Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
File: PZQks8jnL3RqWesZlFWqNkajpFc.cer (raw, json)
Hash identifier: VmsyxhoZu9DzloFe/HJL2spggKGIUOqcANEt1KpuNYA=
Subject key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B779063E836B2E405D3500E9B1AB73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202283
IP: 185.232.220.0/22
IP: 193.109.238.0/24
IP: 2a0c:d100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:06:3e:83:6b:2e:40:5d:35:00:e9:b1:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:9d:f1:08:d0:3c:a1:4c:80:c7:e7:fc:65:
a6:1e:62:67:3a:50:ef:a2:fb:69:c9:41:ac:f8:b4:
c0:b9:35:2d:f5:84:c1:9c:09:24:2f:9d:76:84:40:
bf:e8:87:dd:27:13:80:d9:9f:60:3c:ff:ca:fb:eb:
56:c3:a0:53:ea:e8:e5:24:83:fc:1e:0f:5c:df:f2:
65:a6:54:63:78:13:fc:a0:ca:4f:75:d4:bb:5e:80:
9b:57:7c:c1:09:31:d5:12:0a:8f:d6:7f:ae:80:6d:
98:15:9f:15:95:b2:d5:1e:7c:bc:b7:39:cc:a4:2f:
08:31:42:02:21:52:67:00:63:3a:ef:35:9e:37:e9:
66:0d:28:ca:ad:26:ee:b9:61:c5:7b:64:c1:15:8f:
ca:33:40:7b:4c:5e:59:45:71:60:03:33:1c:54:48:
17:56:85:a4:aa:66:88:bc:24:a4:71:8d:be:2d:75:
17:cf:af:25:cb:42:1c:9a:37:e1:3f:41:eb:84:0f:
29:14:77:17:25:a6:ba:a8:92:dc:0d:09:a5:70:99:
2a:a1:98:f6:90:5f:9a:69:60:4c:c7:4a:b7:9c:4e:
e9:4a:1e:15:d5:bd:05:62:e1:5b:c1:f5:9c:7a:01:
e8:eb:c4:61:46:b3:f9:0b:ca:df:4c:8f:c4:a7:fc:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.220.0/22
193.109.238.0/24
IPv6:
2a0c:d100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202283
Signature Algorithm: sha256WithRSAEncryption
a5:c7:53:d0:94:a7:4a:ba:3f:5a:26:e6:26:d6:99:a9:10:b0:
1b:56:c5:46:30:d8:f3:cd:b7:ba:68:78:d6:57:c4:ae:e7:a3:
3b:6b:ac:60:81:34:45:07:4c:1a:33:52:47:ab:55:8c:12:a4:
6f:24:a5:ab:af:86:19:7e:e9:64:e5:50:34:7a:28:f4:46:a3:
d9:c2:80:44:e3:17:15:7c:c0:0a:e0:e4:38:f8:92:77:22:55:
d1:f1:82:05:92:98:9c:03:9c:c1:4b:94:59:fd:b0:14:88:84:
8c:c1:5d:7c:97:0e:09:f0:19:23:b3:ac:7c:c0:c6:8a:56:56:
6f:6a:eb:63:ad:9d:d5:40:14:fe:05:78:2d:a1:cb:83:77:d4:
77:51:51:09:b3:97:a4:19:7a:4f:95:73:c9:2d:c8:1e:c0:3c:
26:97:98:fa:15:c2:57:19:c5:4f:6a:88:d2:1b:6c:51:92:a5:
53:b6:ca:93:58:5f:e6:b7:e1:43:64:72:04:c8:6b:99:bc:66:
96:47:e9:ca:6b:ef:a2:0e:d9:3b:81:74:0c:04:1e:45:04:9e:
b5:20:32:ce:b3:84:7f:ea:a9:ac:c2:2d:7f:be:eb:b1:d8:c1:
4a:e3:98:85:b0:83:f8:48:09:e4:e3:8d:33:56:18:25:c4:67:
f8:ed:4f:ab
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzGt3kGPoNrLkBdNQDpsatzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDk0MjRiM2M4ZTcyZjc0NmE1OWViMTk5NDU1YWEzNjQ2YTNhNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYid8QjQPKFMgMfn/GWmHmJnOlDv
ovtpyUGs+LTAuTUt9YTBnAkkL512hEC/6IfdJxOA2Z9gPP/K++tWw6BT6ujlJIP8
Hg9c3/JlplRjeBP8oMpPddS7XoCbV3zBCTHVEgqP1n+ugG2YFZ8VlbLVHny8tznM
pC8IMUICIVJnAGM67zWeN+lmDSjKrSbuuWHFe2TBFY/KM0B7TF5ZRXFgAzMcVEgX
VoWkqmaIvCSkcY2+LXUXz68ly0IcmjfhP0HrhA8pFHcXJaa6qJLcDQmlcJkqoZj2
kF+aaWBMx0q3nE7pSh4V1b0FYuFbwfWcegHo68RhRrP5C8rfTI/Ep/yTkwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFD2UJLPI5y90alnrGZRVqjZGo6RXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2RmMjk0
Ny1jZDA1LTQ0MDUtOTQ5YS02YTgwMzNkY2JlMWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZGYyOTQ3
LWNkMDUtNDQwNS05NDlhLTZhODAzM2RjYmUxYy8xL1BaUWtzOGpuTDNScVdlc1ps
RldxTmthanBGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuejcAwQAwW3uMA0EAgACMAcDBQMqDNEAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWKzANBgkqhkiG9w0BAQsFAAOCAQEApcdT
0JSnSro/WibmJtaZqRCwG1bFRjDY8823umh41lfEruejO2usYIE0RQdMGjNSR6tV
jBKkbySlq6+GGX7pZOVQNHoo9Eaj2cKAROMXFXzACuDkOPiSdyJV0fGCBZKYnAOc
wUuUWf2wFIiEjMFdfJcOCfAZI7OsfMDGilZWb2rrY62d1UAU/gV4LaHLg3fUd1FR
CbOXpBl6T5VzyS3IHsA8JpeY+hXCVxnFT2qI0htsUZKlU7bKk1hf5rfhQ2RyBMhr
mbxmlkfpymvvog7ZO4F0DAQeRQSetSAyzrOEf+qprMItf77rsdjBSuOYhbCD+EgJ
5OONM1YYJcRn+O1Pqw==
-----END CERTIFICATE-----
Generated at Fri May 3 10:13:07 2024 by rpki-client on console-fra.rpki-client.org