Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
File: QNiN23rtct6j_41pztZTGlJ5Sqc.cer (raw, json)
Hash identifier: FOmoyI8ARUL/tjI0wKHu13J1WVk11BAl4yp7teNVk3g=
Subject key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D66368F64879BC32F82C35F3BE3B9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211786
IP: 193.108.200.0/24
IP: 2a10:92c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:63:68:f6:48:79:bc:32:f8:2c:35:f3:be:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:91:24:9b:0a:86:f6:63:f8:45:e2:0b:73:
c5:56:27:ee:98:40:b1:24:72:d2:5e:00:17:1c:e5:
a4:8c:b2:7f:39:61:b4:a6:b8:78:89:4d:20:11:aa:
22:08:9f:47:6a:0b:f1:6e:b9:2e:f5:91:62:a1:a8:
0e:6a:3d:82:6a:27:f9:29:f1:a6:a3:72:cf:aa:56:
29:1d:28:3d:e6:7b:3f:8e:d2:a8:35:10:b0:28:3b:
11:09:51:2e:d4:2e:0f:25:bc:1f:84:e3:31:2b:56:
37:6f:a0:8e:d9:8d:d9:a7:eb:cc:80:62:c7:b9:d7:
fa:d7:da:29:b5:19:91:8a:1e:41:a8:be:f8:f1:27:
57:0f:63:22:46:4e:b6:db:db:67:57:13:f8:0f:60:
24:97:a5:87:d5:e0:44:85:7d:67:a6:8a:54:e9:ea:
c1:25:1c:ca:61:67:34:e6:41:e8:f8:a3:64:0a:c1:
fb:f3:fe:08:0e:b0:3c:6f:3a:82:37:33:54:0d:85:
a6:63:a1:95:aa:e5:bb:a6:e3:c0:b0:56:5a:e6:c7:
24:76:4c:6f:50:e9:79:a6:e1:99:24:bb:20:90:a5:
3c:bb:4b:78:ae:ad:ea:92:9d:22:18:09:d2:6d:55:
42:7d:8f:82:2f:ad:f6:ef:fb:27:89:47:5a:45:00:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.200.0/24
IPv6:
2a10:92c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211786
Signature Algorithm: sha256WithRSAEncryption
67:fb:07:d7:29:e3:6d:7a:9a:9d:b5:7b:4c:28:84:60:fa:fb:
f2:3e:0a:52:7b:07:3e:a5:c7:e8:1d:b3:de:16:39:d7:46:fb:
bb:75:57:5e:61:d8:c7:ec:e8:39:ab:0c:75:dd:34:38:91:1a:
3c:80:ba:a8:48:35:00:1f:f7:29:f8:f4:ae:d4:2f:a4:8b:e6:
1c:6d:de:75:76:66:3e:26:06:e4:d4:97:6f:fc:a7:e7:1a:97:
a7:cb:6a:e8:f4:f0:5d:8c:b0:4a:f1:55:41:03:cd:4d:9f:c9:
22:ff:c2:e8:a1:58:84:0e:dd:c3:64:67:0b:d3:5e:48:b2:4b:
cd:17:2d:e9:25:ab:52:92:dd:bd:be:5d:33:81:a9:fd:a0:67:
41:16:75:f2:ed:d1:3e:df:a5:be:77:f6:81:81:01:35:07:e1:
50:5f:10:74:2a:6e:16:21:22:76:d0:f2:4b:8d:b6:6e:9c:bd:
55:72:9b:9c:a5:4e:d2:e1:8e:90:49:cc:23:8c:20:25:f9:c7:
b5:98:1a:36:51:8f:a5:fe:eb:b4:7e:00:70:94:59:02:27:c5:
28:df:d8:8d:93:c7:13:45:0b:32:b5:86:ef:8d:23:ae:0f:a1:
dc:10:90:34:af:6a:58:5a:aa:ec:14:fc:59:67:f9:17:87:9a:
db:9f:c0:ca
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1mNo9kh5vDL4LDXzvjudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGQ4OGRkYjdhZWQ3MmRlYTNmZjhkNjljZWQ2NTMxYTUyNzk0YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkeRJJsKhvZj+EXiC3PFVifumECx
JHLSXgAXHOWkjLJ/OWG0prh4iU0gEaoiCJ9Hagvxbrku9ZFioagOaj2Caif5KfGm
o3LPqlYpHSg95ns/jtKoNRCwKDsRCVEu1C4PJbwfhOMxK1Y3b6CO2Y3Zp+vMgGLH
udf619optRmRih5BqL748SdXD2MiRk6229tnVxP4D2Akl6WH1eBEhX1npopU6erB
JRzKYWc05kHo+KNkCsH78/4IDrA8bzqCNzNUDYWmY6GVquW7puPAsFZa5sckdkxv
UOl5puGZJLsgkKU8u0t4rq3qkp0iGAnSbVVCfY+CL6327/sniUdaRQCX0QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEDYjdt67XLeo/+Nac7WUxpSeUqnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2ZlNDVk
ZS1iNDYzLTQ0M2QtYjdkZS0zN2EyNGUwODFmNjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvZmU0NWRl
LWI0NjMtNDQzZC1iN2RlLTM3YTI0ZTA4MWY2OC8xL1FOaU4yM3J0Y3Q2al80MXB6
dFpUR2xKNVNxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwWzIMA0EAgACMAcDBQMqEJLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7SjANBgkqhkiG9w0BAQsFAAOCAQEAZ/sH1ynjbXqa
nbV7TCiEYPr78j4KUnsHPqXH6B2z3hY510b7u3VXXmHYx+zoOasMdd00OJEaPIC6
qEg1AB/3Kfj0rtQvpIvmHG3edXZmPiYG5NSXb/yn5xqXp8tq6PTwXYywSvFVQQPN
TZ/JIv/C6KFYhA7dw2RnC9NeSLJLzRct6SWrUpLdvb5dM4Gp/aBnQRZ18u3RPt+l
vnf2gYEBNQfhUF8QdCpuFiEidtDyS422bpy9VXKbnKVO0uGOkEnMI4wgJfnHtZga
NlGPpf7rtH4AcJRZAifFKN/YjZPHE0ULMrWG740jrg+h3BCQNK9qWFqq7BT8WWf5
F4ea25/Ayg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:36 2025 by rpki-client