Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer (raw, json)
Hash identifier: 9Ef2J74ex8s1mKbt4C4TvtajE6oweRH2WfLDYXC8qfE=
Subject key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EBE9DC9FB497D2E948BAD3DC9936280B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Apr 2024 16:49:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.211.87.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:9d:c9:fb:49:7d:2e:94:8b:ad:3d:c9:93:62:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 16:49:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=419a82be1e16422f9a88549af6d542481d691ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:92:80:68:3e:ec:fb:ae:91:dd:01:7c:dd:
a7:7a:78:32:60:21:b0:3b:12:99:26:99:af:86:a3:
09:7c:1b:4e:ef:6e:00:86:02:07:18:63:2f:92:9d:
94:e3:a4:b1:56:af:15:4e:4e:c8:1a:f6:ed:79:ed:
d5:f4:c0:b5:e1:f3:15:56:b8:a7:87:56:71:ba:e8:
39:3f:6b:bc:8a:90:55:05:43:74:83:48:d1:fa:7f:
46:15:ee:69:7f:76:d5:46:25:e6:cd:46:8c:25:86:
8c:fc:0c:3c:9e:68:e9:f4:fb:cd:29:94:37:21:66:
02:f5:af:a9:01:fc:72:8d:5f:70:33:17:93:51:9f:
a8:55:62:5b:5d:40:a1:b3:50:33:ca:5d:d7:da:29:
1d:d4:d9:5b:fb:f0:d0:7a:42:14:86:fe:73:c8:fa:
ae:87:bd:ef:20:5c:d5:64:18:e5:95:aa:be:01:37:
df:d6:01:29:c6:b3:a0:36:85:4e:ee:17:4a:70:30:
a3:cd:0b:19:eb:7d:21:59:5b:bb:ee:34:03:40:5c:
00:95:d1:d1:f8:e9:7a:90:fc:93:95:a6:ca:73:67:
5f:46:bc:78:fd:c0:19:27:2e:76:8c:9d:cd:af:9c:
88:78:d1:b9:22:36:38:d3:e9:e5:49:ae:6f:a9:cb:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.87.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cb:61:6d:ed:33:53:40:eb:12:22:f9:15:68:d1:d7:86:46:
de:0b:90:b5:e3:27:51:75:76:e6:e1:50:67:1c:05:29:c6:da:
2a:d8:18:8d:e6:ba:98:aa:81:d3:73:1c:d6:f8:2f:52:ec:77:
d7:f2:32:4e:9a:24:0f:c3:85:ce:27:5e:7d:e0:38:41:19:46:
16:9d:99:51:0b:82:66:83:3e:1a:01:b6:c1:89:d2:c3:1f:67:
0e:db:cc:52:d1:fc:7d:d6:b4:f5:d5:69:b6:7f:65:f8:ba:cd:
d7:a9:0c:dd:15:e4:8b:54:d2:10:a9:a5:49:26:62:e2:c4:51:
40:15:fd:a2:0c:9a:c5:e0:20:47:59:36:fb:47:f3:c8:6f:3c:
4d:6b:77:c1:4c:9a:54:54:e4:e7:c7:dc:47:06:d3:10:f9:81:
62:d5:c3:d1:4c:e1:39:59:00:df:f8:0b:2f:8f:94:53:0d:3f:
06:b9:da:98:72:c0:2c:d8:71:e7:99:94:9f:76:94:b0:aa:24:
51:ef:9b:01:e2:bf:68:f8:e6:54:5a:a2:1f:67:21:72:5b:5f:
37:73:03:a9:6e:65:e8:84:82:53:bf:c3:bf:7c:49:c7:43:d4:
df:ae:c9:99:4b:a4:35:e9:d8:a2:63:68:71:cd:00:13:be:e3:
10:6d:e7:be
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY6+ncn7SX0ulIutPcmTYoC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA4MTY0OTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTlhODJiZTFlMTY0MjJmOWE4ODU0OWFmNmQ1NDI0ODFkNjkxYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxqSgGg+7Puukd0BfN2nengyYCGw
OxKZJpmvhqMJfBtO724AhgIHGGMvkp2U46SxVq8VTk7IGvbtee3V9MC14fMVVrin
h1Zxuug5P2u8ipBVBUN0g0jR+n9GFe5pf3bVRiXmzUaMJYaM/Aw8nmjp9PvNKZQ3
IWYC9a+pAfxyjV9wMxeTUZ+oVWJbXUChs1Azyl3X2ikd1Nlb+/DQekIUhv5zyPqu
h73vIFzVZBjllaq+ATff1gEpxrOgNoVO7hdKcDCjzQsZ630hWVu77jQDQFwAldHR
+Ol6kPyTlabKc2dfRrx4/cAZJy52jJ3Nr5yIeNG5IjY40+nlSa5vqctC0QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEGagr4eFkIvmohUmvbVQkgdaRrJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzQwMDNi
ZC00OTRkLTQyNDYtYmU5NC1jODY1OWY3NmEyZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvNDAwM2Jk
LTQ5NGQtNDI0Ni1iZTk0LWM4NjU5Zjc2YTJlYS8xL1FacUN2aDRXUWktYWlGU2E5
dFZDU0IxcEdzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9NXMA0GCSqGSIb3DQEBCwUAA4IBAQA1y2Ft
7TNTQOsSIvkVaNHXhkbeC5C14ydRdXbm4VBnHAUpxtoq2BiN5rqYqoHTcxzW+C9S
7HfX8jJOmiQPw4XOJ1594DhBGUYWnZlRC4Jmgz4aAbbBidLDH2cO28xS0fx91rT1
1Wm2f2X4us3XqQzdFeSLVNIQqaVJJmLixFFAFf2iDJrF4CBHWTb7R/PIbzxNa3fB
TJpUVOTnx9xHBtMQ+YFi1cPRTOE5WQDf+Asvj5RTDT8GudqYcsAs2HHnmZSfdpSw
qiRR75sB4r9o+OZUWqIfZyFyW183cwOpbmXohIJTv8O/fEnHQ9TfrsmZS6Q16dii
Y2hxzQATvuMQbee+
-----END CERTIFICATE-----
Generated at Fri May 3 07:33:45 2024 by rpki-client on console-fra.rpki-client.org