Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.cer (raw, json)
Hash identifier: r3/y6/BgLXtf6+JFag2GG1S+xnUYCfLbN0PvVbdg8qA=
Subject key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F588C03E318A1BF8276F262AE366AB9ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 May 2024 14:12:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.95.168.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:58:8c:03:e3:18:a1:bf:82:76:f2:62:ae:36:6a:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 14:12:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:6e:96:39:56:c5:d8:9e:df:89:18:bc:c8:
b1:18:68:97:77:e4:8e:42:9a:0a:64:91:10:f5:d9:
a4:f6:8a:ea:bd:48:dd:0a:38:d6:7b:98:fc:18:7f:
da:c1:ba:19:bb:11:d6:90:5b:c3:e6:f0:16:20:be:
3a:21:2e:8e:3c:25:6c:66:e5:ad:46:78:12:1f:92:
9c:9d:78:c2:68:d5:dd:17:c0:8e:e6:86:09:fa:29:
6b:91:a9:35:b2:60:52:96:35:3b:c1:b7:15:04:cd:
25:36:53:0f:b1:1c:5f:a9:8a:37:68:a3:e3:db:73:
b6:14:06:aa:4b:a9:2a:1c:42:37:b9:06:79:b9:c5:
47:77:f4:88:f4:28:d8:c0:e1:11:f1:e0:b7:2c:1f:
22:3e:d2:bb:07:89:3f:95:8e:ed:5b:83:8d:0b:2d:
f1:37:22:b2:2e:c5:d2:98:f7:91:b2:a9:bb:94:84:
78:a2:4a:9a:6f:c8:80:2b:e9:3d:1e:0f:58:53:54:
61:fb:42:a2:63:ee:ee:c9:1c:c7:f8:11:61:f6:62:
21:39:81:8c:23:14:7a:b5:eb:66:cd:f2:ed:6b:c9:
10:62:44:46:88:05:54:1c:b3:86:4e:77:a9:ec:d2:
67:35:10:79:3d:79:ef:2e:35:94:92:9e:3a:c3:ad:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.168.0/22
Signature Algorithm: sha256WithRSAEncryption
96:21:fc:37:6f:44:01:cf:ba:a2:98:23:6a:e8:df:8e:a7:75:
d3:f3:8b:b3:d9:24:1f:b5:51:d3:67:5f:30:89:1f:b5:a7:78:
fc:dc:39:d2:d0:b7:17:13:ff:1b:3f:a8:17:81:08:ed:25:90:
3e:3f:46:c6:15:5f:7e:ed:08:66:08:15:e4:09:49:14:7c:5c:
83:d6:2c:34:3e:ba:d9:00:e9:34:2c:88:4b:37:2c:d4:6b:3c:
e2:5b:eb:37:9a:2f:93:84:3d:a3:b3:a1:14:9e:63:cf:98:75:
56:a1:fc:8e:19:c0:48:e9:d7:3a:32:45:d1:cf:48:0a:e7:42:
74:4d:42:43:91:1b:e7:07:2c:7a:a8:1f:58:cb:29:cd:55:dc:
22:82:c4:bd:bb:bc:15:20:6b:bf:50:ee:1d:aa:f7:ee:9b:c3:
06:c6:ad:45:a0:06:3a:1b:a5:58:1c:b8:58:b1:be:ab:a4:80:
93:f3:99:a8:99:1d:92:64:2e:44:8e:c2:39:72:77:c4:06:3f:
69:cd:77:d6:3f:c6:5e:ad:f7:c9:7e:6e:c5:19:a9:77:a2:f5:
88:06:ff:20:17:da:ce:d4:19:f3:c1:05:ee:c2:1f:4d:06:a2:
28:03:13:a8:df:51:f9:2e:fe:5e:ca:63:bd:83:43:cf:5e:4a:
30:ea:da:f4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY9YjAPjGKG/gnbyYq42arntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTA4MTQxMjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzJmZTcwZjRjZWYxMDM3NjgzNjE1MmYzOGU0ZTA4NTMyY2M3YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAtuljlWxdie34kYvMixGGiXd+SO
QpoKZJEQ9dmk9orqvUjdCjjWe5j8GH/awboZuxHWkFvD5vAWIL46IS6OPCVsZuWt
RngSH5KcnXjCaNXdF8CO5oYJ+ilrkak1smBSljU7wbcVBM0lNlMPsRxfqYo3aKPj
23O2FAaqS6kqHEI3uQZ5ucVHd/SI9CjYwOER8eC3LB8iPtK7B4k/lY7tW4ONCy3x
NyKyLsXSmPeRsqm7lIR4okqab8iAK+k9Hg9YU1Rh+0KiY+7uyRzH+BFh9mIhOYGM
IxR6tetmzfLta8kQYkRGiAVUHLOGTnep7NJnNRB5PXnvLjWUkp46w618SwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEMv5w9M7xA3aDYVLzjk4IUyzHufMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzMwNzYw
Ny01NzA2LTRlNDQtYmI4ZS0xODlkMDBhMzMzZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvMzA3NjA3
LTU3MDYtNGU0NC1iYjhlLTE4OWQwMGEzMzNlZS8xL1F5X25EMHp2RURkb05oVXZP
T1RnaFRMTWU1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuV+oMA0GCSqGSIb3DQEBCwUAA4IBAQCWIfw3
b0QBz7qimCNq6N+Op3XT84uz2SQftVHTZ18wiR+1p3j83DnS0LcXE/8bP6gXgQjt
JZA+P0bGFV9+7QhmCBXkCUkUfFyD1iw0PrrZAOk0LIhLNyzUazziW+s3mi+ThD2j
s6EUnmPPmHVWofyOGcBI6dc6MkXRz0gK50J0TUJDkRvnByx6qB9YyynNVdwigsS9
u7wVIGu/UO4dqvfum8MGxq1FoAY6G6VYHLhYsb6rpICT85momR2SZC5EjsI5cnfE
Bj9pzXfWP8ZerffJfm7FGal3ovWIBv8gF9rO1BnzwQXuwh9NBqIoAxOo31H5Lv5e
ymO9g0PPXkow6tr0
-----END CERTIFICATE-----
Generated at Tue Jul 2 14:30:57 2024 by rpki-client on console-ams.rpki-client.org