Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
File: qoj641tmtN4uQcpe4He17wtKtkk.cer (raw, json)
Hash identifier: Xw91NVL0Ce87IzTiSR/fu/n/XIPWouftl7B8M4SQQEc=
Subject key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FDE873F0514EFCEEB49A8107AF07E171F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Jun 2024 14:35:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.159.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:87:3f:05:14:ef:ce:eb:49:a8:10:7a:f0:7e:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 14:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:d3:b8:85:43:0a:6b:94:d3:08:87:cb:44:
a9:b9:5f:d5:7b:2b:ee:74:27:8d:67:c2:ba:40:0f:
5e:99:e9:2c:b1:6d:a4:77:5b:bc:4c:7f:f5:aa:27:
ac:0a:ec:b5:76:49:97:fb:a0:df:29:53:74:9f:a9:
2b:8f:63:dc:8e:0c:f9:52:d1:93:9b:43:ad:69:30:
ec:7e:63:97:c1:59:21:91:16:84:6b:d1:a7:85:83:
0c:70:25:7d:1d:47:5e:3d:47:0b:e6:ee:26:26:ff:
ae:7a:c8:fc:82:df:95:28:0f:9a:46:22:8f:90:87:
7a:91:69:5b:35:b8:2a:a5:19:1c:58:41:b1:ef:d2:
1f:ba:76:72:ba:a8:2f:21:3f:13:53:03:66:5a:79:
0e:85:1d:ac:b3:0e:41:b7:8f:da:3a:96:81:cc:e0:
fc:5d:7f:e8:2e:18:1e:0e:0c:ad:d2:97:2a:4c:9c:
0d:68:1b:0f:24:25:18:f7:f3:07:70:aa:38:aa:cd:
c9:e0:1b:8b:2c:8c:cf:21:e5:6f:29:4c:d4:fd:e5:
54:1a:5f:90:ef:c3:c7:89:56:48:20:ad:fa:d7:63:
8c:27:4f:bc:0e:a9:29:82:6c:1c:ad:34:48:de:31:
4a:50:8b:03:0f:56:ca:40:88:eb:15:58:0f:22:0f:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
01:9b:c3:67:af:7b:c4:2b:98:33:04:31:85:ff:57:68:c3:cf:
20:42:c4:db:ac:f8:d9:49:b2:24:1f:45:3e:23:03:d0:b9:20:
9b:80:1a:81:fb:d7:ca:fa:12:fb:cc:a3:4a:82:7a:0c:51:55:
57:55:11:4d:86:94:e3:cc:f5:56:73:34:a8:52:54:71:8e:a3:
92:9a:93:3a:81:0a:6a:02:48:a9:57:45:1e:d6:56:87:b8:2d:
ab:be:8b:6d:1c:38:9d:5d:bf:0d:b0:2a:0b:f9:09:f5:6f:86:
97:47:57:04:4d:af:06:ab:a8:ec:e8:db:e2:f1:cb:5a:83:34:
64:ff:1f:d8:bc:f8:50:95:a5:44:b0:45:77:49:91:60:9b:d7:
58:59:f6:d1:cc:91:72:12:57:4e:4d:f5:cc:0b:94:8b:02:37:
3b:fe:e8:95:e8:47:81:66:92:59:b8:39:0d:fe:83:b1:6f:ca:
8d:15:fa:86:fe:2a:d1:3d:fa:a5:6d:02:f4:de:30:4f:97:20:
e3:1c:d3:39:a3:3e:75:34:98:94:41:d5:d3:34:c5:f8:9c:94:
9a:61:77:ba:f9:d8:47:b7:b2:4f:8d:4d:e9:cb:b3:27:be:60:
87:ed:79:c2:9f:df:a0:56:ed:dd:dd:e4:ec:91:08:64:72:e9:
f2:f3:6e:a9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY/ehz8FFO/O60moEHrwfhcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjAzMTQzNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTg4ZmFlMzViNjZiNGRlMmU0MWNhNWVlMDc3YjVlZjBiNGFiNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN/TuIVDCmuU0wiHy0SpuV/Veyvu
dCeNZ8K6QA9emekssW2kd1u8TH/1qiesCuy1dkmX+6DfKVN0n6krj2Pcjgz5UtGT
m0OtaTDsfmOXwVkhkRaEa9GnhYMMcCV9HUdePUcL5u4mJv+uesj8gt+VKA+aRiKP
kId6kWlbNbgqpRkcWEGx79IfunZyuqgvIT8TUwNmWnkOhR2ssw5Bt4/aOpaBzOD8
XX/oLhgeDgyt0pcqTJwNaBsPJCUY9/MHcKo4qs3J4BuLLIzPIeVvKUzU/eVUGl+Q
78PHiVZIIK3612OMJ0+8DqkpgmwcrTRI3jFKUIsDD1bKQIjrFVgPIg/uswIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKqI+uNbZrTeLkHKXuB3te8LSrZJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzZlZmQx
Yi0zZTEwLTQ0NDYtOTJjNy1iOTJjYjYxMTMwMzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNmVmZDFi
LTNlMTAtNDQ0Ni05MmM3LWI5MmNiNjExMzAzNS8xL3FvajY0MXRtdE40dVFjcGU0
SGUxN3d0S3Rray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuZ/4MA0GCSqGSIb3DQEBCwUAA4IBAQABm8Nn
r3vEK5gzBDGF/1dow88gQsTbrPjZSbIkH0U+IwPQuSCbgBqB+9fK+hL7zKNKgnoM
UVVXVRFNhpTjzPVWczSoUlRxjqOSmpM6gQpqAkipV0Ue1laHuC2rvottHDidXb8N
sCoL+Qn1b4aXR1cETa8Gq6js6Nvi8ctagzRk/x/YvPhQlaVEsEV3SZFgm9dYWfbR
zJFyEldOTfXMC5SLAjc7/uiV6EeBZpJZuDkN/oOxb8qNFfqG/irRPfqlbQL03jBP
lyDjHNM5oz51NJiUQdXTNMX4nJSaYXe6+dhHt7JPjU3py7MnvmCH7XnCn9+gVu3d
3eTskQhkcuny826p
-----END CERTIFICATE-----
Generated at Tue Jun 4 12:20:15 2024 by rpki-client on console-fra.rpki-client.org