Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.cer (raw, json)
Hash identifier: 11o+LKjpyx/AFiiPgYGJPUepTwm4MA1UJ87su8c+Wm0=
Subject key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FC4620F17AA67FC8D82A42CEDA613F029
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 May 2024 12:45:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214805
AS: 214857
IP: 2a14:52c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:62:0f:17:aa:67:fc:8d:82:a4:2c:ed:a6:13:f0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 12:45:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:c1:d7:f0:6b:13:b2:8f:3c:da:90:04:4f:
67:7f:9f:1b:b3:02:20:aa:3d:47:59:63:e8:c9:04:
4e:1e:98:09:20:6a:5a:8c:38:09:94:3c:f1:1f:38:
36:f5:99:2c:9e:d2:44:5f:e6:a5:ac:b0:d0:f6:ae:
00:1a:56:4d:b9:d8:3b:b2:63:98:58:24:09:66:8f:
ce:1d:4a:b8:a8:bd:5b:49:8a:33:74:d3:43:0d:31:
b3:c9:ba:44:5c:c3:d7:8a:77:0e:d0:b4:4d:fc:d0:
d9:c6:5c:83:43:96:3d:73:1e:36:21:1b:9f:49:71:
05:36:c8:fd:03:c2:25:43:fb:4e:50:45:1e:02:7f:
73:2b:74:0d:6c:f8:17:81:13:f1:30:32:71:3c:10:
5a:78:4b:12:f3:31:d6:7c:a8:71:f1:a8:44:4e:16:
50:9a:0b:8a:49:eb:54:5b:a6:8f:27:35:37:7b:cd:
07:d7:2d:19:c0:17:75:79:41:dd:d5:d2:49:b4:54:
4e:46:9d:a5:fa:3e:a0:a4:43:f1:13:63:db:83:12:
fd:11:7d:10:f1:de:8c:a4:f5:f0:c5:be:41:9e:20:
66:21:5f:62:03:f1:c3:28:a4:8a:4f:f6:51:c0:ce:
c3:55:e5:78:15:fb:29:5d:28:20:b3:cb:0a:8e:05:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:52c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214805
214857
Signature Algorithm: sha256WithRSAEncryption
af:f1:f1:47:1c:95:7b:7d:a0:d0:bb:71:e1:6e:1f:73:79:05:
59:53:25:af:55:de:5e:18:79:ad:6e:50:2e:cd:71:38:63:da:
c6:7e:45:4f:f8:de:0f:99:bc:5a:46:72:30:4e:07:50:75:33:
6f:89:09:15:cf:f8:10:d9:00:c1:58:7a:36:4d:a8:ae:11:e7:
d0:d0:4c:0d:ad:75:c0:2e:96:d2:0b:69:13:da:e3:4f:98:72:
6f:65:c0:14:50:46:8b:22:fc:c4:76:5e:d1:dd:89:26:34:4a:
11:c1:a8:53:50:73:a8:09:e8:13:df:ab:80:26:3c:19:57:4a:
fa:1b:66:1e:68:09:9e:b9:a9:9d:c9:bc:5c:20:0c:f4:11:b2:
65:22:54:48:e4:04:d3:b6:fc:6a:99:ba:4d:19:35:6c:92:25:
bf:8b:9d:23:ba:8b:42:22:92:ef:d0:5f:f7:bb:59:74:d7:1f:
4a:ea:5e:24:0b:32:38:63:fc:9b:23:ac:5b:87:f9:50:39:97:
e4:5a:10:95:86:64:bf:51:5b:5b:d3:ba:ad:d8:34:da:a3:f7:
e6:3e:67:d0:b6:46:d8:c6:e4:fb:49:47:e7:74:26:7c:c6:2c:
f7:f2:c6:3c:fb:5b:44:8e:9e:bd:de:2a:d5:1c:02:8b:61:42:
4f:3b:08:2f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAY/EYg8Xqmf8jYKkLO2mE/ApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTI5MTI0NTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmMxOTE4YzFmNDVlNmVjMTdkYWNhNjdhN2FkMTkzY2FmMDRiN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIPB1/BrE7KPPNqQBE9nf58bswIg
qj1HWWPoyQROHpgJIGpajDgJlDzxHzg29ZksntJEX+alrLDQ9q4AGlZNudg7smOY
WCQJZo/OHUq4qL1bSYozdNNDDTGzybpEXMPXincO0LRN/NDZxlyDQ5Y9cx42IRuf
SXEFNsj9A8IlQ/tOUEUeAn9zK3QNbPgXgRPxMDJxPBBaeEsS8zHWfKhx8ahEThZQ
mguKSetUW6aPJzU3e80H1y0ZwBd1eUHd1dJJtFRORp2l+j6gpEPxE2PbgxL9EX0Q
8d6MpPXwxb5BniBmIV9iA/HDKKSKT/ZRwM7DVeV4FfspXSggs8sKjgWsmQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKvBkYwfRebsF9rKZ6etGTyvBLeyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzhmODhk
ZS1kYWVkLTQ4ZDItYjcwMS02YmI1ZmU2NjU3NTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGY4OGRl
LWRhZWQtNDhkMi1iNzAxLTZiYjVmZTY2NTc1MC8xL3E4R1JqQjlGNXV3WDJzcG5w
NjBaUEs4RXQ3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhRSwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMDRxUCAwNHSTANBgkqhkiG9w0BAQsFAAOCAQEAr/HxRxyVe32g0Ltx4W4fc3kF
WVMlr1XeXhh5rW5QLs1xOGPaxn5FT/jeD5m8WkZyME4HUHUzb4kJFc/4ENkAwVh6
Nk2orhHn0NBMDa11wC6W0gtpE9rjT5hyb2XAFFBGiyL8xHZe0d2JJjRKEcGoU1Bz
qAnoE9+rgCY8GVdK+htmHmgJnrmpncm8XCAM9BGyZSJUSOQE07b8apm6TRk1bJIl
v4udI7qLQiKS79Bf97tZdNcfSupeJAsyOGP8myOsW4f5UDmX5FoQlYZkv1FbW9O6
rdg02qP35j5n0LZG2Mbk+0lH53QmfMYs9/LGPPtbRI6evd4q1RwCi2FCTzsILw==
-----END CERTIFICATE-----
Generated at Sat Jun 29 08:47:18 2024 by rpki-client on console-fra.rpki-client.org