Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer (raw, json)
Hash identifier: 8paEA/L7CbBbQBmOZoXgg9d/G6TkKP5oykPXV4ytlqg=
Subject key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF2FB3D01A64CE9BF2048F5B43304
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197630
IP: 46.235.120.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f2:fb:3d:01:a6:4c:e9:bf:20:48:f5:b4:33:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:55:1b:96:b1:1f:1a:75:f9:5b:be:28:8b:
13:5b:f4:ad:fa:59:c7:6a:2f:b9:79:2b:c5:de:27:
23:41:f0:b2:ff:06:49:f7:3f:6f:f5:2b:6e:90:99:
df:2e:a7:17:53:af:ce:06:47:c0:77:ab:b5:0a:c0:
75:e8:0c:83:ad:17:db:e8:b2:30:f6:3c:89:fb:fe:
48:15:20:4b:a1:35:bf:43:7e:f9:bf:25:61:3c:14:
a1:dd:0b:69:ed:03:18:75:11:55:20:0a:82:83:63:
8c:d2:ba:56:9d:ce:ec:6d:57:c2:7c:40:97:4c:ef:
ca:ba:ea:05:0d:7f:e2:02:c9:c0:27:e9:83:e6:53:
59:ff:21:58:81:ea:54:dc:92:f2:c6:6f:ed:b1:30:
1d:d0:71:a8:43:08:e8:b2:a8:32:9e:3e:aa:5f:64:
9a:c8:46:a2:ca:86:53:46:81:37:9d:99:33:61:f0:
f6:c1:ac:0f:54:0f:7c:58:38:1f:fa:dd:0f:11:75:
6a:62:77:8c:09:bd:46:6a:84:05:9f:93:f9:d6:c9:
eb:01:52:f2:3e:f2:57:17:0d:f7:f3:25:d1:25:bb:
ec:ab:5d:df:ec:9d:49:56:9c:c7:94:b8:03:72:ad:
60:30:8d:2e:ef:90:95:a3:ec:2c:3f:cf:d7:ba:c5:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.120.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197630
Signature Algorithm: sha256WithRSAEncryption
24:61:16:61:79:ad:86:b3:f6:b5:f4:e7:57:4c:3a:c0:3d:e5:
f9:c7:10:03:53:36:40:4c:08:59:ea:26:7e:75:06:18:25:07:
12:1e:b1:38:12:43:65:89:0a:c8:47:b1:62:b5:ea:f1:5e:30:
f4:e4:96:c5:99:eb:aa:93:b9:f6:bd:a2:6f:a0:5c:0b:45:83:
09:0a:10:a0:1e:63:d0:fa:69:8f:13:60:18:7a:8d:ed:ad:75:
78:fc:27:6f:3d:bf:f7:d4:9c:87:92:4a:97:92:cc:a8:6d:bf:
c8:6d:81:7c:88:c6:90:e8:65:fc:df:75:cc:62:a3:82:b8:86:
f8:c1:b4:af:89:92:d2:55:d3:da:aa:97:aa:40:47:9a:5d:28:
85:f9:ac:7d:db:73:b4:2b:ca:ad:0d:fe:a7:bd:7a:be:95:69:
9d:7b:4e:96:a7:ff:36:81:bd:4f:2c:2e:53:3a:41:0d:c9:4b:
c2:7d:3e:63:9f:c1:9a:d6:b0:a0:77:a4:04:69:8b:28:b9:73:
3a:27:20:99:0c:97:81:9b:ba:20:58:1e:b3:29:1a:8b:fd:3d:
34:7e:ce:23:d2:6f:c4:4b:38:1c:01:c7:42:51:9e:ef:d8:9c:
d1:99:d9:24:05:21:f9:fe:64:76:6d:a2:d4:4b:ad:86:04:8d:
fa:18:9a:5d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzF2/L7PQGmTOm/IEj1tDMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTBkMzAwZTZhY2QxZjk4OTVmY2UzYjVhYmUzOGE1ZjAwNTg0ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm9VG5axHxp1+Vu+KIsTW/St+lnH
ai+5eSvF3icjQfCy/wZJ9z9v9StukJnfLqcXU6/OBkfAd6u1CsB16AyDrRfb6LIw
9jyJ+/5IFSBLoTW/Q375vyVhPBSh3Qtp7QMYdRFVIAqCg2OM0rpWnc7sbVfCfECX
TO/KuuoFDX/iAsnAJ+mD5lNZ/yFYgepU3JLyxm/tsTAd0HGoQwjosqgynj6qX2Sa
yEaiyoZTRoE3nZkzYfD2wawPVA98WDgf+t0PEXVqYneMCb1GaoQFn5P51snrAVLy
PvJXFw338yXRJbvsq13f7J1JVpzHlLgDcq1gMI0u75CVo+wsP8/XusWOrQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBkNMA5qzR+Ylfzjtavjil8AWE1VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzk3NGVh
Mi00MGFmLTRlZjYtYjZjNy1mZGNkOWZkOWJiMDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvOTc0ZWEy
LTQwYWYtNGVmNi1iNmM3LWZkY2Q5ZmQ5YmIwMy8xL0dRMHdEbXJOSDVpVl9PTzFx
LU9LWHdCWVRWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDLut4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMD/jANBgkqhkiG9w0BAQsFAAOCAQEAJGEWYXmthrP2tfTnV0w6wD3l+ccQA1M2
QEwIWeomfnUGGCUHEh6xOBJDZYkKyEexYrXq8V4w9OSWxZnrqpO59r2ib6BcC0WD
CQoQoB5j0PppjxNgGHqN7a11ePwnbz2/99Sch5JKl5LMqG2/yG2BfIjGkOhl/N91
zGKjgriG+MG0r4mS0lXT2qqXqkBHml0ohfmsfdtztCvKrQ3+p716vpVpnXtOlqf/
NoG9TywuUzpBDclLwn0+Y5/BmtawoHekBGmLKLlzOicgmQyXgZu6IFgesykai/09
NH7OI9JvxEs4HAHHQlGe79ic0ZnZJAUh+f5kdm2i1EuthgSN+hiaXQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:35 2024 by rpki-client on console-ams.rpki-client.org