Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.cer (raw, json)
Hash identifier: Rpwq5Oo2m3YchMs+yRphMlxscab88ZjSH9IEqaSaAw8=
Subject key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50119D5AD2DF4D8FEEE0C3F5A90C1C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42659
IP: 194.110.136.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:d5:ad:2d:f4:d8:fe:ee:0c:3f:5a:90:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:62:f4:5c:60:4a:69:61:4e:4f:2c:98:f1:
5c:98:3f:5f:a0:17:b0:38:a3:80:d5:5b:10:39:b3:
3e:e2:90:04:b6:6f:da:d1:52:36:d4:b4:0e:11:1b:
b7:d6:c2:f1:32:e3:d0:a4:2b:5c:b2:ef:2f:57:47:
ab:03:25:63:35:46:4a:c1:b5:23:5b:b1:13:99:8a:
31:0f:d9:ea:9d:4c:65:7e:ab:71:0c:df:32:1e:a6:
03:4e:03:0c:a4:26:83:ab:f0:34:2d:e9:ff:29:72:
68:4c:5e:7a:34:ed:0c:04:97:6e:dd:25:86:c3:f4:
93:32:0f:a6:b1:16:0c:6d:6b:47:95:7b:64:46:81:
9f:2d:19:e0:22:14:04:c2:9c:da:a8:39:e5:7a:a7:
bc:80:22:9c:a5:67:7d:8f:67:65:16:c3:be:7b:77:
5c:65:6f:b1:bc:02:12:5d:2e:0c:d8:64:df:0a:08:
9a:96:40:75:c6:70:d5:10:ab:f5:af:50:38:54:a1:
9c:17:ec:bb:f3:8c:af:2d:bf:4b:45:ef:1e:62:1a:
5b:5a:28:b9:74:5f:20:e0:72:bb:f2:63:e4:66:cf:
a5:52:05:3b:7f:c7:7e:b0:c3:0e:24:f6:53:72:2d:
06:dd:68:dc:6b:3e:b7:6b:78:2e:a6:d3:37:a6:da:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.136.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42659
Signature Algorithm: sha256WithRSAEncryption
aa:74:a8:76:a9:a2:c2:20:b2:27:cb:42:44:73:2f:49:3b:bf:
ec:e8:89:65:51:35:e4:a8:6a:80:d6:81:fd:bb:3b:6f:8c:1c:
5f:1b:0d:34:45:d4:af:d6:7b:30:b5:34:18:33:47:14:74:5a:
54:61:60:44:c3:83:e2:cf:17:1d:15:e9:89:f0:58:c5:9e:d6:
c4:9d:ba:df:a7:f7:34:e9:28:25:d0:ae:28:6c:aa:86:34:44:
d8:64:c4:0c:1d:53:0a:c3:48:05:7b:ba:ed:5e:52:4e:de:b1:
72:af:e9:43:09:78:f4:2e:82:95:a3:cd:d3:df:89:d1:b3:c8:
34:60:26:41:13:b4:3a:69:d5:4f:bd:88:14:ab:c0:11:57:10:
37:a7:67:08:30:29:98:8f:c1:70:60:d7:9d:c8:21:e3:7d:cf:
8c:67:3e:b7:ee:1b:48:94:2d:ef:fe:5d:be:2c:02:1d:ee:78:
1f:2a:92:af:e5:c2:54:f3:5b:72:3b:cf:f2:c9:da:2d:a9:79:
7a:d2:ee:4c:a7:17:7b:29:79:6a:18:9f:c7:59:ed:39:b9:97:
c0:55:ce:cd:1c:06:dd:92:0f:34:94:db:eb:98:8f:eb:39:69:
77:61:4b:f8:1d:31:0c:76:8e:d1:39:3f:60:dc:b8:05:03:44:
a8:b3:0b:2d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzFARnVrS302P7uDD9akMHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTBhODA5NjhlNGM5NjAzY2EyYjEzZGQxZDE0NjU5NjVkOGYzZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Vi9FxgSmlhTk8smPFcmD9foBew
OKOA1VsQObM+4pAEtm/a0VI21LQOERu31sLxMuPQpCtcsu8vV0erAyVjNUZKwbUj
W7ETmYoxD9nqnUxlfqtxDN8yHqYDTgMMpCaDq/A0Len/KXJoTF56NO0MBJdu3SWG
w/STMg+msRYMbWtHlXtkRoGfLRngIhQEwpzaqDnleqe8gCKcpWd9j2dlFsO+e3dc
ZW+xvAISXS4M2GTfCgialkB1xnDVEKv1r1A4VKGcF+y784yvLb9LRe8eYhpbWii5
dF8g4HK78mPkZs+lUgU7f8d+sMMOJPZTci0G3Wjcaz63a3guptM3ptpWrwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJkKgJaOTJYDyisT3R0UZZZdjz2/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzYxYTBh
OS1jNDY2LTQ2OWMtYWZiZS04ZmVkNTA5MDk3NzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvNjFhMGE5
LWM0NjYtNDY5Yy1hZmJlLThmZWQ1MDkwOTc3MC8xL21RcUFsbzVNbGdQS0t4UGRI
UlJsbGwyUFBiOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwm6IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCmozANBgkqhkiG9w0BAQsFAAOCAQEAqnSodqmiwiCyJ8tCRHMvSTu/7OiJZVE1
5KhqgNaB/bs7b4wcXxsNNEXUr9Z7MLU0GDNHFHRaVGFgRMOD4s8XHRXpifBYxZ7W
xJ2636f3NOkoJdCuKGyqhjRE2GTEDB1TCsNIBXu67V5STt6xcq/pQwl49C6ClaPN
09+J0bPINGAmQRO0OmnVT72IFKvAEVcQN6dnCDApmI/BcGDXncgh433PjGc+t+4b
SJQt7/5dviwCHe54HyqSr+XCVPNbcjvP8snaLal5etLuTKcXeyl5ahifx1ntObmX
wFXOzRwG3ZIPNJTb65iP6zlpd2FL+B0xDHaO0Tk/YNy4BQNEqLMLLQ==
-----END CERTIFICATE-----
Generated at Fri May 3 10:56:40 2024 by rpki-client on console-fra.rpki-client.org