Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer (raw, json)
Hash identifier: ESJeydrOEqHnyELNR4sMBDxGoEIO8kpU4I6SoSBFxN8=
Subject key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3C428C43716EA7F519847C03B1DF77C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 09:19:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.90.0/24
IP: 2001:678:2c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:42:8c:43:71:6e:a7:f5:19:84:7c:03:b1:df:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 09:19:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:d3:61:57:60:e0:87:a9:36:ea:6a:76:7b:
70:59:99:4e:f0:38:92:aa:7b:eb:cf:60:26:45:40:
12:b1:47:20:e7:7b:b9:ee:d0:9f:67:c7:19:b8:1c:
4c:00:db:00:06:ce:f5:c2:f8:c7:ef:be:8a:c5:b5:
f7:ac:49:55:a7:cc:9f:7a:11:8c:76:c6:0e:9d:53:
7e:82:32:c1:c5:a5:0b:35:0d:67:79:cd:15:7c:58:
d8:de:c6:76:28:68:02:e4:d7:1c:09:6b:65:30:0f:
1f:46:b5:4b:6f:13:a9:bc:f1:0a:54:a3:4b:a4:85:
07:0e:b4:a4:69:6e:b0:a8:32:2d:2a:e0:39:07:7b:
b9:09:cb:b2:9f:cb:d7:fe:44:60:4f:72:45:a5:ba:
d7:bd:4e:73:45:85:bd:3b:4c:af:b1:a9:a9:e2:16:
ea:b3:ec:8c:c7:70:8e:4b:5e:c5:48:d6:ca:f3:a9:
7a:5b:70:1a:b4:be:7d:58:1c:54:88:27:ce:d2:aa:
79:b1:0c:3a:b1:4b:3a:9f:39:e5:b9:b0:4c:c3:39:
21:46:30:1b:08:60:40:85:f5:a2:22:22:69:71:64:
af:a0:85:3b:60:c8:b8:6c:6a:e4:f9:62:79:b9:31:
29:f8:92:97:e3:e5:38:fc:79:7d:70:28:15:78:8b:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.90.0/24
IPv6:
2001:678:2c4::/48
Signature Algorithm: sha256WithRSAEncryption
71:35:f9:e0:98:b8:1c:a9:ad:27:ea:36:0d:70:a0:70:6d:b9:
24:e0:c6:9e:e1:21:61:dd:2d:ec:20:42:3e:b6:23:03:2d:0d:
ee:8d:6b:82:46:f4:57:c0:bc:59:4a:60:5e:44:e0:6b:82:28:
c4:57:b2:c6:e4:30:47:48:71:4d:43:bd:3b:b3:2c:64:f4:6c:
2b:c1:38:aa:b3:81:8a:d0:18:49:c5:f9:e6:7d:32:78:e2:ee:
0a:5c:aa:91:79:ae:58:64:6a:e6:9b:ce:8a:cf:63:67:30:32:
f7:1e:23:e1:22:e1:c2:41:a7:20:65:f8:d7:84:75:36:ec:78:
ea:eb:a7:cd:fe:a9:63:5e:81:5b:0a:cd:21:13:c2:70:17:b2:
cc:89:67:46:bc:46:f6:f5:22:51:6e:7a:b5:24:48:7f:10:40:
f5:31:ad:a6:b3:ed:5a:4c:57:0e:51:06:6a:3e:6b:12:b0:b3:
01:55:67:c7:19:fa:d9:b8:db:9d:d1:79:e2:38:fb:5b:ba:ed:
46:e3:02:de:f8:ed:29:4d:28:0e:dd:18:15:45:e6:65:49:90:
9d:a3:01:08:bf:b8:f9:ce:8a:61:ae:a0:92:eb:0c:ba:75:3d:
65:ab:ec:d9:c6:cd:36:f4:65:25:19:57:fc:35:b5:4f:25:da:
87:b5:11:7e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAY48QoxDcW6n9RmEfAOx33fCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzE0MDkxOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzljZWQ5ODA1YTNjNWQ5MzRlMmM1MjFhMTdhOGFiOTRmMTFhZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHTYVdg4IepNupqdntwWZlO8DiS
qnvrz2AmRUASsUcg53u57tCfZ8cZuBxMANsABs71wvjH776KxbX3rElVp8yfehGM
dsYOnVN+gjLBxaULNQ1nec0VfFjY3sZ2KGgC5NccCWtlMA8fRrVLbxOpvPEKVKNL
pIUHDrSkaW6wqDItKuA5B3u5Ccuyn8vX/kRgT3JFpbrXvU5zRYW9O0yvsamp4hbq
s+yMx3COS17FSNbK86l6W3AatL59WBxUiCfO0qp5sQw6sUs6nznlubBMwzkhRjAb
CGBAhfWiIiJpcWSvoIU7YMi4bGrk+WJ5uTEp+JKX4+U4/Hl9cCgVeIu/twIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFEOc7ZgFo8XZNOLFIaF6irlPEa7FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzdiNTA3
YS1mZWNkLTRhZTMtODA1ZC1hNzc4MzQ1YWVkODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvN2I1MDdh
LWZlY2QtNGFlMy04MDVkLWE3NzgzNDVhZWQ4OC8xL1E1enRtQVdqeGRrMDRzVWhv
WHFLdVU4UnJzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW9haMA8EAgACMAkDBwAgAQZ4AsQwDQYJKoZI
hvcNAQELBQADggEBAHE1+eCYuByprSfqNg1woHBtuSTgxp7hIWHdLewgQj62IwMt
De6Na4JG9FfAvFlKYF5E4GuCKMRXssbkMEdIcU1DvTuzLGT0bCvBOKqzgYrQGEnF
+eZ9Mnji7gpcqpF5rlhkauabzorPY2cwMvceI+Ei4cJBpyBl+NeEdTbseOrrp83+
qWNegVsKzSETwnAXssyJZ0a8Rvb1IlFuerUkSH8QQPUxraaz7VpMVw5RBmo+axKw
swFVZ8cZ+tm4253ReeI4+1u67UbjAt747SlNKA7dGBVF5mVJkJ2jAQi/uPnOimGu
oJLrDLp1PWWr7NnGzTb0ZSUZV/w1tU8l2oe1EX4=
-----END CERTIFICATE-----
Generated at Fri May 3 07:33:17 2024 by rpki-client on console-fra.rpki-client.org