Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
File: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer (raw, json)
Hash identifier: QkgW30TWl/YoF5GcMbEcgAW/YSYZJd+tmpgRX4KNEpE=
Subject key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEE5E2FF12D4CA4415DB8C81DAF2A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.24.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e5:e2:ff:12:d4:ca:44:15:db:8c:81:da:f2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:e0:3c:3a:40:ed:06:60:39:36:bb:77:6a:
61:3d:e7:5d:0c:9a:01:8b:eb:e6:f4:82:8d:17:ff:
55:3d:f7:8a:c9:46:c2:66:82:c9:68:18:01:68:d6:
dd:31:e3:4d:03:c0:f7:18:dc:28:5d:83:81:c3:db:
f7:f3:5f:84:49:4a:15:04:b1:d3:ee:cd:1a:00:7c:
30:85:61:76:79:66:f3:8e:c9:2d:53:c6:5e:93:10:
b7:f2:b5:5f:f6:d5:bb:18:56:83:d6:66:47:a8:49:
06:f6:67:6f:14:89:95:45:5b:86:d0:4b:b7:bf:c6:
61:44:5e:83:e4:7c:87:50:c5:d2:96:85:8e:b6:d5:
58:cf:06:df:54:16:ae:ef:b7:3a:5e:36:97:64:98:
9a:bf:f0:8a:cd:37:2f:92:54:72:01:65:1d:cf:cd:
ef:91:2b:2c:6d:12:c3:ae:82:e0:73:77:14:25:61:
c4:5b:53:e3:f7:bf:1f:5a:2d:fa:ac:de:36:ab:dc:
b8:e2:b2:37:5d:a9:ee:01:a3:a9:c7:f2:28:96:89:
96:35:00:89:d5:62:6b:68:a9:e3:61:78:5d:ee:81:
20:97:f0:92:bc:72:4c:dd:e0:22:0b:98:64:d4:3b:
3b:03:fc:f5:7f:10:d5:5e:88:06:c8:ad:6a:5a:8e:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.7.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1c:a3:3b:86:fb:2a:30:2d:f8:a3:a5:7e:49:b0:ba:cb:0a:
8d:57:5d:07:93:80:ab:2c:4b:b6:81:74:c9:23:47:da:03:92:
49:e5:5d:26:a2:94:a0:83:76:71:b3:a6:a6:28:cb:74:ee:33:
7d:eb:08:a8:98:c1:a4:3b:5a:6c:4f:e7:46:05:56:9e:b7:ab:
9d:03:1f:b3:7e:95:cf:2a:07:61:8c:48:49:9e:16:3c:9d:9b:
f1:f0:80:29:24:a1:fc:a2:71:c0:45:d4:b7:c0:c8:cc:fe:07:
75:7c:e8:d1:10:67:16:18:05:81:ad:cf:95:eb:11:70:24:54:
c0:f6:6b:d7:d9:07:90:40:f1:74:c3:3e:69:d1:03:47:44:bf:
3b:f5:80:72:a9:98:86:a3:07:90:ac:31:f5:ce:8f:d3:2f:84:
36:7d:59:ab:a1:82:f8:d4:7d:c5:72:79:b3:ca:fa:ed:94:8a:
83:f3:55:d8:d2:af:41:f9:1e:80:aa:a4:c6:26:1b:45:be:42:
ca:88:2b:f0:27:e0:06:2a:d2:d5:1c:6d:cf:b4:d7:5c:96:af:
47:fd:53:eb:52:5f:3b:da:16:fb:f9:4f:77:d6:7b:3f:ae:09:
1b:08:6b:13:72:14:b3:d8:bd:ae:08:24:14:0b:e6:ad:d7:df:
3e:83:78:b1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzI3uXi/xLUykQV24yB2vKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI0MTUwMTNmMmU5YzRlZTU4ZDdjMmRmZWVlYWIyODE2OTJkODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRLgPDpA7QZgOTa7d2phPeddDJoB
i+vm9IKNF/9VPfeKyUbCZoLJaBgBaNbdMeNNA8D3GNwoXYOBw9v381+ESUoVBLHT
7s0aAHwwhWF2eWbzjsktU8ZekxC38rVf9tW7GFaD1mZHqEkG9mdvFImVRVuG0Eu3
v8ZhRF6D5HyHUMXSloWOttVYzwbfVBau77c6XjaXZJiav/CKzTcvklRyAWUdz83v
kSssbRLDroLgc3cUJWHEW1Pj978fWi36rN42q9y44rI3XanuAaOpx/IolomWNQCJ
1WJraKnjYXhd7oEgl/CSvHJM3eAiC5hk1Ds7A/z1fxDVXogGyK1qWo6yAQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFO0kFQE/LpxO5Y18Lf7uqygWkthXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzdkYWJl
Ny1kZmYxLTQ2NmMtYTYwMC0wMzExZDBkNWRkYmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvN2RhYmU3
LWRmZjEtNDY2Yy1hNjAwLTAzMTFkMGQ1ZGRiYi8xLzdTUVZBVDh1bkU3bGpYd3Rf
dTZyS0JhUzJGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRgHMA0GCSqGSIb3DQEBCwUAA4IBAQAAHKM7
hvsqMC34o6V+SbC6ywqNV10Hk4CrLEu2gXTJI0faA5JJ5V0mopSgg3Zxs6amKMt0
7jN96wiomMGkO1psT+dGBVaet6udAx+zfpXPKgdhjEhJnhY8nZvx8IApJKH8onHA
RdS3wMjM/gd1fOjREGcWGAWBrc+V6xFwJFTA9mvX2QeQQPF0wz5p0QNHRL879YBy
qZiGoweQrDH1zo/TL4Q2fVmroYL41H3FcnmzyvrtlIqD81XY0q9B+R6AqqTGJhtF
vkLKiCvwJ+AGKtLVHG3PtNdclq9H/VPrUl872hb7+U931ns/rgkbCGsTchSz2L2u
CCQUC+at198+g3ix
-----END CERTIFICATE-----
Generated at Thu May 23 00:03:48 2024 by rpki-client on console-fra.rpki-client.org