Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.cer (raw, json)
Hash identifier: +PBseVdGi0CQe4BgUXJcKqcSAtl/u6inmXiJ/OxmYWA=
Subject key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3C5644F4549A46350715ACA324D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216145
IP: 2001:67c:15cc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3c:56:44:f4:54:9a:46:35:07:15:ac:a3:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:f8:a6:80:0b:08:21:e0:f5:f9:99:24:26:
2f:e1:b4:95:0f:58:bc:49:fe:2a:3b:33:7e:2e:54:
59:9d:7c:1a:8f:a9:a1:d4:2f:da:8a:54:f5:fd:23:
7c:41:0b:70:64:9e:92:64:0d:47:72:02:21:d6:b6:
69:69:5c:0d:3f:88:29:a3:69:fb:f5:7a:c5:34:65:
a0:82:8d:00:e0:2a:d1:5d:5b:ea:f4:0b:ca:a5:9c:
48:1b:dd:7f:57:94:86:39:ca:4f:76:27:04:f8:3e:
4c:7a:07:4c:b7:34:87:c7:7d:d8:ae:15:c0:cb:a6:
bf:d1:ac:66:d9:89:9b:0c:b8:9b:b2:dd:ef:50:85:
49:46:34:8f:cf:6e:90:32:ff:6a:1c:23:63:58:d1:
eb:75:10:25:d4:62:a3:c4:be:67:f1:ec:24:a6:26:
e8:b6:e8:45:a0:fa:72:39:c3:92:3a:5f:6b:f6:ea:
1c:07:42:16:04:75:28:7c:0c:77:38:b4:63:39:aa:
99:e5:66:0e:35:4b:c1:14:71:0f:d2:10:ae:28:26:
d8:8b:df:66:34:84:62:82:73:63:95:96:63:48:bf:
bf:a9:8a:74:cc:c6:ee:fb:79:e6:3e:6f:d3:ed:eb:
17:22:c7:72:ef:c3:94:87:2f:3b:aa:b3:90:93:d9:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:15cc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216145
Signature Algorithm: sha256WithRSAEncryption
95:81:7d:7a:fe:db:95:be:fc:61:0e:e6:6b:a9:d2:61:59:be:
d0:f3:71:94:84:1e:7b:20:98:2d:81:ff:43:c6:e6:88:e8:0e:
f3:fa:8e:48:1e:a2:54:01:1d:aa:12:18:9c:22:8b:cf:3a:fd:
60:73:b8:d5:87:3d:fb:38:b7:1b:f6:d0:4c:b8:9e:7c:0e:d8:
0b:da:48:6b:dc:0c:4d:cb:34:66:fd:3e:10:78:10:d4:e3:75:
90:6c:79:f3:fb:26:6b:14:67:50:c7:d5:e7:d2:c8:66:6c:0a:
fa:de:2f:f3:39:f7:d3:27:0f:d4:1c:cd:71:3f:ea:4f:b2:39:
1c:c5:19:42:72:48:45:d4:49:97:ac:48:d7:af:f9:28:51:55:
46:d8:2f:c1:8f:24:42:5f:a2:0e:63:ef:b1:b9:77:a0:79:df:
43:2d:d1:b3:97:01:db:cb:85:67:4e:2a:bb:5e:6a:3a:6a:25:
7c:aa:ee:65:91:b4:0a:bd:26:e0:87:13:de:45:b9:bb:e5:ac:
a4:a5:2f:28:6d:0a:16:63:65:a3:0c:db:4b:0f:91:cf:b1:25:
82:75:e7:49:b6:3d:c9:38:0d:ca:02:b4:f6:da:f2:ce:ee:b1:
76:a8:78:f7:b6:dd:fc:ee:f1:e9:c2:1a:2d:e8:5e:4a:14:73:
d5:89:a9:39
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzC2zxWRPRUmkY1BxWsoyTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmY1MWFlYWY3NzRiNjMzYTQ3Zjk2MGE3MDg5YjE1YjM1YjFhNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7b4poALCCHg9fmZJCYv4bSVD1i8
Sf4qOzN+LlRZnXwaj6mh1C/ailT1/SN8QQtwZJ6SZA1HcgIh1rZpaVwNP4gpo2n7
9XrFNGWggo0A4CrRXVvq9AvKpZxIG91/V5SGOcpPdicE+D5MegdMtzSHx33YrhXA
y6a/0axm2YmbDLibst3vUIVJRjSPz26QMv9qHCNjWNHrdRAl1GKjxL5n8ewkpibo
tuhFoPpyOcOSOl9r9uocB0IWBHUofAx3OLRjOaqZ5WYONUvBFHEP0hCuKCbYi99m
NIRignNjlZZjSL+/qYp0zMbu+3nmPm/T7esXIsdy78OUhy87qrOQk9nlUwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFEL1Gur3dLYzpH+WCnCJsVs1saTLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2EzMzEx
YS1hYTlhLTQ5MDQtODhlNS0xYmE2NTE3NGJkMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYTMzMTFh
LWFhOWEtNDkwNC04OGU1LTFiYTY1MTc0YmQxZC8xL1F2VWE2dmQwdGpPa2Y1WUtj
SW14V3pXeHBNcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBXMMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNMUTANBgkqhkiG9w0BAQsFAAOCAQEAlYF9ev7blb78YQ7ma6nSYVm+0PNx
lIQeeyCYLYH/Q8bmiOgO8/qOSB6iVAEdqhIYnCKLzzr9YHO41Yc9+zi3G/bQTLie
fA7YC9pIa9wMTcs0Zv0+EHgQ1ON1kGx58/smaxRnUMfV59LIZmwK+t4v8zn30ycP
1BzNcT/qT7I5HMUZQnJIRdRJl6xI16/5KFFVRtgvwY8kQl+iDmPvsbl3oHnfQy3R
s5cB28uFZ04qu15qOmolfKruZZG0Cr0m4IcT3kW5u+WspKUvKG0KFmNlowzbSw+R
z7ElgnXnSbY9yTgNygK09tryzu6xdqh497bd/O7x6cIaLeheShRz1YmpOQ==
-----END CERTIFICATE-----
Generated at Fri May 3 13:43:31 2024 by rpki-client on console-ams.rpki-client.org