Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
File: aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer (raw, json)
Hash identifier: wR4uHISLPHyWcPeaNS9Tm00bynWRltw+fG2TqXgPQ0c=
Subject key identifier: 6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2941AF3B10814BE160E12B0B784E85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.247.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:41:af:3b:10:81:4b:e1:60:e1:2b:0b:78:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:df:0a:c4:e6:ab:38:aa:97:e3:77:a8:6c:
92:df:b9:f2:e8:26:6d:9c:bd:12:2e:52:59:12:b6:
48:1d:14:f7:a2:e7:22:a1:9e:b6:2e:d0:52:3e:89:
fe:67:7d:82:fd:05:e4:dd:11:ef:35:88:6e:f9:0b:
8d:71:3d:2b:04:97:2a:d9:46:d6:cd:3c:49:81:c7:
a0:57:1b:70:07:0e:30:bb:d8:ab:42:70:0c:11:6e:
f8:b4:df:63:2c:dd:68:2d:ef:ee:0e:49:4d:e4:da:
7f:6a:2f:03:56:0d:72:34:d0:16:67:4a:68:3b:81:
e5:56:a5:9d:89:d5:d7:c6:1d:55:7d:cf:46:43:61:
04:96:05:94:d1:6d:de:9b:16:df:a0:b0:46:db:53:
36:db:91:13:97:0e:0c:79:b8:b5:9c:eb:15:e6:d4:
f2:0d:dd:cb:45:46:d4:3e:43:bf:83:7e:90:0e:f4:
cc:cf:94:96:a2:57:5a:ad:b2:3e:fe:89:0e:0a:50:
fe:e5:46:08:da:c2:b7:b0:5f:e7:de:62:58:64:6c:
c4:08:9b:51:97:b9:7a:fb:d5:13:57:75:4e:56:88:
5f:4d:0c:b8:30:5f:72:7a:87:30:58:a9:ec:77:2b:
35:4a:62:ac:50:a7:21:f0:f5:95:56:7e:b6:1d:64:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.24.0/22
Signature Algorithm: sha256WithRSAEncryption
14:4f:d9:31:ec:05:c7:dc:98:3f:bb:37:88:c3:43:30:e9:1e:
4c:72:a6:dd:e3:fd:b7:85:77:50:9f:35:29:74:22:e4:2c:6d:
c4:7f:ed:d8:86:32:2b:6f:75:2d:40:38:6d:00:c5:b0:f6:90:
e5:1d:20:2b:94:ae:9b:c6:fa:fb:57:4c:9b:a1:65:90:f8:e2:
10:e7:ae:a6:25:a3:06:8d:d2:b9:c3:3e:6e:f5:0f:6f:78:a0:
0f:69:1d:78:91:6c:24:2f:df:b5:97:6d:07:82:2a:68:e5:2c:
76:ba:3e:f3:6e:5a:2e:d6:e0:a6:de:f3:77:9b:3f:d1:45:e1:
4f:fc:07:9c:fd:52:48:5a:e8:de:b3:82:de:55:52:7f:f2:5c:
35:57:1b:c5:9e:ca:a5:71:27:ee:fd:07:5b:4a:9d:f5:f1:cf:
37:56:d7:36:e2:ae:ef:53:e4:d2:e5:46:4b:ff:55:9a:6a:23:
51:ee:0c:23:11:f4:e4:02:00:a8:95:9e:62:eb:4b:5d:47:af:
e4:3e:f1:f8:77:6f:7c:41:c6:89:22:11:62:95:64:fc:7c:30:
cf:b5:95:a9:23:19:ed:39:cf:58:49:86:14:f9:54:23:8f:d3:
0d:a1:26:5c:4d:ac:20:0a:4f:54:de:06:0c:6a:94:6e:1c:6f:
0c:ed:57:a3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzKKUGvOxCBS+Fg4SsLeE6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWE0NWY4Y2Y0NjNkYzkyYmIyNDMxMzU5YjhiNmU1ZmZkOGY3MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFTfCsTmqziql+N3qGyS37ny6CZt
nL0SLlJZErZIHRT3oucioZ62LtBSPon+Z32C/QXk3RHvNYhu+QuNcT0rBJcq2UbW
zTxJgcegVxtwBw4wu9irQnAMEW74tN9jLN1oLe/uDklN5Np/ai8DVg1yNNAWZ0po
O4HlVqWdidXXxh1Vfc9GQ2EElgWU0W3emxbfoLBG21M225ETlw4Mebi1nOsV5tTy
Dd3LRUbUPkO/g36QDvTMz5SWoldarbI+/okOClD+5UYI2sK3sF/n3mJYZGzECJtR
l7l6+9UTV3VOVohfTQy4MF9yeocwWKnsdys1SmKsUKch8PWVVn62HWR/8QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGqkX4z0Y9ySuyQxNZuLbl/9j3GcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2ZlNTgx
Ny1hNDgyLTQyZGQtYTdmNi04Yzk5NDgxZWM2YzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZmU1ODE3
LWE0ODItNDJkZC1hN2Y2LThjOTk0ODFlYzZjNC8xL2FxUmZqUFJqM0pLN0pERTFt
NHR1WF8yUGNady5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufcYMA0GCSqGSIb3DQEBCwUAA4IBAQAUT9kx
7AXH3Jg/uzeIw0Mw6R5Mcqbd4/23hXdQnzUpdCLkLG3Ef+3YhjIrb3UtQDhtAMWw
9pDlHSArlK6bxvr7V0yboWWQ+OIQ566mJaMGjdK5wz5u9Q9veKAPaR14kWwkL9+1
l20Hgipo5Sx2uj7zblou1uCm3vN3mz/RReFP/Aec/VJIWujes4LeVVJ/8lw1VxvF
nsqlcSfu/QdbSp318c83Vtc24q7vU+TS5UZL/1WaaiNR7gwjEfTkAgColZ5i60td
R6/kPvH4d298QcaJIhFilWT8fDDPtZWpIxntOc9YSYYU+VQjj9MNoSZcTawgCk9U
3gYMapRuHG8M7Vej
-----END CERTIFICATE-----
Generated at Fri May 3 07:09:02 2024 by rpki-client on console-ams.rpki-client.org