Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
File: qJKcs0O9888gTEBa8KVTPqSwkzw.cer (raw, json)
Hash identifier: 6uMrWdY+j6u+Q9RcGYAFr2/i/5klcw3AJs4xBhcoTCo=
Subject key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDE5706C52D7E46A8F79B332CEC112
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34489
IP: 193.0.226.0/24
IP: 195.250.39.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e5:70:6c:52:d7:e4:6a:8f:79:b3:32:ce:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:e5:41:1d:d1:ab:e5:be:c5:ed:c9:eb:a5:
7b:d1:69:d7:b1:c9:f2:00:85:d9:76:c5:72:ef:e1:
ed:87:08:cf:2f:e6:44:30:ac:dc:1b:14:81:4d:d9:
09:15:e9:cf:ae:14:80:16:8e:f7:14:72:ed:7e:6f:
68:ad:3b:a2:b0:89:98:83:eb:75:00:5b:57:ea:53:
a8:43:39:1a:d3:db:d5:a0:a3:56:9e:64:e2:4e:b5:
54:0f:92:20:68:5a:9a:58:23:16:c0:9b:9c:ac:db:
31:35:55:fc:66:65:90:fa:a0:d4:f2:10:fd:2b:7a:
33:b0:2c:d6:09:4c:de:f0:cc:87:4e:04:66:52:78:
46:7f:6f:8f:64:14:f5:8a:bc:70:ab:3d:70:b9:55:
b8:c8:93:90:4b:f3:ac:8a:cd:66:ee:c3:d1:9f:72:
25:f0:be:de:fd:93:ea:f5:70:b2:5d:12:9a:34:fd:
c2:3e:b2:2a:89:5f:a9:4c:58:b9:8e:43:67:f3:81:
73:98:ea:13:83:08:6a:78:6c:05:42:26:57:6f:72:
15:cc:37:c6:f7:4f:25:b6:1b:cb:92:df:c1:10:8a:
81:48:c0:74:b1:aa:7c:f1:38:c8:c4:2d:f8:34:18:
d2:f6:97:51:f2:16:49:c1:60:02:2e:06:78:c7:31:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.226.0/24
195.250.39.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34489
Signature Algorithm: sha256WithRSAEncryption
4d:ad:43:fe:20:6c:c7:d3:52:dd:b2:be:39:33:18:af:d0:0a:
d3:e8:47:b7:e0:59:3b:4a:56:7f:f0:cb:a9:36:27:ef:35:d5:
8f:0f:95:18:47:5c:eb:9f:af:3b:96:e4:01:f9:cc:10:f7:43:
6f:3e:8d:07:48:89:5d:3e:23:94:03:ca:3f:8c:3f:f8:f2:6d:
5e:10:7c:54:3b:87:f5:35:43:ac:43:b1:36:0c:e5:c6:09:4c:
57:a7:d7:ef:a2:92:86:0b:6f:a7:c8:29:f3:f6:b4:9b:21:ec:
af:07:a3:bd:38:37:60:47:df:17:31:ac:e1:fb:3a:36:00:2d:
00:2b:54:46:ff:dd:f7:38:1e:c1:d8:b7:93:1d:63:46:f9:db:
28:7c:94:85:58:a5:d6:7e:c4:fc:5d:9e:cc:1e:f3:7b:a4:69:
cf:89:bb:f9:97:d8:fa:ae:ae:44:ca:1a:18:31:21:a5:a4:2f:
18:4c:9d:25:34:bc:2a:df:32:37:89:22:d5:66:97:cb:49:de:
f3:96:d3:e6:78:d1:7c:c5:f1:91:1e:34:fd:a7:6b:59:17:00:
2b:1d:e9:29:d3:eb:c1:71:07:6c:d7:2d:bb:19:61:24:10:d6:
63:44:34:bd:04:25:74:a7:c3:2e:30:64:86:83:88:1a:2c:2f:
99:d9:4b:82
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQl/eVwbFLX5GqPebMyzsESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODkyOWNiMzQzYmRmM2NmMjA0YzQwNWFmMGE1NTMzZWE0YjA5MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshXlQR3Rq+W+xe3J66V70WnXscny
AIXZdsVy7+HthwjPL+ZEMKzcGxSBTdkJFenPrhSAFo73FHLtfm9orTuisImYg+t1
AFtX6lOoQzka09vVoKNWnmTiTrVUD5IgaFqaWCMWwJucrNsxNVX8ZmWQ+qDU8hD9
K3ozsCzWCUze8MyHTgRmUnhGf2+PZBT1irxwqz1wuVW4yJOQS/Osis1m7sPRn3Il
8L7e/ZPq9XCyXRKaNP3CPrIqiV+pTFi5jkNn84FzmOoTgwhqeGwFQiZXb3IVzDfG
908lthvLkt/BEIqBSMB0sap88TjIxC34NBjS9pdR8hZJwWACLgZ4xzFz2QIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKiSnLNDvfPPIExAWvClUz6ksJM8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2I3Y2Mz
Ni03NzdlLTQ0YjktYWQ2Mi01OWQ0NGVmN2U0ZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvYjdjYzM2
LTc3N2UtNDRiOS1hZDYyLTU5ZDQ0ZWY3ZTRmZi8xL3FKS2NzME85ODg4Z1RFQmE4
S1ZUUHFTd2t6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwQDiAwQAw/onMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCGuTANBgkqhkiG9w0BAQsFAAOCAQEATa1D/iBsx9NS3bK+OTMYr9AK
0+hHt+BZO0pWf/DLqTYn7zXVjw+VGEdc65+vO5bkAfnMEPdDbz6NB0iJXT4jlAPK
P4w/+PJtXhB8VDuH9TVDrEOxNgzlxglMV6fX76KShgtvp8gp8/a0myHsrwejvTg3
YEffFzGs4fs6NgAtACtURv/d9zgewdi3kx1jRvnbKHyUhVil1n7E/F2ezB7ze6Rp
z4m7+ZfY+q6uRMoaGDEhpaQvGEydJTS8Kt8yN4ki1WaXy0ne85bT5njRfMXxkR40
/adrWRcAKx3pKdPrwXEHbNctuxlhJBDWY0Q0vQQldKfDLjBkhoOIGiwvmdlLgg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:21 2025 by rpki-client