Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.cer (raw, json)
Hash identifier: wqAYBAzacBIXTTtd4ilSXn99yhlBx/1wV/bW1R72OaE=
Subject key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3494E52E09E0B49EF63F6C1CBA2A9EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 33876
IP: 91.198.47.0/24
IP: 94.126.168.0/21
IP: 176.61.144.0/21
IP: 176.111.104.0/21
IP: 185.11.164.0/22
IP: 185.12.116.0/22
IP: 185.76.4.0/22
IP: 194.8.30.0/24
IP: 195.8.58.0/23
IP: 2a03:8bc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4e:52:e0:9e:0b:49:ef:63:f6:c1:cb:a2:a9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:67:4d:89:b1:fe:eb:75:af:67:7f:de:8d:
15:18:20:84:c7:47:8b:d7:bd:ce:cf:47:d2:69:fa:
27:44:9f:35:63:eb:5e:1b:2e:28:bd:ca:b5:f9:bb:
9b:73:5a:29:a2:7a:40:17:68:04:ab:24:a7:31:3d:
87:5e:1f:f6:20:13:6a:8f:1b:28:25:61:7d:1f:af:
a4:89:b8:16:0b:f6:29:8a:df:dc:1a:74:7c:02:f3:
fd:c7:b2:b8:a3:60:ff:bf:26:dc:b8:af:0c:b5:3a:
61:e9:42:68:63:68:66:c7:50:78:47:bd:48:ec:fe:
bc:ce:32:5d:b9:4f:eb:96:80:20:f1:05:e9:c1:a6:
56:c3:f9:2a:ef:5a:6c:93:de:9b:d0:64:eb:45:7f:
5e:f7:a1:a4:6f:a2:28:39:79:15:ae:3c:47:a7:a6:
22:2f:52:29:7d:ba:2f:71:ad:f4:dd:39:e3:66:ed:
1b:6f:b1:71:df:91:aa:29:74:de:d3:f6:98:fd:16:
41:40:23:79:95:8b:b6:15:37:75:68:b0:17:2b:00:
32:16:26:ff:dc:b6:2a:2b:dd:7b:38:5b:e3:9b:33:
2a:9b:38:6a:64:71:53:58:0b:11:e0:d5:bd:64:6a:
a9:0e:f7:f3:0c:01:4d:56:58:1c:18:0f:b4:36:86:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.47.0/24
94.126.168.0/21
176.61.144.0/21
176.111.104.0/21
185.11.164.0/22
185.12.116.0/22
185.76.4.0/22
194.8.30.0/24
195.8.58.0/23
IPv6:
2a03:8bc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33876
Signature Algorithm: sha256WithRSAEncryption
1b:4e:87:b0:36:13:ba:d9:b3:4e:a5:0e:52:0d:83:a3:cf:81:
42:66:ff:37:38:4d:b4:f7:1c:e6:72:50:3e:ce:7d:2d:bb:53:
b0:52:50:81:da:7c:a8:e9:07:79:d7:65:b5:1b:42:9d:c2:a6:
85:b6:cb:0a:d5:2d:30:0e:19:1b:c3:10:4e:21:b0:db:8f:14:
5c:7d:aa:6b:9e:a3:8c:63:79:03:85:65:c5:89:86:27:ba:78:
e0:6d:a6:75:66:ec:51:bc:c8:f5:2a:5c:f1:c5:29:75:2e:50:
af:66:04:b5:10:5f:0b:27:70:bf:11:1a:73:e3:2e:49:ee:4b:
cb:d9:f3:42:8a:6d:d1:0c:66:a2:d8:76:11:1c:24:46:67:19:
a1:35:01:b4:1a:37:b8:b5:a4:53:94:fe:c6:91:f9:e9:58:3b:
f2:34:e7:f0:77:cc:ab:e8:2e:a1:2d:94:38:77:e5:b4:02:79:
d1:c6:d5:f5:22:78:91:25:f8:a9:0c:8b:54:9e:27:0d:b8:ce:
c7:2b:67:b2:44:db:80:25:93:86:5f:5c:f1:28:86:0d:59:fb:
1d:de:bb:b3:86:42:4d:6c:b1:f1:17:fb:26:6d:9c:1d:22:7d:
61:1b:b1:1f:87:28:4d:3c:7b:ca:4b:c2:fc:96:44:62:fb:2e:
31:df:df:f5
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgISAYzDSU5S4J4LSe9j9sHLoqnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzU5MmFhYzQ4OTUyMmQ1ZGIxOGZkNjM5MWUwMzVhOTc3OGVhM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqhnTYmx/ut1r2d/3o0VGCCEx0eL
173Oz0fSafonRJ81Y+teGy4ovcq1+bubc1oponpAF2gEqySnMT2HXh/2IBNqjxso
JWF9H6+kibgWC/Ypit/cGnR8AvP9x7K4o2D/vybcuK8MtTph6UJoY2hmx1B4R71I
7P68zjJduU/rloAg8QXpwaZWw/kq71psk96b0GTrRX9e96Gkb6IoOXkVrjxHp6Yi
L1Ipfbovca303TnjZu0bb7Fx35GqKXTe0/aY/RZBQCN5lYu2FTd1aLAXKwAyFib/
3LYqK917OFvjmzMqmzhqZHFTWAsR4NW9ZGqpDvfzDAFNVlgcGA+0NobSVQIDAQAB
o4IC3zCCAtswHQYDVR0OBBYEFNNZKqxIlSLV2xj9Y5HgNal3jqOxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzdiMTNm
ZS1mNjJmLTRlOTMtODIxZS1lMzNhZTEwNmI1NGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvN2IxM2Zl
LWY2MmYtNGU5My04MjFlLWUzM2FlMTA2YjU0ZC8xLzAxa3FyRWlWSXRYYkdQMWpr
ZUExcVhlT283RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF
BwEHAQH/BE8wTTA8BAIAATA2AwQAW8YvAwQDXn6oAwQDsD2QAwQDsG9oAwQCuQuk
AwQCuQx0AwQCuUwEAwQAwggeAwQBwwg6MA0EAgACMAcDBQAqA4vAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCEVDANBgkqhkiG9w0BAQsFAAOCAQEAG06HsDYTutmz
TqUOUg2Do8+BQmb/NzhNtPcc5nJQPs59LbtTsFJQgdp8qOkHeddltRtCncKmhbbL
CtUtMA4ZG8MQTiGw248UXH2qa56jjGN5A4VlxYmGJ7p44G2mdWbsUbzI9Spc8cUp
dS5Qr2YEtRBfCydwvxEac+MuSe5Ly9nzQopt0Qxmoth2ERwkRmcZoTUBtBo3uLWk
U5T+xpH56Vg78jTn8HfMq+guoS2UOHfltAJ50cbV9SJ4kSX4qQyLVJ4nDbjOxytn
skTbgCWThl9c8SiGDVn7Hd67s4ZCTWyx8Rf7Jm2cHSJ9YRuxH4coTTx7ykvC/JZE
YvsuMd/f9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:15:41 2024 by rpki-client on console-ams.rpki-client.org