Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Q5xm6pMgxBINnn7ajy0zprADAk.cer
File: 1-Q5xm6pMgxBINnn7ajy0zprADAk.cer (raw, json)
Hash identifier: 0666Kew8X0ZGu36Gy48l7Gw4aub47bROVgACRGyl8WI=
Subject key identifier: F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8016020D1A3AB631B9693ACFA7E57E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205244
IP: 185.224.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:60:20:d1:a3:ab:63:1b:96:93:ac:fa:7e:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f90e719baa4c8310483679fb6a3cb4ce9ac00c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:b8:8c:bc:dc:0a:6e:ad:29:a9:1a:cf:86:
0b:81:87:b7:6d:e7:86:38:67:e7:f7:fe:27:cf:e8:
0d:37:67:c3:83:d9:73:05:db:70:2b:03:77:c1:73:
68:24:6c:70:77:5c:d8:2b:5f:9a:a6:af:b0:48:10:
4b:25:1b:fc:95:08:c2:b4:f2:5c:44:17:ad:44:de:
50:ed:72:1a:36:15:e5:2d:c1:e7:83:27:8f:0c:92:
72:a7:01:5b:fc:54:ae:bf:5d:8d:4a:e4:40:a3:cb:
e1:f9:24:01:0e:47:e6:47:e8:6c:81:d8:61:85:e6:
de:10:97:4a:b8:8e:11:13:56:bd:a3:4a:07:0f:39:
de:c4:3c:c4:61:bc:8f:a8:9d:9e:5b:24:80:46:1b:
04:8d:ba:11:5c:9f:79:0a:53:c8:b7:57:67:f9:21:
f2:cb:1f:92:54:e5:3f:bd:8f:58:c4:ef:46:75:eb:
76:ac:11:2c:ef:f7:53:74:8b:01:ff:61:e5:23:bf:
e6:c5:0e:0b:46:95:91:2e:08:c5:33:5c:5a:4f:87:
eb:de:82:b2:eb:47:35:80:70:5d:6e:60:02:a8:4c:
18:c8:ef:53:02:f5:f3:21:73:f8:2e:1a:2f:41:03:
83:32:88:c9:52:45:24:b3:d0:ed:28:b5:c9:57:f0:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.100.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205244
Signature Algorithm: sha256WithRSAEncryption
08:6e:fa:d4:96:2d:d1:32:fd:4c:a4:60:ac:20:37:84:d9:9b:
ce:08:e0:fb:27:c7:db:25:34:af:33:4d:a9:5a:2b:c6:7d:ba:
86:10:73:d5:37:f5:b5:e1:9a:e1:32:4f:a1:d0:00:8c:93:81:
48:3c:85:c6:78:79:53:be:9a:f3:77:5e:5c:11:b6:e1:93:a4:
a7:2b:b1:52:c0:43:74:57:d5:66:db:fc:dc:f9:70:67:60:4c:
16:21:0b:01:b3:4f:f1:3d:a0:a1:fb:71:5f:31:a8:be:52:ff:
03:b6:e2:ee:99:5f:58:8c:49:c6:d5:2d:ce:e7:4d:cc:03:ba:
26:4b:4e:a1:76:c8:81:f3:f1:a2:26:5b:3b:af:37:30:a4:3a:
1a:5b:42:ec:30:b2:0e:79:1f:d0:cb:61:b7:5e:4e:8b:b4:cc:
6c:d9:c4:74:8d:a8:d8:31:de:a3:d4:9d:8f:0c:a7:b0:ff:49:
9f:a6:9e:2f:96:2c:a4:b3:70:9e:85:77:ad:e0:cd:01:51:b5:
7c:5a:cc:bf:48:ac:ee:09:54:bb:ee:21:71:1b:f6:81:d9:a9:
9f:88:22:f1:c2:d8:19:43:26:3f:d1:01:db:ab:64:2d:63:de:
d5:ae:97:a3:96:0b:a0:83:fb:9f:29:52:8d:df:07:ff:9c:26:
2d:d1:db:75
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYzIAWAg0aOrYxuWk6z6flfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTBlNzE5YmFhNGM4MzEwNDgzNjc5ZmI2YTNjYjRjZTlhYzAwYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCa4jLzcCm6tKakaz4YLgYe3beeG
OGfn9/4nz+gNN2fDg9lzBdtwKwN3wXNoJGxwd1zYK1+apq+wSBBLJRv8lQjCtPJc
RBetRN5Q7XIaNhXlLcHngyePDJJypwFb/FSuv12NSuRAo8vh+SQBDkfmR+hsgdhh
hebeEJdKuI4RE1a9o0oHDznexDzEYbyPqJ2eWySARhsEjboRXJ95ClPIt1dn+SHy
yx+SVOU/vY9YxO9Gdet2rBEs7/dTdIsB/2HlI7/mxQ4LRpWRLgjFM1xaT4fr3oKy
60c1gHBdbmACqEwYyO9TAvXzIXP4LhovQQODMojJUkUks9DtKLXJV/DQtwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFPkOcZuqTIMQSDZ5+2o8tM6awAwJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzNiMjdi
MC1hMWE3LTRiZjUtOGNkZC01OTViZmExZTFhOWIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvM2IyN2Iw
LWExYTctNGJmNS04Y2RkLTU5NWJmYTFlMWE5Yi8xLzEtUTV4bTZwTWd4QklObm43
YWp5MHpwckFEQWsubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArngZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDIbwwDQYJKoZIhvcNAQELBQADggEBAAhu+tSWLdEy/UykYKwgN4TZm84I4Psn
x9slNK8zTalaK8Z9uoYQc9U39bXhmuEyT6HQAIyTgUg8hcZ4eVO+mvN3XlwRtuGT
pKcrsVLAQ3RX1Wbb/Nz5cGdgTBYhCwGzT/E9oKH7cV8xqL5S/wO24u6ZX1iMScbV
Lc7nTcwDuiZLTqF2yIHz8aImWzuvNzCkOhpbQuwwsg55H9DLYbdeTou0zGzZxHSN
qNgx3qPUnY8Mp7D/SZ+mni+WLKSzcJ6Fd63gzQFRtXxazL9IrO4JVLvuIXEb9oHZ
qZ+IIvHC2BlDJj/RAdurZC1j3tWul6OWC6CD+58pUo3fB/+cJi3R23U=
-----END CERTIFICATE-----
Generated at Wed May 22 23:30:43 2024 by rpki-client on console-ams.rpki-client.org