Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer (raw, json)
Hash identifier: IKtPbf6IV5zAqOsVaC9Q46BuXL2veI3mqWZ0VQ3FMKU=
Subject key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4252755779E40017FD15943FD2E0C15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216066
IP: 185.187.100.0/22
IP: 2a0a:47c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:27:55:77:9e:40:01:7f:d1:59:43:fd:2e:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:56:2a:ad:d6:b2:39:c4:ca:b4:66:1e:62:
dd:c0:f5:58:68:9d:69:de:c1:72:c2:72:f1:4a:7a:
59:a3:cc:3e:55:c2:20:57:e4:db:72:ff:59:87:dc:
99:e9:24:f7:f0:f9:7e:76:57:f8:85:fe:6e:80:68:
86:c5:7a:a0:07:fc:0d:b9:66:0c:84:ef:a6:16:e0:
8c:73:2f:43:7e:e0:de:a6:01:f7:b7:a2:df:a9:c5:
42:37:45:46:f4:78:b5:f2:b3:ce:88:42:54:81:b7:
03:89:c2:6a:c6:b4:5d:f6:03:1a:8d:30:1e:5f:c7:
5a:7c:74:aa:b9:4d:51:1b:77:dc:31:c0:45:aa:34:
22:67:5a:ee:95:3a:3f:bb:00:62:e0:3d:61:9f:90:
dc:19:bb:e9:7b:92:bf:b1:4c:86:57:17:4c:c8:9f:
a7:3b:3d:83:4f:c3:11:08:97:2a:c4:26:23:75:52:
84:8b:bb:4d:b2:23:be:d1:f2:ba:58:73:15:f4:9d:
ec:df:76:03:e8:0f:90:40:bc:8e:09:62:95:e0:cc:
d8:3a:3c:2d:54:64:df:2b:e1:f1:e7:3b:41:c2:81:
6f:43:27:d9:32:b4:58:09:58:18:4e:b6:14:a0:f3:
0f:33:a2:fb:d0:0e:ef:f9:2e:f4:65:19:1a:30:bb:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.100.0/22
IPv6:
2a0a:47c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216066
Signature Algorithm: sha256WithRSAEncryption
9d:37:ee:2e:b8:28:cd:b4:50:ef:8b:1b:67:44:7c:79:cc:6a:
3b:6a:16:c9:50:0d:86:8e:42:ac:0d:30:2b:7f:3a:32:21:22:
c5:39:ed:06:2c:10:9b:3c:b1:a2:28:e2:64:ac:ba:8d:88:11:
12:d7:92:8e:fd:62:d9:92:ed:90:02:72:48:6c:41:d7:55:18:
07:36:7a:f6:c3:07:6e:c0:28:3d:d8:77:97:27:a6:7b:98:c6:
5b:1b:49:72:5b:9c:e6:78:4e:d1:78:85:1e:58:ea:08:8e:91:
dd:71:94:2f:4c:c2:32:a7:65:3a:0f:fb:3e:c1:ce:59:3f:e0:
fb:32:42:73:bd:47:38:92:92:0c:88:85:b4:f5:80:8a:a7:11:
2f:cd:f4:b5:e8:52:c1:57:ec:ee:8d:0e:2f:ad:c3:8f:7e:1c:
f1:f6:29:98:3e:cf:3c:26:62:20:85:38:fe:24:4f:6b:b9:77:
da:b7:9e:c7:5c:5a:60:56:96:f3:45:69:8c:5c:c9:1c:76:3e:
d8:ef:31:69:80:43:58:30:56:5d:bd:c2:16:c5:b1:ad:b1:78:
ae:4f:37:05:59:df:24:c7:f6:d4:62:68:b9:24:98:95:55:14:
3a:10:e5:72:a4:55:50:50:f2:3d:3d:b8:e7:9d:fb:af:ef:eb:
2a:84:0e:50
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzEJSdVd55AAX/RWUP9LgwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjlmODRjNmE0OGQ1YzZkZmU2NDE0OTg3M2IxNDhkMTEyMGIwMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhehWKq3WsjnEyrRmHmLdwPVYaJ1p
3sFywnLxSnpZo8w+VcIgV+Tbcv9Zh9yZ6ST38Pl+dlf4hf5ugGiGxXqgB/wNuWYM
hO+mFuCMcy9DfuDepgH3t6LfqcVCN0VG9Hi18rPOiEJUgbcDicJqxrRd9gMajTAe
X8dafHSquU1RG3fcMcBFqjQiZ1rulTo/uwBi4D1hn5DcGbvpe5K/sUyGVxdMyJ+n
Oz2DT8MRCJcqxCYjdVKEi7tNsiO+0fK6WHMV9J3s33YD6A+QQLyOCWKV4MzYOjwt
VGTfK+Hx5ztBwoFvQyfZMrRYCVgYTrYUoPMPM6L70A7v+S70ZRkaMLvkdwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKufhMakjVxt/mQUmHOxSNESCwCbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzM2MTc3
Zi03Y2Q4LTRiZDMtODY4OS0yMTNkNjRiZWZmNzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMzYxNzdm
LTdjZDgtNGJkMy04Njg5LTIxM2Q2NGJlZmY3MS8xL3E1LUV4cVNOWEczLVpCU1lj
N0ZJMFJJTEFKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubtkMA0EAgACMAcDBQMqCkfAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMAjANBgkqhkiG9w0BAQsFAAOCAQEAnTfuLrgozbRQ
74sbZ0R8ecxqO2oWyVANho5CrA0wK386MiEixTntBiwQmzyxoijiZKy6jYgREteS
jv1i2ZLtkAJySGxB11UYBzZ69sMHbsAoPdh3lyeme5jGWxtJcluc5nhO0XiFHljq
CI6R3XGUL0zCMqdlOg/7PsHOWT/g+zJCc71HOJKSDIiFtPWAiqcRL830tehSwVfs
7o0OL63Dj34c8fYpmD7PPCZiIIU4/iRPa7l32reex1xaYFaW80VpjFzJHHY+2O8x
aYBDWDBWXb3CFsWxrbF4rk83BVnfJMf21GJouSSYlVUUOhDlcqRVUFDyPT245537
r+/rKoQOUA==
-----END CERTIFICATE-----
Generated at Fri May 3 12:03:32 2024 by rpki-client on console-ams.rpki-client.org