Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.cer (raw, json)
Hash identifier: bW9GdmQ6c+R+6mEqQJmRBhn4cn2swq3NQLUB9f+mdjM=
Subject key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266AE52CD15B1822EB959283BE0934AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206888
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e5:2c:d1:5b:18:22:eb:95:92:83:be:09:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41b89bd3736ce4f008473965fdae4074567cda03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:66:7b:77:2a:2c:93:5a:4c:1e:fe:e2:ea:
41:05:2f:20:4f:6e:63:0d:bf:49:4b:d9:bb:cf:f6:
45:32:a1:af:f3:ed:9f:11:eb:de:c2:4f:fc:3c:f5:
d9:32:05:6c:a4:21:49:60:4f:ea:3d:26:ab:5e:67:
52:e9:00:0f:87:e8:bb:bb:ea:b9:ee:45:cc:35:9b:
1b:a2:f2:b6:7a:d3:dc:b4:91:a1:35:cf:2f:c5:e8:
47:f6:64:0d:90:5b:d6:26:f2:8a:49:c9:fa:bd:67:
11:15:f6:09:e9:01:cf:e1:96:02:0a:8f:0d:18:18:
56:bf:b7:53:f7:19:70:19:32:d9:be:cf:f4:31:36:
38:50:73:38:80:11:08:0d:fe:e6:53:a7:de:ab:67:
70:e0:91:28:01:bc:75:e1:f3:bd:04:e4:76:8b:90:
bf:d3:c3:2e:ab:4e:e3:a6:fa:18:3d:2a:07:55:70:
47:af:09:9c:de:60:3e:f8:be:45:68:a5:0c:31:56:
27:13:e4:27:cc:c5:fe:59:3d:c0:bb:5a:6d:0e:db:
36:de:a7:1b:27:18:6f:b6:eb:db:41:c5:ab:2b:90:
fb:93:7f:3b:0f:fc:d1:73:5b:1a:3c:f9:12:fa:01:
f8:72:ec:ac:f7:a4:36:0c:b4:c0:6b:d1:8d:27:3b:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206888
Signature Algorithm: sha256WithRSAEncryption
a8:5a:d2:16:fb:d7:53:fb:38:9b:c4:2b:37:6f:0d:d6:97:70:
62:97:02:8a:9f:94:e7:e8:82:5d:35:f4:58:2f:96:7f:4c:b2:
fc:f0:c8:61:01:32:04:f7:dc:14:cf:fc:38:2a:fb:9d:5e:4b:
75:39:be:45:79:3f:1a:2e:1b:d7:04:73:bd:71:93:2f:7e:ee:
ee:94:5c:22:2b:92:88:13:b2:cf:85:d1:a7:38:a1:10:33:37:
bc:68:6d:6f:26:87:37:4a:3d:54:70:27:01:78:06:d2:6c:13:
39:e2:8b:ad:bd:cd:9f:e8:5f:3e:d0:59:9e:e1:88:de:5e:ac:
bc:b1:05:6b:56:3b:ca:ca:7e:a8:d5:7b:cc:8e:82:ba:3e:98:
21:4f:c4:33:21:6b:cb:9b:d5:5e:ee:f5:b8:f5:4c:b1:6c:9f:
e4:1c:64:ff:15:5e:84:41:9c:6f:a7:3a:19:01:55:2f:8c:a9:
19:4f:68:fa:74:9e:47:99:a8:38:42:a0:54:2e:c2:e4:0e:41:
59:c9:62:4e:e6:23:7b:37:be:f9:98:71:be:16:d5:87:be:06:
21:c0:fe:b6:cb:78:4a:4e:6a:87:78:91:8a:61:fe:31:29:8d:
11:6a:72:5b:0e:ba:a3:c2:fa:bb:b4:34:26:d8:79:f6:4b:fb:
47:a3:72:55
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQmauUs0VsYIuuVkoO+CTSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWI4OWJkMzczNmNlNGYwMDg0NzM5NjVmZGFlNDA3NDU2N2NkYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qFme3cqLJNaTB7+4upBBS8gT25j
Db9JS9m7z/ZFMqGv8+2fEevewk/8PPXZMgVspCFJYE/qPSarXmdS6QAPh+i7u+q5
7kXMNZsbovK2etPctJGhNc8vxehH9mQNkFvWJvKKScn6vWcRFfYJ6QHP4ZYCCo8N
GBhWv7dT9xlwGTLZvs/0MTY4UHM4gBEIDf7mU6feq2dw4JEoAbx14fO9BOR2i5C/
08Muq07jpvoYPSoHVXBHrwmc3mA++L5FaKUMMVYnE+QnzMX+WT3Au1ptDts23qcb
JxhvtuvbQcWrK5D7k387D/zRc1saPPkS+gH4cuys96Q2DLTAa9GNJzu/2QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEG4m9NzbOTwCEc5Zf2uQHRWfNoDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzg4ZTFl
ZS1iN2MyLTQ1MjAtYTg0OS0zMGU5ZmZkODI3NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvODhlMWVl
LWI3YzItNDUyMC1hODQ5LTMwZTlmZmQ4Mjc1OS8xL1FiaWIwM05zNVBBSVJ6bGxf
YTVBZEZaODJnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMoKDANBgkqhkiG9w0BAQsFAAOCAQEAqFrSFvvXU/s4
m8QrN28N1pdwYpcCip+U5+iCXTX0WC+Wf0yy/PDIYQEyBPfcFM/8OCr7nV5LdTm+
RXk/Gi4b1wRzvXGTL37u7pRcIiuSiBOyz4XRpzihEDM3vGhtbyaHN0o9VHAnAXgG
0mwTOeKLrb3Nn+hfPtBZnuGI3l6svLEFa1Y7ysp+qNV7zI6Cuj6YIU/EMyFry5vV
Xu71uPVMsWyf5Bxk/xVehEGcb6c6GQFVL4ypGU9o+nSeR5moOEKgVC7C5A5BWcli
TuYjeze++ZhxvhbVh74GIcD+tst4Sk5qh3iRimH+MSmNEWpyWw66o8L6u7Q0Jth5
9kv7R6NyVQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:06 2025 by rpki-client