Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
File: BQJMtECm3Xana1aUwOL07jMOCnw.cer (raw, json)
Hash identifier: 4auvNzmxBrfZ8W9qaCKcnpqS3ty2kK7NNTWOFmbGz5Y=
Subject key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01922D1B5BC57A293266A02F84D993ED41D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Sep 2024 06:53:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214139
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:1b:5b:c5:7a:29:32:66:a0:2f:84:d9:93:ed:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 06:53:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:8d:63:2b:05:cf:2b:12:f8:81:09:4b:b8:
d7:f8:52:74:e3:a4:89:7f:cc:e1:63:26:e5:64:3f:
19:d3:c8:e4:b4:e9:a1:82:c6:c8:7c:ec:eb:37:14:
83:0f:2a:0b:60:73:43:a6:33:08:be:13:16:62:14:
e3:aa:ab:c6:c2:af:58:00:25:4b:d8:9a:64:00:bc:
4c:d1:76:19:81:ce:07:65:36:76:77:a1:54:a3:2b:
cd:bf:46:75:10:b2:7b:77:f6:7e:d8:2b:7c:e1:7e:
73:e1:3e:4b:ce:cb:3a:9b:1d:0a:9c:26:4d:4b:f0:
be:5e:bf:5a:62:98:de:81:2d:20:b5:af:ac:90:71:
5c:af:dc:c4:a3:2a:18:4f:b5:87:ca:27:33:4b:79:
7f:69:45:24:f0:77:07:70:e1:e1:cf:50:b0:56:c1:
51:f5:e2:1d:68:f1:b5:eb:dc:26:2d:9a:81:87:b1:
e2:e9:49:16:3b:09:f1:5e:9e:db:45:c8:0c:26:66:
69:46:ee:f1:3a:3d:71:2f:fc:5f:64:75:54:73:f9:
b1:b7:32:ca:0c:e4:ba:f6:9a:a4:0c:80:60:38:55:
94:2b:93:e0:e3:8f:4f:45:33:f3:e5:d0:39:c5:6d:
a8:c8:a6:1c:8f:cc:17:9e:79:45:bc:23:4a:80:60:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214139
Signature Algorithm: sha256WithRSAEncryption
93:75:3a:cc:35:a4:15:de:2d:63:c2:0b:93:e4:bf:67:ee:a3:
8e:74:a0:88:03:f2:ae:f9:68:b9:21:f7:7e:48:9e:a8:fd:43:
1a:b8:02:1b:f1:a1:66:7b:73:af:4f:70:bf:b0:46:be:f8:f0:
16:42:c3:f8:c8:b2:73:90:ed:16:3f:4f:e3:5c:49:96:7d:a0:
d4:36:96:e1:d6:b0:cf:86:03:ae:ad:e0:4a:f1:e9:e3:da:08:
16:59:0b:a5:0a:29:79:7c:cb:84:52:be:2e:e6:7d:31:80:07:
c3:db:0f:da:2f:5b:9f:b9:8b:ef:6b:0c:57:57:28:2e:f0:e4:
16:34:24:8f:44:1e:cb:92:24:59:6a:5b:16:f1:fd:92:b7:35:
1b:43:5a:c7:cf:45:e4:89:a7:7b:33:f9:65:f5:e1:35:56:0e:
19:d7:d9:2b:93:31:3f:cf:c2:3f:b1:5e:29:a7:be:11:2d:2e:
f8:2c:50:06:73:9f:3d:ca:f2:e2:aa:14:f2:ee:78:b1:48:8c:
d7:37:e1:c9:67:09:0f:50:05:1b:9e:7a:c4:50:4d:c7:13:60:
ca:73:18:0d:1e:b8:e2:db:f7:39:dd:63:51:4c:82:96:ca:e4:
51:52:f2:04:6f:46:3a:22:16:50:34:f2:11:00:b1:58:df:2c:
bf:c8:d2:e5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZItG1vFeikyZqAvhNmT7UHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTI2MDY1MzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTAyNGNiNDQwYTZkZDc2YTc2YjU2OTRjMGUyZjRlZTMzMGUwYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F2NYysFzysS+IEJS7jX+FJ046SJ
f8zhYyblZD8Z08jktOmhgsbIfOzrNxSDDyoLYHNDpjMIvhMWYhTjqqvGwq9YACVL
2JpkALxM0XYZgc4HZTZ2d6FUoyvNv0Z1ELJ7d/Z+2Ct84X5z4T5Lzss6mx0KnCZN
S/C+Xr9aYpjegS0gta+skHFcr9zEoyoYT7WHyiczS3l/aUUk8HcHcOHhz1CwVsFR
9eIdaPG169wmLZqBh7Hi6UkWOwnxXp7bRcgMJmZpRu7xOj1xL/xfZHVUc/mxtzLK
DOS69pqkDIBgOFWUK5Pg449PRTPz5dA5xW2oyKYcj8wXnnlFvCNKgGCc3QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAUCTLRApt12p2tWlMDi9O4zDgp8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2E2MGIx
YS0yN2JiLTQ2MDQtOTM0MC1hODIyNjIyMDRlMzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYTYwYjFh
LTI3YmItNDYwNC05MzQwLWE4MjI2MjIwNGUzOC8xL0JRSk10RUNtM1hhbmExYVV3
T0wwN2pNT0Nudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNEezANBgkqhkiG9w0BAQsFAAOCAQEAk3U6zDWkFd4t
Y8ILk+S/Z+6jjnSgiAPyrvlouSH3fkieqP1DGrgCG/GhZntzr09wv7BGvvjwFkLD
+Miyc5DtFj9P41xJln2g1DaW4dawz4YDrq3gSvHp49oIFlkLpQopeXzLhFK+LuZ9
MYAHw9sP2i9bn7mL72sMV1coLvDkFjQkj0Qey5IkWWpbFvH9krc1G0Nax89F5Imn
ezP5ZfXhNVYOGdfZK5MxP8/CP7FeKae+ES0u+CxQBnOfPcry4qoU8u54sUiM1zfh
yWcJD1AFG556xFBNxxNgynMYDR644tv3Od1jUUyClsrkUVLyBG9GOiIWUDTyEQCx
WN8sv8jS5Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:25:07 2024 by rpki-client on console-ams.rpki-client.org