Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
File: QJVm2b91OLcBz1bzqFyZUrvHQaY.cer (raw, json)
Hash identifier: jswIv9Y348HV2v26Yi2YhqUQAtYvpbwVSigu7cEVE+A=
Subject key identifier: 40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34961FE1AD2652324DF2BDDB73721EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.239.6.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:61:fe:1a:d2:65:23:24:df:2b:dd:b7:37:21:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:a4:2c:65:cb:e2:3a:a7:bd:1e:f7:48:16:
f9:9e:11:07:ae:5a:6b:db:fc:b6:dc:44:53:e2:cd:
17:4c:ae:25:57:18:27:a6:f0:02:22:10:51:f2:9a:
bb:f5:b1:06:3f:0a:68:52:19:b9:fb:36:b4:b9:1d:
08:9b:8e:dd:5a:da:ff:d4:93:7d:60:c2:80:70:77:
35:2d:0f:aa:a6:3f:5a:dd:34:a3:58:26:a1:a7:5b:
71:80:55:37:61:49:fd:ac:8e:0c:bb:8f:55:10:2b:
fc:91:25:bb:54:56:62:0d:6b:50:48:11:ec:fe:c0:
d9:81:dd:00:77:0c:1b:df:94:bd:fa:11:f0:f4:41:
8f:1e:2f:bf:73:57:aa:2f:6c:6d:0a:e1:73:0a:27:
b0:cf:85:9e:69:53:47:84:a6:68:50:1e:58:5e:db:
3b:ab:5c:99:fd:4b:13:7f:f1:7e:fb:b7:e7:fe:6c:
6d:40:7d:5a:3f:c4:cc:46:5c:12:b1:6e:37:85:88:
ea:10:c3:29:6a:b2:92:a5:ca:e4:0c:5a:a1:91:44:
2d:ca:bc:1c:42:98:57:b6:a7:8f:45:16:58:0e:87:
4c:41:15:e3:66:ee:71:37:e0:da:75:06:7c:74:f1:
e0:0f:c7:7e:c5:97:80:41:64:4a:54:55:ae:c0:8d:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
Signature Algorithm: sha256WithRSAEncryption
52:f9:e9:66:87:11:a4:06:8b:e6:fb:3d:07:43:5c:4b:67:ea:
ee:90:5e:e0:af:5e:e6:45:65:f0:b4:d6:81:b6:bf:14:2c:34:
11:4a:9f:3e:f6:b2:c4:6c:8e:ba:cf:2e:f8:38:ea:5b:40:17:
b9:39:4d:66:cc:ec:ef:dd:69:67:a7:d3:45:0c:bd:cc:89:54:
8e:dc:29:18:d9:17:66:0e:49:b5:3f:47:9d:04:9a:4b:bd:ab:
03:a2:9d:95:8b:96:14:6d:b2:d5:85:6b:b7:89:dc:ba:28:59:
50:f7:af:92:c3:be:4b:3c:ab:03:4b:ca:56:ee:81:bf:a8:96:
5f:b2:c7:2e:72:9b:3b:ac:9b:ce:32:bc:5c:be:ce:14:a8:16:
39:58:97:a5:8d:70:ed:84:8b:6d:c5:ad:2a:4f:79:ad:f0:02:
b9:a0:69:43:2d:b1:75:cc:08:c0:70:66:95:a1:2d:10:3d:a9:
d2:91:f6:2c:05:4c:1e:2b:1f:c2:5b:4f:dd:e0:fb:26:ea:8c:
29:4a:95:b4:75:f2:58:b9:07:32:e2:97:9f:ff:a0:e5:e0:0e:
33:6b:ca:3b:bb:ea:50:ff:27:59:29:72:7b:cb:74:0b:d3:d5:
c4:21:07:30:56:de:c6:89:21:9a:3a:33:2a:43:03:27:55:37:
be:65:7a:de
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSWH+GtJlIyTfK923NyHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDk1NjZkOWJmNzUzOGI3MDFjZjU2ZjNhODVjOTk1MmJiYzc0MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mOkLGXL4jqnvR73SBb5nhEHrlpr
2/y23ERT4s0XTK4lVxgnpvACIhBR8pq79bEGPwpoUhm5+za0uR0Im47dWtr/1JN9
YMKAcHc1LQ+qpj9a3TSjWCahp1txgFU3YUn9rI4Mu49VECv8kSW7VFZiDWtQSBHs
/sDZgd0Adwwb35S9+hHw9EGPHi+/c1eqL2xtCuFzCiewz4WeaVNHhKZoUB5YXts7
q1yZ/UsTf/F++7fn/mxtQH1aP8TMRlwSsW43hYjqEMMparKSpcrkDFqhkUQtyrwc
QphXtqePRRZYDodMQRXjZu5xN+DadQZ8dPHgD8d+xZeAQWRKVFWuwI3flQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFECVZtm/dTi3Ac9W86hcmVK7x0GmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2RmYmQy
Ni03OTcwLTQ0MzUtOGRlZi0wZWQzMGZmY2FkM2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZGZiZDI2
LTc5NzAtNDQzNS04ZGVmLTBlZDMwZmZjYWQzZS8xL1FKVm0yYjkxT0xjQnoxYnpx
RnlaVXJ2SFFhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW+8GMA0GCSqGSIb3DQEBCwUAA4IBAQBS+elm
hxGkBovm+z0HQ1xLZ+rukF7gr17mRWXwtNaBtr8ULDQRSp8+9rLEbI66zy74OOpb
QBe5OU1mzOzv3Wlnp9NFDL3MiVSO3CkY2RdmDkm1P0edBJpLvasDop2Vi5YUbbLV
hWu3idy6KFlQ96+Sw75LPKsDS8pW7oG/qJZfsscucps7rJvOMrxcvs4UqBY5WJel
jXDthIttxa0qT3mt8AK5oGlDLbF1zAjAcGaVoS0QPanSkfYsBUweKx/CW0/d4Psm
6owpSpW0dfJYuQcy4pef/6Dl4A4za8o7u+pQ/ydZKXJ7y3QL09XEIQcwVt7GiSGa
OjMqQwMnVTe+ZXre
-----END CERTIFICATE-----
Generated at Fri May 3 09:06:24 2024 by rpki-client on console-ams.rpki-client.org