Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
File: Qqq-41QockWGZCkvpZLj914autQ.cer (raw, json)
Hash identifier: R86vZslqZHhdAWaWYyazNlt0I/zqhrDrtZbMM8I8hOE=
Subject key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348C216BAA06D5DEDD41E66991EE623
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49696
IP: 45.94.84.0/22
IP: 2a0e:3040::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c2:16:ba:a0:6d:5d:ed:d4:1e:66:99:1e:e6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42aabee3542872458664292fa592e3f75e1abad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:14:f2:38:ce:53:0f:5d:98:52:53:2f:56:
a9:15:13:77:5f:6d:e7:01:bb:be:e2:2b:09:11:c7:
0e:76:b1:21:96:2c:d6:e5:16:fa:42:7d:be:30:5d:
b8:f8:51:63:e0:7b:ff:6a:94:72:7c:48:59:fa:a8:
1f:d5:57:a1:70:13:3d:a8:a9:5f:7f:c9:f4:e3:4f:
e8:1f:83:cb:2d:ce:30:37:61:74:03:37:70:ac:62:
e1:4b:73:59:15:ff:22:25:4b:e5:69:a7:95:a5:a1:
db:1b:57:19:84:2e:1d:bb:b8:74:7c:5d:18:d0:c6:
03:a8:ed:cd:66:b1:a2:7b:f2:af:52:15:82:ef:b8:
9e:c5:2b:c8:c4:a5:b2:2f:fe:35:81:5a:ac:0e:10:
1d:25:92:ba:9b:c1:49:ea:8a:8b:8a:97:76:a1:4c:
22:6d:a5:9b:99:eb:86:23:f6:e6:29:a3:1a:81:a7:
5d:5d:ab:73:96:fa:31:80:91:07:0c:da:fd:d3:a3:
23:9b:34:77:67:71:0e:56:af:14:44:d9:d2:cc:e7:
96:3c:b9:e6:ea:0d:1c:3e:e0:20:15:a3:f0:92:65:
b7:06:38:e2:fa:10:9a:a0:63:3c:aa:75:63:c1:91:
35:92:4d:95:25:c5:b8:2a:99:51:a3:14:68:e1:52:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.84.0/22
IPv6:
2a0e:3040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49696
Signature Algorithm: sha256WithRSAEncryption
7b:17:aa:a2:18:4d:6f:31:af:4e:cf:9d:f1:45:d3:6d:1b:a1:
a1:81:3c:f6:ce:f7:dc:1f:cb:85:7c:dd:9d:32:d7:e8:cd:ac:
de:c2:fb:c6:1c:f9:50:5f:76:be:bb:5c:99:3d:ba:4a:f0:2e:
65:25:c9:1c:d0:c7:fa:8b:64:a6:ef:22:7a:33:4b:ca:4c:9c:
e4:b5:2b:80:c5:ec:aa:74:22:d9:4f:61:c7:5a:9e:bc:1f:01:
70:23:0b:96:23:7a:8e:dd:58:9b:be:0a:8b:8e:67:f6:c8:1a:
b1:44:69:b8:a2:97:25:bc:44:1f:76:51:54:c4:7c:bc:69:d2:
e6:1c:c0:75:c8:69:c9:e9:43:1f:51:e7:3a:65:76:5d:28:e5:
27:e6:a0:ad:52:5a:86:46:83:89:44:5f:dc:0a:e2:86:31:6b:
ff:b9:a3:48:63:79:21:b4:dc:4d:eb:6a:cf:b0:8e:c0:fa:41:
6d:b8:7b:0a:a0:53:cc:46:f1:34:4b:b2:03:ac:bd:83:94:be:
e3:76:f9:a8:d1:b2:5f:af:0c:fb:36:c4:ca:3f:5c:5a:c0:cf:
98:d4:75:96:60:f8:2d:83:61:9b:9d:74:18:48:a8:7a:19:ea:
a9:7e:39:12:4a:c5:42:4f:c1:24:01:0d:26:3c:4e:b6:cc:c7:
d5:38:59:97
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDSMIWuqBtXe3UHmaZHuYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmFhYmVlMzU0Mjg3MjQ1ODY2NDI5MmZhNTkyZTNmNzVlMWFiYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx8U8jjOUw9dmFJTL1apFRN3X23n
Abu+4isJEccOdrEhlizW5Rb6Qn2+MF24+FFj4Hv/apRyfEhZ+qgf1VehcBM9qKlf
f8n040/oH4PLLc4wN2F0AzdwrGLhS3NZFf8iJUvlaaeVpaHbG1cZhC4du7h0fF0Y
0MYDqO3NZrGie/KvUhWC77iexSvIxKWyL/41gVqsDhAdJZK6m8FJ6oqLipd2oUwi
baWbmeuGI/bmKaMagaddXatzlvoxgJEHDNr906MjmzR3Z3EOVq8URNnSzOeWPLnm
6g0cPuAgFaPwkmW3Bjji+hCaoGM8qnVjwZE1kk2VJcW4KplRoxRo4VLdIwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEKqvuNUKHJFhmQpL6WS4/deGrrUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2M5ODlh
Yi04NDBjLTQwMjMtYjg0Mi1hYjNiZGY4ZTVjNDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvYzk4OWFi
LTg0MGMtNDAyMy1iODQyLWFiM2JkZjhlNWM0OC8xL1FxcS00MVFvY2tXR1pDa3Zw
WkxqOTE0YXV0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLV5UMA0EAgACMAcDBQAqDjBAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDCIDANBgkqhkiG9w0BAQsFAAOCAQEAexeqohhNbzGv
Ts+d8UXTbRuhoYE89s733B/LhXzdnTLX6M2s3sL7xhz5UF92vrtcmT26SvAuZSXJ
HNDH+otkpu8iejNLykyc5LUrgMXsqnQi2U9hx1qevB8BcCMLliN6jt1Ym74Ki45n
9sgasURpuKKXJbxEH3ZRVMR8vGnS5hzAdchpyelDH1HnOmV2XSjlJ+agrVJahkaD
iURf3ArihjFr/7mjSGN5IbTcTetqz7COwPpBbbh7CqBTzEbxNEuyA6y9g5S+43b5
qNGyX68M+zbEyj9cWsDPmNR1lmD4LYNhm510GEioehnqqX45EkrFQk/BJAENJjxO
tszH1ThZlw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:08:44 2024 by rpki-client on console-fra.rpki-client.org