Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
File: qQIAoAAN9dhFudsoTQotvuZ2xag.cer (raw, json)
Hash identifier: 2R+T9zbwvtR8PWFe+Hysj6zMpKNe/snxRCHb1S7Kvhk=
Subject key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B89C584A9F1B13709F05DE2AE293C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8870
IP: 91.197.128.0/22
IP: 91.222.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9c:58:4a:9f:1b:13:70:9f:05:de:2a:e2:93:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:cf:6e:8b:4a:69:6b:4e:db:70:23:e9:08:
6a:02:30:53:09:d5:88:4b:bd:61:0a:be:a1:f2:50:
d4:ca:25:62:0f:eb:cc:9b:96:27:fb:e7:1b:78:2d:
5a:51:81:c7:36:09:3a:0d:74:1b:a6:8e:be:b7:a0:
35:23:f2:9b:34:d7:8a:dc:3e:9a:60:90:b8:ce:81:
6a:83:b8:70:6a:38:5e:dc:00:9b:c7:e1:d5:e4:e5:
b4:06:8d:c6:38:82:46:74:7a:f3:e8:4c:2c:11:af:
ea:d7:ed:ac:0a:ab:87:ea:89:69:5e:90:9b:a9:18:
89:62:15:29:79:4a:47:46:ae:67:c2:34:48:ef:a5:
dc:eb:7d:52:d2:dd:51:85:3e:54:36:62:4d:84:b3:
f6:57:25:19:2a:33:fa:9b:d4:bf:40:e5:3a:25:ed:
f0:53:06:3c:b0:8c:1f:21:60:d6:6a:4c:80:c0:44:
3b:fd:d3:87:92:63:3a:a3:c4:04:a7:86:e6:8c:ed:
fe:2c:f6:f2:8a:33:09:bf:d6:bc:99:e5:32:37:d3:
b4:03:8c:73:25:d4:4a:68:47:9e:cd:73:0a:fa:f1:
9a:0f:4a:a3:ee:a8:c3:f6:47:f4:80:c2:9f:8a:ae:
45:82:98:ff:cc:36:ed:74:24:e7:9a:7f:5a:4a:bd:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.128.0/22
91.222.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8870
Signature Algorithm: sha256WithRSAEncryption
b0:d2:66:40:03:92:ef:ad:fc:f3:a2:14:8e:6e:d1:2c:ec:0e:
7a:d2:14:bf:03:f7:67:cc:c2:f0:c7:d0:00:92:5b:b7:9e:15:
28:25:57:d1:07:01:0e:02:bb:0f:a8:c3:63:0b:2f:ce:3f:0e:
fd:45:43:b4:73:e2:e9:e7:69:1b:9e:97:c8:bd:0c:06:d8:13:
29:d6:07:89:47:ca:d2:57:24:26:87:5f:41:33:23:b6:d1:11:
51:80:f8:50:33:d8:1f:94:de:f4:71:58:75:6b:51:b0:fc:f7:
cb:5b:2f:e1:b5:3e:ea:77:cc:51:c3:8e:61:f1:45:9a:b4:b2:
8f:4a:48:77:86:b0:ff:ed:e0:f9:ca:32:c1:67:59:35:d7:dc:
48:79:9b:97:5c:54:26:c5:8e:93:0d:2b:a6:8b:c5:46:58:b2:
c6:87:e6:96:33:39:e3:51:26:ab:cb:5a:2c:ab:8a:a1:aa:9c:
bc:6f:69:66:b7:18:43:4a:20:11:34:22:60:08:53:73:90:61:
81:8e:18:e4:db:53:b0:5d:1b:e0:3c:93:e7:d9:10:b2:c2:81:
b2:05:d4:73:ed:f4:78:20:e9:96:5f:55:a9:0c:64:5e:03:22:
e5:6a:68:d1:1d:d2:d2:28:2a:1d:e7:dc:cc:d0:8d:85:66:d4:
38:da:b4:15
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzGuJxYSp8bE3CfBd4q4pPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTAyMDBhMDAwMGRmNWQ4NDViOWRiMjg0ZDBhMmRiZWU2NzZjNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF7PbotKaWtO23Aj6QhqAjBTCdWI
S71hCr6h8lDUyiViD+vMm5Yn++cbeC1aUYHHNgk6DXQbpo6+t6A1I/KbNNeK3D6a
YJC4zoFqg7hwajhe3ACbx+HV5OW0Bo3GOIJGdHrz6EwsEa/q1+2sCquH6olpXpCb
qRiJYhUpeUpHRq5nwjRI76Xc631S0t1RhT5UNmJNhLP2VyUZKjP6m9S/QOU6Je3w
UwY8sIwfIWDWakyAwEQ7/dOHkmM6o8QEp4bmjO3+LPbyijMJv9a8meUyN9O0A4xz
JdRKaEeezXMK+vGaD0qj7qjD9kf0gMKfiq5Fgpj/zDbtdCTnmn9aSr1PUQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFKkCAKAADfXYRbnbKE0KLb7mdsWoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2IxZTNl
MS04YjdkLTRlMjItODcwYy01OGY1NzQ0OTViYjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvYjFlM2Ux
LThiN2QtNGUyMi04NzBjLTU4ZjU3NDQ5NWJiOC8xL3FRSUFvQUFOOWRoRnVkc29U
UW90dnVaMnhhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCW8WAAwQCW95AMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAiKmMA0GCSqGSIb3DQEBCwUAA4IBAQCw0mZAA5LvrfzzohSObtEs7A56
0hS/A/dnzMLwx9AAklu3nhUoJVfRBwEOArsPqMNjCy/OPw79RUO0c+Lp52kbnpfI
vQwG2BMp1geJR8rSVyQmh19BMyO20RFRgPhQM9gflN70cVh1a1Gw/PfLWy/htT7q
d8xRw45h8UWatLKPSkh3hrD/7eD5yjLBZ1k119xIeZuXXFQmxY6TDSumi8VGWLLG
h+aWMznjUSary1osq4qhqpy8b2lmtxhDSiARNCJgCFNzkGGBjhjk21OwXRvgPJPn
2RCywoGyBdRz7fR4IOmWX1WpDGReAyLlamjRHdLSKCod59zM0I2FZtQ42rQV
-----END CERTIFICATE-----
Generated at Fri May 3 03:44:42 2024 by rpki-client on console-fra.rpki-client.org