Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer (raw, json)
Hash identifier: 7YAnL2+wVGYlPblQxbOayXOF3QmxAIqlqHhmCutb38w=
Subject key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF5F8A43D3922E7D06B9E7F006A6A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.110.83.0/24
IP: 2a11:440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:5f:8a:43:d3:92:2e:7d:06:b9:e7:f0:06:a6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:0e:e2:56:72:2c:cd:04:82:c8:78:40:71:
86:b1:4f:79:5e:eb:70:8e:c8:f8:89:73:5d:ad:59:
ab:69:df:ce:55:9e:08:ca:1e:30:15:40:31:6c:90:
38:8c:a3:fd:da:f1:51:5a:32:7a:f9:b4:9a:dd:fe:
fb:63:48:07:14:a7:65:95:38:df:d6:ca:98:eb:8d:
e1:9a:c3:43:91:97:6c:8a:28:17:76:c2:a4:a5:d6:
95:24:87:97:84:aa:16:02:ca:c3:39:54:f4:42:e1:
44:0c:7d:dc:dd:7d:cb:fc:e5:fd:ea:f2:0a:77:66:
dd:70:02:d8:e1:dc:da:66:ac:55:12:c3:f4:e4:18:
82:30:8b:97:7c:1b:f6:45:7b:7a:0f:86:75:ac:7a:
08:75:aa:fe:87:b6:65:4a:55:80:07:31:c0:03:3c:
b3:42:b2:11:3a:00:5c:ce:c5:9f:06:9b:96:8a:52:
c2:8b:5d:38:40:e1:d7:96:5f:63:ad:6c:81:e6:ec:
8a:f6:30:5b:d2:1e:11:76:86:c1:1d:ab:12:57:49:
e5:4f:17:7b:47:fe:de:55:9e:3e:11:cb:37:c2:61:
f7:ee:fe:47:74:70:6a:20:62:ee:0e:98:7d:aa:3a:
8a:b7:76:aa:dd:b2:5d:d0:cd:e0:66:c0:38:29:93:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.83.0/24
IPv6:
2a11:440::/32
Signature Algorithm: sha256WithRSAEncryption
a4:83:38:e3:68:37:93:fa:e4:66:f1:e7:53:1e:5b:f2:7f:1a:
4e:17:d9:1a:9f:52:2d:b4:3f:7b:64:0e:36:61:be:b0:2e:38:
81:31:08:1b:96:0e:e8:06:60:99:8b:dd:13:0f:1b:28:a1:b8:
12:21:56:d2:79:bc:3a:63:d3:cc:30:6a:dc:dd:44:f4:6d:b9:
31:a2:59:ea:62:62:90:62:7a:5c:53:7f:0f:31:7b:1c:09:d2:
38:c6:a8:8c:8f:b9:f9:f5:f5:ff:bb:d9:8f:41:40:61:3d:7b:
50:b8:46:49:65:ed:0c:2d:8c:2e:0c:bb:18:9b:97:f2:ec:64:
a8:7d:7f:f6:7d:32:55:91:a6:f6:d7:84:e1:25:da:86:f0:61:
71:ac:ff:ac:bd:6b:3e:53:49:7d:92:c2:b5:fb:cb:1e:b9:f0:
5c:a6:88:ab:94:cc:81:5c:82:04:f8:5e:e2:fb:8d:2b:dd:94:
52:dd:41:c6:1d:34:61:10:fd:85:14:99:ae:ba:76:e3:ce:73:
81:b0:04:08:30:e2:7f:f3:bd:44:99:48:42:1e:57:64:09:55:
9f:08:32:9b:65:92:b4:17:f6:d4:1a:e0:78:75:99:9d:dc:4b:
a1:ca:a5:22:83:65:46:5e:aa:b0:9f:78:44:b9:fa:10:33:c1:
45:3e:4f:00
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzI31+KQ9OSLn0GuefwBqaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjFhYjNkZDIyYzMzM2E3OWI2ZmYzMGFhYjdmMmUwMzZmYzM3MGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nIO4lZyLM0Egsh4QHGGsU95Xutw
jsj4iXNdrVmrad/OVZ4Iyh4wFUAxbJA4jKP92vFRWjJ6+bSa3f77Y0gHFKdllTjf
1sqY643hmsNDkZdsiigXdsKkpdaVJIeXhKoWAsrDOVT0QuFEDH3c3X3L/OX96vIK
d2bdcALY4dzaZqxVEsP05BiCMIuXfBv2RXt6D4Z1rHoIdar+h7ZlSlWABzHAAzyz
QrIROgBczsWfBpuWilLCi104QOHXll9jrWyB5uyK9jBb0h4RdobBHasSV0nlTxd7
R/7eVZ4+Ecs3wmH37v5HdHBqIGLuDph9qjqKt3aq3bJd0M3gZsA4KZPwtwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAIas90iwzOnm2/zCqt/LgNvw3CqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzAwZmJi
Ni1kZWEyLTRjN2ItYWZhZC00YWNlYzY0NzU3MmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMDBmYmI2
LWRlYTItNGM3Yi1hZmFkLTRhY2VjNjQ3NTcyZC8xL0FocXozU0xETTZlYmJfTUtx
Mzh1QTJfRGNLby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwW5TMA0EAgACMAcDBQAqEQRAMA0GCSqGSIb3
DQEBCwUAA4IBAQCkgzjjaDeT+uRm8edTHlvyfxpOF9kan1IttD97ZA42Yb6wLjiB
MQgblg7oBmCZi90TDxsoobgSIVbSebw6Y9PMMGrc3UT0bbkxolnqYmKQYnpcU38P
MXscCdI4xqiMj7n59fX/u9mPQUBhPXtQuEZJZe0MLYwuDLsYm5fy7GSofX/2fTJV
kab214ThJdqG8GFxrP+svWs+U0l9ksK1+8seufBcpoirlMyBXIIE+F7i+40r3ZRS
3UHGHTRhEP2FFJmuunbjznOBsAQIMOJ/871EmUhCHldkCVWfCDKbZZK0F/bUGuB4
dZmd3EuhyqUig2VGXqqwn3hEufoQM8FFPk8A
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:27:11 2024 by rpki-client on console-fra.rpki-client.org