb:2f:8a:5c:3e:
42:8c:ed:8e:0d:8b:2e:f3:93:b6:7f:0b:7b:18:24:85:26:c1:
bb:3c:cb:f1:4e:0f:11:d0:17:a1:84:00:63:0a:a2:08:20:bc:
87:e8:af:a1:e0:44:94:91:8d:fd:8b:a7:79:2c:c5:ad:8a:1d:
93:e5:12:56:83:76:aa:88:30:6a:87:3b:3d:38:1d:9c:3f:cb:
b0:22:51:71
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIb2CWDmmR8tTrA+2a4p6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGUzYmE4N2UzYTkzNDY4Y2MzYjNjM2Y2MGZhNjNkNWU4NTNjMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpEXbV/pAwdqKWYLwc4kYXiUk/uS
vjJbPUyV9nSMzCwf3Efvo7T/j6qAsUxlXBrmu7vgOPGCrHAcprhRvWQySZ56x0i8
JWfSEu6mGr5IDgre53+GIvO1y2/Y2AUOblDVZy7Dv2215d8MnkJPOvTPY4ZHEycR
QaWfNBWZTa2XfXQOnFWUndf6vnVMSy5CK4cMq+uG6NNen2FSweIi8uqRlXCJVzni
4cA4pVhdFemoN6/IUQZaSHwKouCiUr17Yx1HfYmDsY8oeicgG/h2xwsvxd8YyuQM
nIxPjfkKMdeZVRoizR+Y/A61nfb5w791/G+ACiwG6hxURH7+95rPI1/vowIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGjjuofjqTRozDs8P2D6Y9XoU8MUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzFlZmYx
Ny02NWVjLTQ1ZWEtYTc1ZC05NmViMDdmNzgyNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvMWVmZjE3
LTY1ZWMtNDVlYS1hNzVkLTk2ZWIwN2Y3ODI1Yi8xL2FPTzZoLU9wTkdqTU96d19Z
UHBqMWVoVHd4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDwzHwMA0GCSqGSIb3DQEBCwUAA4IBAQBM5uui
JP9Rsue8i3MpNgGayWWtmgNFXG7sWifKh8HIAJSeR8Umb/aqNeazol5E1JR+UDZ5
gxUaxkRFUriXRg710/d1EhZiwhPIzXk3srKThLY9bxboOzHdviXFygngYWIumx9/
aD5ThCMJEkp6gbKQcsZxxXAg6qORQ/u/J08cahAWKWsKsWgI7C51541bOWAGUEP0
yG8Z4cX04RDwBZShAUqYN9sLoKJuUFtT94/0yy+KXD5CjO2ODYsu85O2fwt7GCSF
JsG7PMvxTg8R0BehhABjCqIIILyH6K+h4ESUkY39i6d5LMWtih2T5RJWg3aqiDBq
hzs9OB2cP8uwIlFx
-----END CERTIFICATE-----
Generated at Fri May 3 09:14:27 2024 by rpki-client on console-ams.rpki-client.org