Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
File: pqBDS-vl36Y92njCSk68HSzXNp0.cer (raw, json)
Hash identifier: 2GH4D9H/5jkwTbuRhxWAD89qeHL+LjyI9FFFJbe3fZI=
Subject key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EC742E648DD7887470738D43EAAF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42649
AS: 208583
AS: 209437
IP: 178.239.48.0/20
IP: 185.24.248.0/22
IP: 185.149.56.0/22
IP: 185.195.92.0/22
IP: 2a0a:56c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c7:42:e6:48:dd:78:87:47:07:38:d4:3e:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:ad:fe:3b:d9:fc:87:5b:8e:a6:06:65:fc:
14:09:93:c8:4f:99:ce:bb:c6:db:dd:55:74:a2:6f:
d5:0e:2c:28:8a:cc:54:29:5d:c2:cd:41:81:30:2d:
dc:51:1d:f1:bc:4c:c9:dd:1e:74:1d:01:cd:9d:b9:
76:da:fc:a9:b3:b9:ce:56:bd:57:04:88:5e:8a:e2:
56:75:44:57:6d:16:ea:af:c4:f5:ea:1e:d1:0c:57:
61:59:be:65:72:0d:c0:73:8d:26:a4:71:83:ff:81:
e4:fc:33:8d:55:95:5a:25:a8:f9:ba:a6:d5:ab:f7:
d7:f8:01:fd:4c:b0:84:d1:ee:2d:45:2c:9a:2d:57:
22:3b:68:ea:cf:d3:e0:21:aa:c0:b7:d2:15:e3:eb:
c1:0a:85:bb:29:ad:01:0d:86:32:3e:01:a1:14:74:
14:28:d9:97:57:8e:99:a7:49:79:df:68:31:cb:14:
06:66:39:d5:9e:02:85:26:48:00:5b:e9:c2:2e:ee:
fd:f0:de:00:c0:c9:c1:a2:57:76:e8:fb:f4:0a:cd:
c3:36:bf:49:61:0b:a2:8a:51:01:62:42:01:95:ba:
fc:b4:88:09:cc:c1:05:a9:ca:f7:38:8c:af:0b:1a:
66:43:b6:a0:88:ca:41:5c:14:e7:2c:96:4d:9d:ed:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.48.0/20
185.24.248.0/22
185.149.56.0/22
185.195.92.0/22
IPv6:
2a0a:56c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42649
208583
209437
Signature Algorithm: sha256WithRSAEncryption
ae:b3:01:3f:a7:8b:83:89:93:b4:9c:c8:1f:ed:22:e0:11:7b:
f6:95:e1:37:8b:80:f6:80:49:dc:86:38:0b:58:e0:09:1a:e5:
36:5b:7b:cc:b4:ed:62:75:99:47:51:b2:59:5d:01:f0:c8:1a:
7a:80:0f:67:ef:ba:21:82:ed:d3:74:64:96:cd:bb:29:dd:ee:
91:76:dc:6d:57:cb:32:87:3c:52:7e:2f:42:4f:48:d8:05:15:
93:ae:bf:b4:ec:87:dd:28:e4:f7:22:15:56:b9:a5:35:69:9c:
5e:f4:20:8c:7e:1b:26:27:fc:da:ce:21:0f:45:47:79:0c:4d:
99:62:27:cf:fa:43:be:6a:ec:35:2c:fc:4c:35:b6:48:c6:16:
de:d1:a4:01:dc:95:46:f4:69:3a:6c:85:91:b3:bc:3c:71:02:
c0:27:59:7f:20:7e:c9:b8:5d:80:7c:96:66:3a:6f:26:94:3d:
cf:8a:36:c3:c4:9f:18:86:9f:9c:31:b1:6c:1f:91:57:81:4d:
6b:dd:ba:ca:19:98:92:71:87:8b:10:b4:52:e0:8d:53:ac:b5:
2e:3a:f9:7c:f1:05:9c:d2:18:a3:b0:06:70:23:97:2c:91:2b:
f1:5c:20:07:75:85:7d:5d:81:b3:7e:e4:6e:bb:e3:a5:b7:fb:
fa:11:c0:54
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAYzFbsdC5kjdeIdHBzjUPqr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmEwNDM0YmViZTVkZmE2M2RkYTc4YzI0YTRlYmMxZDJjZDczNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEWt/jvZ/IdbjqYGZfwUCZPIT5nO
u8bb3VV0om/VDiwoisxUKV3CzUGBMC3cUR3xvEzJ3R50HQHNnbl22vyps7nOVr1X
BIheiuJWdURXbRbqr8T16h7RDFdhWb5lcg3Ac40mpHGD/4Hk/DONVZVaJaj5uqbV
q/fX+AH9TLCE0e4tRSyaLVciO2jqz9PgIarAt9IV4+vBCoW7Ka0BDYYyPgGhFHQU
KNmXV46Zp0l532gxyxQGZjnVngKFJkgAW+nCLu798N4AwMnBold26Pv0Cs3DNr9J
YQuiilEBYkIBlbr8tIgJzMEFqcr3OIyvCxpmQ7agiMpBXBTnLJZNne0dnwIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFKagQ0vr5d+mPdp4wkpOvB0s1zadMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2Q4Mzk4
ZS0yMzJjLTQ1YzItYjhlMC05Y2U0NzY3ZGEyYzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDgzOThl
LTIzMmMtNDVjMi1iOGUwLTljZTQ3NjdkYTJjMS8xL3BxQkRTLXZsMzZZOTJuakNT
azY4SFN6WE5wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQEsu8wAwQCuRj4AwQCuZU4AwQCucNcMA0EAgAC
MAcDBQMqClbAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCmmQIDAy7HAgMDMh0w
DQYJKoZIhvcNAQELBQADggEBAK6zAT+ni4OJk7ScyB/tIuARe/aV4TeLgPaASdyG
OAtY4Aka5TZbe8y07WJ1mUdRslldAfDIGnqAD2fvuiGC7dN0ZJbNuynd7pF23G1X
yzKHPFJ+L0JPSNgFFZOuv7Tsh90o5PciFVa5pTVpnF70IIx+GyYn/NrOIQ9FR3kM
TZliJ8/6Q75q7DUs/Ew1tkjGFt7RpAHclUb0aTpshZGzvDxxAsAnWX8gfsm4XYB8
lmY6byaUPc+KNsPEnxiGn5wxsWwfkVeBTWvdusoZmJJxh4sQtFLgjVOstS46+Xzx
BZzSGKOwBnAjlyyRK/FcIAd1hX1dgbN+5G6746W3+/oRwFQ=
-----END CERTIFICATE-----
Generated at Fri May 3 10:59:45 2024 by rpki-client on console-fra.rpki-client.org