Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
File: ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer (raw, json)
Hash identifier: 51lkWKrLhreyUaCS10r/safrBSpEnO+zksL5CK00xv4=
Subject key identifier: 65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727324C4691E5FC312AECA00A87E0C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205593
IP: 2001:678:e40::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:4c:46:91:e5:fc:31:2a:ec:a0:0a:87:e0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650309a6c618c718bd369f561fff0dccbf320b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:86:89:65:37:2f:f1:fb:1c:e9:f4:b8:df:
ac:02:0a:20:cf:43:0e:0c:98:06:ce:9b:50:db:7f:
2b:18:fa:d6:fc:2c:f4:96:34:6d:55:54:2c:64:8e:
2e:25:7d:ec:e2:51:ec:35:f8:d7:e7:3f:72:a1:9e:
bc:cd:bb:c3:cf:38:d8:8b:8c:e2:49:51:f8:0f:d1:
1e:fe:99:a2:a8:cf:ff:ed:8f:cc:25:4b:17:b3:2f:
be:a2:ac:13:86:43:26:40:24:c0:62:4d:47:d5:10:
02:95:cc:3e:c6:fb:24:a3:e2:59:aa:d5:bd:7c:61:
a4:de:70:5e:c1:14:fd:45:34:37:ad:c5:c8:a4:cf:
b7:b9:96:b9:0e:3f:c5:33:32:c1:5f:44:ff:77:92:
38:f1:12:b0:9b:40:39:b5:3e:18:e1:f6:8f:c0:1b:
81:f2:cb:a0:45:01:fd:c2:65:78:e8:1e:91:0e:73:
58:89:b6:11:b6:99:f8:70:b1:9c:e6:0e:18:e5:ed:
ae:a3:a6:4a:3a:8a:96:e0:21:68:e5:7b:82:66:fd:
84:94:77:5a:47:08:47:aa:a9:b2:de:d5:b6:13:32:
dc:14:d6:32:5a:b3:bc:79:72:30:b3:8f:4d:e4:c0:
24:c5:3f:0c:8f:9b:23:ec:94:dd:2f:59:ea:41:9a:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e40::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205593
Signature Algorithm: sha256WithRSAEncryption
9a:f3:ac:5a:4c:64:42:57:7a:6c:fd:5c:3f:69:3b:0b:ab:a6:
e7:c7:22:c8:e7:26:de:b4:50:a5:99:78:64:0d:05:59:d4:db:
d1:d7:3e:d7:aa:28:2a:c2:71:75:99:b1:21:8c:b8:9d:a3:c5:
f1:74:38:71:b2:56:32:71:a8:7d:7b:fe:e3:68:ff:84:66:fc:
1b:7b:c2:5e:6a:78:3e:94:a8:84:11:73:1d:a8:31:68:c9:a9:
51:2d:9e:78:3c:85:9a:b9:d5:61:a4:48:06:9b:c9:74:99:9c:
f5:64:54:98:ab:02:e5:79:eb:70:0f:56:fd:12:00:22:47:43:
a1:46:ab:a5:5c:70:75:ab:87:f8:b2:0a:b8:52:f0:7e:c0:9b:
ef:83:8c:b8:31:a7:df:b1:59:69:eb:88:66:31:92:a4:67:32:
a7:b2:f6:95:b5:09:a7:93:bf:6d:dd:09:b2:5e:24:a7:f6:7d:
0b:30:4d:12:82:d4:7e:18:10:8a:7a:75:dd:8b:ba:e1:ee:a6:
8e:20:0a:e8:84:c4:1d:fd:53:14:d0:db:5b:20:fe:55:75:63:
8a:88:45:b7:5e:c3:1f:5e:03:14:5e:9a:29:ca:bd:2e:92:b2:
14:26:69:af:e9:6f:52:80:29:98:98:91:e2:1f:25:1f:25:23:
38:57:61:23
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzHJzJMRpHl/DEq7KAKh+DJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTAzMDlhNmM2MThjNzE4YmQzNjlmNTYxZmZmMGRjY2JmMzIwYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvuGiWU3L/H7HOn0uN+sAgogz0MO
DJgGzptQ238rGPrW/Cz0ljRtVVQsZI4uJX3s4lHsNfjX5z9yoZ68zbvDzzjYi4zi
SVH4D9Ee/pmiqM//7Y/MJUsXsy++oqwThkMmQCTAYk1H1RAClcw+xvsko+JZqtW9
fGGk3nBewRT9RTQ3rcXIpM+3uZa5Dj/FMzLBX0T/d5I48RKwm0A5tT4Y4faPwBuB
8sugRQH9wmV46B6RDnNYibYRtpn4cLGc5g4Y5e2uo6ZKOoqW4CFo5XuCZv2ElHda
RwhHqqmy3tW2EzLcFNYyWrO8eXIws49N5MAkxT8Mj5sj7JTdL1nqQZr14wIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFGUDCabGGMcYvTafVh//Dcy/MgtIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FiNjhl
NS0xNGM5LTQxMjMtODIyNi1mZTI2ZDQxY2U3Y2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWI2OGU1
LTE0YzktNDEyMy04MjI2LWZlMjZkNDFjZTdjYi8xL1pRTUpwc1lZeHhpOU5wOVdI
XzhOekw4eUMwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA5AMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMjGTANBgkqhkiG9w0BAQsFAAOCAQEAmvOsWkxkQld6bP1cP2k7C6um58ci
yOcm3rRQpZl4ZA0FWdTb0dc+16ooKsJxdZmxIYy4naPF8XQ4cbJWMnGofXv+42j/
hGb8G3vCXmp4PpSohBFzHagxaMmpUS2eeDyFmrnVYaRIBpvJdJmc9WRUmKsC5Xnr
cA9W/RIAIkdDoUarpVxwdauH+LIKuFLwfsCb74OMuDGn37FZaeuIZjGSpGcyp7L2
lbUJp5O/bd0Jsl4kp/Z9CzBNEoLUfhgQinp13Yu64e6mjiAK6ITEHf1TFNDbWyD+
VXVjiohFt17DH14DFF6aKcq9LpKyFCZpr+lvUoApmJiR4h8lHyUjOFdhIw==
-----END CERTIFICATE-----
Generated at Fri May 3 07:41:50 2024 by rpki-client on console-fra.rpki-client.org