Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer (raw, json)
Hash identifier: pILIeukUK+3SXFGwqQ90Iol6SgQb95cXR1sF+2Fqd/E=
Subject key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDB8B3FAC58DAC303BD3B2CCFE6F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216200
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:db:8b:3f:ac:58:da:c3:03:bd:3b:2c:cf:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:14:e3:aa:6d:8d:7f:7c:92:a5:5d:8a:63:
70:3f:25:32:fb:8d:66:7a:0d:bc:65:a2:a5:66:88:
b0:bf:03:5a:37:3f:ea:5e:f5:1d:87:22:63:5d:ed:
7d:27:76:39:cf:5b:fa:c0:65:cd:14:3d:de:eb:ff:
2c:75:b3:07:5e:fc:8c:66:77:cc:ca:5a:a3:68:26:
bc:fb:cc:c6:0d:0c:e6:c8:46:af:af:ca:8f:fd:a9:
63:27:16:5e:29:00:22:8c:e6:dd:fd:80:d0:4a:b5:
ee:4c:92:b6:40:95:d5:5b:0b:ab:7c:4b:90:9a:4f:
5c:e0:aa:18:91:61:e8:9d:80:97:47:04:fd:15:81:
88:85:29:63:5f:ae:9b:28:6d:b9:93:1e:49:f5:4c:
24:ab:f4:4b:3b:37:e3:1c:81:d0:71:ed:9a:90:f2:
1c:70:26:49:e5:3e:9d:00:23:77:7f:c0:9c:2c:9e:
31:99:99:da:94:56:bd:b6:b4:13:a4:8f:ae:18:99:
61:fe:02:4f:2b:1e:f3:ac:65:d3:dc:07:6c:53:a7:
ed:4b:d1:79:e7:4c:53:3e:b4:43:29:e1:be:88:5d:
90:9b:7a:a0:de:52:af:d9:36:48:56:14:a1:3c:b9:
63:17:21:12:5f:23:67:14:4c:77:c8:50:46:64:f8:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216200
Signature Algorithm: sha256WithRSAEncryption
77:48:f0:54:90:a9:14:af:d7:cc:44:65:d3:df:0f:ec:8d:d8:
86:6a:b9:d4:43:47:24:5e:a4:c8:93:a9:7e:c8:56:35:94:07:
01:52:fd:c2:f8:06:56:ed:40:3f:3b:c8:6f:c2:c7:cf:36:02:
a2:e7:f8:58:b3:04:94:28:5a:c2:c9:cb:d6:a0:e3:b6:60:05:
56:49:86:da:a0:a9:d5:44:ab:dd:3b:e0:e1:fc:43:0c:67:7e:
1b:30:26:88:8d:02:e8:cd:f7:eb:0e:8a:1a:47:ca:24:bb:fd:
80:30:90:f0:2b:d8:79:30:e4:65:3d:cd:3d:96:31:71:99:7b:
2e:cc:99:40:d3:da:31:80:5d:0e:68:d3:02:8d:7c:08:4c:66:
89:d1:86:96:26:53:25:38:f2:21:53:13:48:bf:d5:60:6c:17:
74:02:60:45:1c:d1:1a:2f:a7:f2:40:95:14:40:04:f1:eb:41:
2f:c0:cb:73:3f:d5:2c:98:24:e0:f6:54:c0:16:47:2f:c1:96:
7d:8f:52:7d:84:f9:7d:0e:82:02:78:62:bd:bf:12:fe:d4:10:
08:42:5c:b1:6f:dd:16:20:17:de:e5:a9:57:f3:69:d3:7e:71:
e3:79:34:76:84:66:02:a4:86:e9:a1:77:89:1f:06:e6:24:0f:
75:52:5d:17
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzFbtuLP6xY2sMDvTssz+byMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2NmNDE2MTkzYTFjMmVkMzA1NmI2NDdlNWE0NjUwMzE0OGUzODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ0U46ptjX98kqVdimNwPyUy+41m
eg28ZaKlZoiwvwNaNz/qXvUdhyJjXe19J3Y5z1v6wGXNFD3e6/8sdbMHXvyMZnfM
ylqjaCa8+8zGDQzmyEavr8qP/aljJxZeKQAijObd/YDQSrXuTJK2QJXVWwurfEuQ
mk9c4KoYkWHonYCXRwT9FYGIhSljX66bKG25kx5J9Uwkq/RLOzfjHIHQce2akPIc
cCZJ5T6dACN3f8CcLJ4xmZnalFa9trQTpI+uGJlh/gJPKx7zrGXT3AdsU6ftS9F5
50xTPrRDKeG+iF2Qm3qg3lKv2TZIVhShPLljFyESXyNnFEx3yFBGZPif6QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEPPQWGTocLtMFa2R+WkZQMUjjgkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2FhMzFj
Zi1iYjMxLTQ5N2MtYTU3Ny0wOWI5NjlkMTYwZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYWEzMWNm
LWJiMzEtNDk3Yy1hNTc3LTA5Yjk2OWQxNjBmZS8xL1E4OUJZWk9od3Uwd1ZyWkg1
YVJsQXhTT09DUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMiDANBgkqhkiG9w0BAQsFAAOCAQEAd0jwVJCpFK/X
zERl098P7I3Yhmq51ENHJF6kyJOpfshWNZQHAVL9wvgGVu1APzvIb8LHzzYCouf4
WLMElChawsnL1qDjtmAFVkmG2qCp1USr3Tvg4fxDDGd+GzAmiI0C6M336w6KGkfK
JLv9gDCQ8CvYeTDkZT3NPZYxcZl7LsyZQNPaMYBdDmjTAo18CExmidGGliZTJTjy
IVMTSL/VYGwXdAJgRRzRGi+n8kCVFEAE8etBL8DLcz/VLJgk4PZUwBZHL8GWfY9S
fYT5fQ6CAnhivb8S/tQQCEJcsW/dFiAX3uWpV/Np035x43k0doRmAqSG6aF3iR8G
5iQPdVJdFw==
-----END CERTIFICATE-----
Generated at Fri May 3 09:06:17 2024 by rpki-client on console-ams.rpki-client.org