Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer (raw, json)
Hash identifier: xFqj5G5ZZKxP88MSUnozb1kTpO52QxI7lkwvLFcWPtY=
Subject key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ECD2466B656153EA5A4CBFA592865606D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Apr 2024 12:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42208
IP: 193.200.4.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:24:66:b6:56:15:3e:a5:a4:cb:fa:59:28:65:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 12:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:dd:d0:c8:68:50:d6:30:8c:9a:a4:7b:6e:
15:af:fc:9a:67:07:9e:5b:20:80:4d:ba:83:7f:4a:
23:12:38:c5:54:22:b6:49:59:c5:c3:d6:12:17:b7:
1e:29:36:fd:b3:0d:d7:f7:91:b5:2d:46:43:5b:38:
98:fc:c1:13:c5:a3:a9:49:24:67:92:47:76:ae:f1:
63:f8:80:23:e0:6c:03:3e:90:8b:fb:94:f0:9d:5c:
48:c5:1e:11:5a:86:b5:bb:20:4b:e4:d8:4e:38:91:
98:12:5b:20:af:c8:28:6c:e1:2f:61:31:6d:f8:5f:
f4:ab:4f:d8:61:f3:07:92:0e:9f:84:95:4c:bc:e4:
52:1c:7f:7f:3c:59:05:7f:79:ba:f9:e1:df:cf:30:
b4:6f:b8:9d:32:45:3b:96:88:9b:a6:a3:b1:d0:f1:
4c:a5:8b:8b:56:19:65:7b:3e:9b:91:48:07:b2:64:
9a:3f:10:75:f5:a4:95:3f:01:73:19:a5:48:30:9a:
84:61:51:67:63:0c:46:23:50:11:c4:8d:7e:54:5e:
47:60:f6:ff:ca:61:9a:0c:27:fd:28:ea:7a:63:e3:
c1:d8:5b:f6:69:b3:3b:c9:5d:74:b6:90:c0:c0:a2:
5f:15:fe:b1:8c:10:c0:ce:d5:7b:40:c8:1f:35:1c:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.4.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42208
Signature Algorithm: sha256WithRSAEncryption
15:ac:a7:b6:e8:43:aa:7b:0e:d0:4c:2a:46:db:f2:d2:a0:29:
e5:b7:48:85:ed:92:af:46:0f:6c:08:98:46:31:d5:eb:05:e0:
5a:7a:cf:9e:80:7a:0c:10:66:56:fc:07:12:dd:0c:06:54:37:
64:0b:72:37:1b:7d:e7:ba:a0:bb:30:03:b7:7d:27:25:64:33:
00:aa:9c:8b:2e:19:d8:a7:d2:09:93:e8:95:d9:c3:30:5b:4b:
5c:89:58:40:41:1a:06:b5:fa:ad:31:5e:41:c8:46:a0:fa:31:
7f:a0:fe:53:6f:e8:4c:be:97:af:b4:85:50:d4:e1:b3:e3:80:
e9:86:0c:5e:fb:7b:e1:43:be:db:99:2f:e9:93:37:59:d5:ad:
0f:df:3f:14:6d:77:15:56:9c:ed:50:ca:7f:e8:00:0f:a9:6c:
a7:b9:69:9b:72:bb:3d:a7:6e:89:9c:c8:47:de:c0:3d:2f:a0:
ac:93:38:6c:28:d5:d3:cd:67:8f:d0:46:30:fb:ca:96:bf:6b:
16:2a:8f:34:13:f3:71:db:18:ef:01:b7:5a:a4:19:29:1a:5e:
a9:0f:28:09:6e:c5:ee:f7:94:30:33:ed:16:2b:42:f1:25:38:
ff:c1:e2:2f:fa:a2:3f:cd:ef:29:79:ef:47:ee:ca:d8:91:6a:
de:8b:0c:d5
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAY7NJGa2VhU+paTL+lkoZWBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDExMTIzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGJiZDRkOTg1OGFiNTI4MDcwMGVmN2U5NWMwNDE2MGYzZDJjYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlizd0MhoUNYwjJqke24Vr/yaZwee
WyCATbqDf0ojEjjFVCK2SVnFw9YSF7ceKTb9sw3X95G1LUZDWziY/METxaOpSSRn
kkd2rvFj+IAj4GwDPpCL+5TwnVxIxR4RWoa1uyBL5NhOOJGYElsgr8gobOEvYTFt
+F/0q0/YYfMHkg6fhJVMvORSHH9/PFkFf3m6+eHfzzC0b7idMkU7loibpqOx0PFM
pYuLVhllez6bkUgHsmSaPxB19aSVPwFzGaVIMJqEYVFnYwxGI1ARxI1+VF5HYPb/
ymGaDCf9KOp6Y+PB2Fv2abM7yV10tpDAwKJfFf6xjBDAztV7QMgfNRx45wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKi71NmFirUoBwDvfpXAQWDz0stIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzdhYWQ5
Yy1kNjU3LTQ1YmQtYjAxNi0xOGIyZmQ0MzIwZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvN2FhZDlj
LWQ2NTctNDViZC1iMDE2LTE4YjJmZDQzMjBmNS8xL3FMdlUyWVdLdFNnSEFPOS1s
Y0JCWVBQU3kwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwcgEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCk4DANBgkqhkiG9w0BAQsFAAOCAQEAFayntuhDqnsO0EwqRtvy0qAp5bdIhe2S
r0YPbAiYRjHV6wXgWnrPnoB6DBBmVvwHEt0MBlQ3ZAtyNxt957qguzADt30nJWQz
AKqciy4Z2KfSCZPoldnDMFtLXIlYQEEaBrX6rTFeQchGoPoxf6D+U2/oTL6Xr7SF
UNThs+OA6YYMXvt74UO+25kv6ZM3WdWtD98/FG13FVac7VDKf+gAD6lsp7lpm3K7
PaduiZzIR97APS+grJM4bCjV081nj9BGMPvKlr9rFiqPNBPzcdsY7wG3WqQZKRpe
qQ8oCW7F7veUMDPtFitC8SU4/8HiL/qiP83vKXnvR+7K2JFq3osM1Q==
-----END CERTIFICATE-----
Generated at Fri May 3 12:03:43 2024 by rpki-client on console-ams.rpki-client.org