Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
File: QNTjO-cdM587wMxtrmXoeS_01dw.cer (raw, json)
Hash identifier: aggZ99sSitlYkDeVTkmc42xaMhq65ae8zb5JfYpEudg=
Subject key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F8867327A17CC0A958DBB38DC3F21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196621
IP: 193.5.68.0/23
IP: 2001:67c:8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:88:67:32:7a:17:cc:0a:95:8d:bb:38:dc:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:50:46:a3:4f:aa:bb:9e:a9:e7:6d:73:a5:
f0:40:e2:da:15:03:8f:26:00:a3:e1:82:ce:4e:2c:
55:5b:ba:8f:9e:5c:a7:a5:eb:13:7b:ed:21:ba:a4:
fd:95:1f:07:31:e7:8b:b2:a1:a1:93:25:4b:87:79:
f5:8e:01:46:88:31:97:52:6f:c1:41:fc:b2:da:77:
cb:9e:00:12:eb:68:d7:e3:b1:97:6c:c8:b8:5c:6f:
6c:a4:bd:45:3c:15:0a:1b:0c:52:9c:19:5e:a8:5e:
72:d3:f3:b0:0b:74:c9:a9:46:d2:9c:c4:12:8d:7d:
9d:bd:87:d1:85:a1:26:06:e6:89:03:0b:09:ed:f3:
a8:03:55:7e:5a:fb:67:6c:88:b5:d8:c8:b3:e0:42:
a8:19:03:f9:87:45:30:22:ae:7f:cb:f6:08:be:6d:
b2:e9:cc:04:78:0c:f1:11:ea:d1:42:a3:37:be:a4:
e9:6e:26:cb:19:96:fb:3e:ae:d2:be:81:d8:ea:b8:
ec:05:4b:b6:8b:1c:e9:e7:58:64:f8:53:a9:5e:02:
87:69:0d:87:b4:e0:44:6e:05:a4:b9:6a:91:67:bc:
0b:2a:0d:1d:18:7c:f0:d7:ed:40:9c:04:17:dc:70:
d2:85:d0:10:33:dc:27:2f:78:45:98:16:b0:11:e5:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.68.0/23
IPv6:
2001:67c:8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196621
Signature Algorithm: sha256WithRSAEncryption
55:c7:67:96:24:b2:23:37:66:72:7a:cd:5f:3f:b3:90:44:01:
a1:a0:e4:eb:ef:2a:67:2d:9f:22:8f:d7:57:43:6c:41:66:05:
70:b9:95:22:47:82:87:8f:81:52:b2:6e:c9:9b:9a:a2:f4:93:
f0:f3:d6:f7:0e:63:e9:5d:b3:12:74:bd:5c:54:ed:9f:7b:1d:
b3:a7:94:c1:e0:10:27:ce:f3:cc:f0:1c:9f:d0:3e:18:b1:29:
d7:f6:54:70:85:79:e9:f2:1a:c3:fa:1e:84:3f:99:42:6f:21:
21:a2:51:e3:97:9b:97:21:e0:5e:c9:88:ca:15:b3:68:2a:c9:
4f:ad:e5:42:e7:6e:58:a8:f2:d1:a3:12:e1:91:e1:91:58:f8:
4c:9c:4f:b2:12:05:98:83:72:9c:67:21:62:87:77:eb:b9:08:
ec:e0:6c:31:8f:1a:53:48:5f:4e:a9:1f:dd:15:1b:fc:0f:f9:
5d:9e:58:56:f9:62:20:fd:21:fe:6e:ad:ba:fa:3e:d5:e9:5c:
62:8d:80:97:d6:c5:c4:bc:da:20:1d:cd:f7:c2:6f:89:61:18:
fd:df:36:68:7b:c2:e1:d0:7b:70:bd:94:53:1a:03:1a:b3:40:
40:25:ee:2e:2a:81:c6:f2:0a:46:f0:79:b7:e9:42:f7:90:be:
6d:bb:ee:8f
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzIb4hnMnoXzAqVjbs43D8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGQ0ZTMzYmU3MWQzMzlmM2JjMGNjNmRhZTY1ZTg3OTJmZjRkNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyFQRqNPqrueqedtc6XwQOLaFQOP
JgCj4YLOTixVW7qPnlynpesTe+0huqT9lR8HMeeLsqGhkyVLh3n1jgFGiDGXUm/B
Qfyy2nfLngAS62jX47GXbMi4XG9spL1FPBUKGwxSnBleqF5y0/OwC3TJqUbSnMQS
jX2dvYfRhaEmBuaJAwsJ7fOoA1V+WvtnbIi12Miz4EKoGQP5h0UwIq5/y/YIvm2y
6cwEeAzxEerRQqM3vqTpbibLGZb7Pq7SvoHY6rjsBUu2ixzp51hk+FOpXgKHaQ2H
tOBEbgWkuWqRZ7wLKg0dGHzw1+1AnAQX3HDShdAQM9wnL3hFmBawEeWhmQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEDU4zvnHTOfO8DMba5l6Hkv9NXcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2FjNjlk
Mi05Mjk5LTQ5YjAtOTFjOC0wMjMzYjdiMjZkNWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvYWM2OWQy
LTkyOTktNDliMC05MWM4LTAyMzNiN2IyNmQ1ZC8xL1FOVGpPLWNkTTU4N3dNeHRy
bVhvZVNfMDFkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBwQVEMA8EAgACMAkDBwAgAQZ8AAgwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAwANMA0GCSqGSIb3DQEBCwUAA4IBAQBVx2eWJLIj
N2Zyes1fP7OQRAGhoOTr7ypnLZ8ij9dXQ2xBZgVwuZUiR4KHj4FSsm7Jm5qi9JPw
89b3DmPpXbMSdL1cVO2fex2zp5TB4BAnzvPM8Byf0D4YsSnX9lRwhXnp8hrD+h6E
P5lCbyEholHjl5uXIeBeyYjKFbNoKslPreVC525YqPLRoxLhkeGRWPhMnE+yEgWY
g3KcZyFih3fruQjs4GwxjxpTSF9OqR/dFRv8D/ldnlhW+WIg/SH+bq26+j7V6Vxi
jYCX1sXEvNogHc33wm+JYRj93zZoe8Lh0HtwvZRTGgMas0BAJe4uKoHG8gpG8Hm3
6UL3kL5tu+6P
-----END CERTIFICATE-----
Generated at Fri May 3 06:59:44 2024 by rpki-client on console-ams.rpki-client.org