Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
File: fQtE5JJUnht9pTLIDDSIUMWkToA.cer (raw, json)
Hash identifier: 5GO6dUza7zec7SM0RS5Exm9o8COq6U6aCYkDE+QJVX4=
Subject key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79356B1A8450383A917BEF90AFF2BCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.83.40.0/22
IP: 2a05:9800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:56:b1:a8:45:03:83:a9:17:be:f9:0a:ff:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:da:63:40:10:0d:fa:72:0d:16:6d:a8:ae:
cc:0b:c1:01:69:94:80:b9:88:fa:3a:17:b4:07:e6:
75:12:98:14:a0:a3:b9:3a:6b:67:25:e2:04:23:c6:
1a:b9:61:bc:91:a8:9f:6f:29:02:69:7f:ec:00:58:
b5:c9:69:41:50:35:54:fc:26:72:8b:97:0b:ac:29:
df:64:b0:eb:b3:32:83:f1:e0:6f:b0:20:81:e7:6a:
26:01:74:26:3a:ec:ee:17:e4:56:14:d7:b4:6b:a6:
27:c0:2f:ac:a6:c0:08:d0:77:1e:30:37:1c:fe:e5:
78:a1:6b:a0:2f:df:5a:bf:a3:67:33:5e:88:86:e4:
cf:7a:0e:ed:c8:9f:40:a8:15:0f:d0:92:4f:68:01:
58:57:c4:17:c0:83:4d:a9:de:fa:a0:4b:8e:52:a1:
74:d2:bc:89:d7:29:e8:71:14:06:74:0b:42:f5:e5:
0e:b1:33:81:0a:cf:aa:94:ac:c5:ce:06:35:32:29:
6d:4b:03:7d:c3:5d:5d:29:c8:47:2a:9d:5c:f8:dd:
d0:e3:1c:68:9f:4c:14:20:72:43:eb:7b:2b:f2:11:
32:c7:22:21:af:25:26:74:c7:b5:ad:4a:3e:3e:9c:
06:f8:81:cb:37:65:da:8b:aa:19:4c:82:a1:ba:78:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.40.0/22
IPv6:
2a05:9800::/29
Signature Algorithm: sha256WithRSAEncryption
5f:70:7a:40:c6:39:9a:c0:db:b0:93:27:f4:e5:45:1e:ee:1f:
61:71:51:7c:fd:ee:f2:d9:0e:1e:47:0e:a2:88:f2:20:00:dd:
cf:48:8e:a1:db:c6:43:4f:90:f1:73:b3:34:36:a8:85:85:f3:
57:ce:8c:27:15:48:58:74:f6:65:10:1e:01:ed:98:c2:e2:ae:
72:0b:2d:48:22:0c:c7:9f:1e:31:1f:14:e7:be:c8:6b:bf:a7:
a0:34:db:ff:80:ba:77:dd:a0:2e:a1:96:46:80:b5:a8:72:4d:
95:3f:54:df:a2:0c:1e:bd:50:af:79:9e:c2:8f:c1:fa:2f:77:
0c:b9:74:c0:fd:a1:a8:ca:ef:b1:de:64:94:ce:fe:1d:bf:89:
b9:ce:ed:0b:3b:00:51:5a:3d:b3:30:29:d9:3a:7d:09:c1:04:
68:05:59:36:f3:a0:28:37:dd:ac:e3:54:e0:f6:a9:48:ca:fb:
eb:f0:ba:80:d3:2b:ac:f9:d7:ab:77:6b:9d:c2:ac:42:23:76:
c2:4c:53:42:cd:4a:a8:79:ea:7d:32:ea:e1:a1:1c:a5:2a:e0:
80:06:69:b2:75:1f:2e:92:2a:7a:ba:fe:71:13:7e:4a:e9:ce:
2a:f0:63:e2:ed:6c:8e:b1:b8:6d:1d:fa:e7:4a:0b:d5:21:6d:
e8:46:00:ec
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzHk1axqEUDg6kXvvkK/yvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDBiNDRlNDkyNTQ5ZTFiN2RhNTMyYzgwYzM0ODg1MGM1YTQ0ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g7aY0AQDfpyDRZtqK7MC8EBaZSA
uYj6Ohe0B+Z1EpgUoKO5OmtnJeIEI8YauWG8kaifbykCaX/sAFi1yWlBUDVU/CZy
i5cLrCnfZLDrszKD8eBvsCCB52omAXQmOuzuF+RWFNe0a6YnwC+spsAI0HceMDcc
/uV4oWugL99av6NnM16IhuTPeg7tyJ9AqBUP0JJPaAFYV8QXwINNqd76oEuOUqF0
0ryJ1ynocRQGdAtC9eUOsTOBCs+qlKzFzgY1MiltSwN9w11dKchHKp1c+N3Q4xxo
n0wUIHJD63sr8hEyxyIhryUmdMe1rUo+PpwG+IHLN2Xai6oZTIKhuni2OQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFH0LROSSVJ4bfaUyyAw0iFDFpE6AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2I5MjMx
Zi1iM2RmLTQwMTItOTZkNy03MjA0YjgxMTI1MGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvYjkyMzFm
LWIzZGYtNDAxMi05NmQ3LTcyMDRiODExMjUwZi8xL2ZRdEU1SkpVbmh0OXBUTElE
RFNJVU1Xa1RvQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVMoMA0EAgACMAcDBQMqBZgAMA0GCSqGSIb3
DQEBCwUAA4IBAQBfcHpAxjmawNuwkyf05UUe7h9hcVF8/e7y2Q4eRw6iiPIgAN3P
SI6h28ZDT5Dxc7M0NqiFhfNXzownFUhYdPZlEB4B7ZjC4q5yCy1IIgzHnx4xHxTn
vshrv6egNNv/gLp33aAuoZZGgLWock2VP1TfogwevVCveZ7Cj8H6L3cMuXTA/aGo
yu+x3mSUzv4dv4m5zu0LOwBRWj2zMCnZOn0JwQRoBVk286AoN92s41Tg9qlIyvvr
8LqA0yus+derd2udwqxCI3bCTFNCzUqoeep9MurhoRylKuCABmmydR8ukip6uv5x
E35K6c4q8GPi7WyOsbhtHfrnSgvVIW3oRgDs
-----END CERTIFICATE-----
Generated at Fri May 3 08:08:26 2024 by rpki-client on console-fra.rpki-client.org