Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer (raw, json)
Hash identifier: CbmDWRwFIgiNTh/9sFdGKp8LD9zyLAmwX0vcFpQtfOY=
Subject key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA4141CAF1523A08C094F2164A6EA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39433
IP: 185.151.40.0/22
IP: 193.93.56.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:41:ca:f1:52:3a:08:c0:94:f2:16:4a:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:fe:3f:74:38:aa:a6:e6:2a:e0:87:47:5d:
01:94:b0:12:dd:9f:68:2f:b2:5b:70:f0:5c:78:a4:
d6:5b:d2:c1:e0:23:4e:90:c4:52:a1:ee:29:e0:2e:
5b:cf:b4:91:fe:24:38:49:57:1f:d1:48:0e:aa:87:
60:a1:7f:1f:1c:32:bf:04:1b:0e:8d:ec:4f:7f:2b:
87:1f:c6:b0:57:49:58:cf:e4:b9:ae:a8:85:ef:90:
6c:ca:a5:6f:20:7b:ed:94:08:8f:93:74:00:80:16:
b1:dc:11:de:1b:76:35:07:e2:17:06:e0:ed:f3:e9:
20:4f:49:08:20:d0:5e:e9:3e:60:6f:4b:e0:7a:40:
a6:a0:ac:96:f0:c7:c9:c6:d3:0a:97:68:4c:20:45:
09:a9:a8:09:3e:cf:25:b8:2a:a7:c7:1d:a9:4a:83:
a8:3e:79:53:74:78:ff:1b:8c:fd:3a:a1:f6:14:d2:
ec:b7:90:04:24:87:c2:e6:6a:2f:47:a8:1b:e5:42:
19:e9:30:67:bc:fa:ab:49:c6:46:9c:6e:0d:8f:62:
ac:f0:68:ad:4d:f4:93:e8:73:0f:1c:7f:b9:e5:7b:
16:a6:85:2a:6e:5f:ea:af:37:79:3a:54:3a:7d:f7:
ce:0d:b5:e7:88:f7:d5:6f:b2:bf:e9:ca:72:e6:26:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.40.0/22
193.93.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39433
Signature Algorithm: sha256WithRSAEncryption
47:d5:b0:89:c6:d3:9a:5f:0c:cb:99:59:01:ec:71:1f:ed:e5:
db:b0:3f:42:0d:5b:b7:cd:b2:f3:03:a4:87:1a:dc:13:4b:3e:
7b:cb:4a:55:df:67:7d:cc:67:f4:d6:65:d9:99:41:53:b1:c8:
d4:d6:12:4c:26:7e:ea:b3:66:75:24:f6:96:c6:52:e7:de:b2:
90:d2:b1:4d:cb:a4:04:c4:e3:9e:20:d0:66:a2:24:ad:b4:c7:
27:2e:f3:dc:e3:00:ef:fd:87:83:1b:9c:ab:47:56:b1:68:ac:
89:c4:93:8d:ec:5e:f5:fe:e0:e6:40:a1:37:80:52:eb:e0:86:
73:75:a8:06:3d:cf:5d:10:96:84:96:c0:93:aa:a2:15:2f:b0:
bf:5c:31:99:ed:50:80:32:65:b3:2e:17:27:e6:1a:5c:76:39:
37:09:20:7d:87:63:c0:26:0e:ac:c5:6c:16:76:fd:97:51:48:
18:f3:18:2d:a1:12:21:f9:1b:33:cd:14:71:a8:97:6d:0d:46:
f7:7a:99:65:69:32:97:1b:92:cd:1a:de:09:e6:81:a2:0e:4c:
b6:39:60:ba:92:86:36:21:4a:7b:d1:f0:7f:d1:d3:5a:e8:31:
a9:0b:c1:fc:a2:c2:85:34:4a:d2:35:ed:4a:eb:92:67:c1:da:
a3:73:0f:7f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQf+kFByvFSOgjAlPIWSm6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTEyNzg3YWFhNDZmYjA0ZGFjZmM1ZWI2MDYwYjBhY2EwMjg0YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGj+P3Q4qqbmKuCHR10BlLAS3Z9o
L7JbcPBceKTWW9LB4CNOkMRSoe4p4C5bz7SR/iQ4SVcf0UgOqodgoX8fHDK/BBsO
jexPfyuHH8awV0lYz+S5rqiF75BsyqVvIHvtlAiPk3QAgBax3BHeG3Y1B+IXBuDt
8+kgT0kIINBe6T5gb0vgekCmoKyW8MfJxtMKl2hMIEUJqagJPs8luCqnxx2pSoOo
PnlTdHj/G4z9OqH2FNLst5AEJIfC5movR6gb5UIZ6TBnvPqrScZGnG4Nj2Ks8Git
TfST6HMPHH+55XsWpoUqbl/qrzd5OlQ6fffODbXniPfVb7K/6cpy5iaK0wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKkSeHqqRvsE2s/F62BgsKygKEtxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2Lzg3NzJj
Zi1kZDM0LTRiODEtOTI2Yy1lODFmNWZlNDczOGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvODc3MmNm
LWRkMzQtNGI4MS05MjZjLWU4MWY1ZmU0NzM4Zi8xL3FSSjRlcXBHLXdUYXo4WHJZ
R0N3cktBb1MzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCuZcoAwQCwV04MBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCaCTANBgkqhkiG9w0BAQsFAAOCAQEAR9WwicbTml8My5lZAexxH+3l
27A/Qg1bt82y8wOkhxrcE0s+e8tKVd9nfcxn9NZl2ZlBU7HI1NYSTCZ+6rNmdST2
lsZS596ykNKxTcukBMTjniDQZqIkrbTHJy7z3OMA7/2Hgxucq0dWsWisicSTjexe
9f7g5kChN4BS6+CGc3WoBj3PXRCWhJbAk6qiFS+wv1wxme1QgDJlsy4XJ+YaXHY5
NwkgfYdjwCYOrMVsFnb9l1FIGPMYLaESIfkbM80UcaiXbQ1G93qZZWkylxuSzRre
CeaBog5MtjlgupKGNiFKe9Hwf9HTWugxqQvB/KLChTRK0jXtSuuSZ8Hao3MPfw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:56 2025 by rpki-client