Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
File: qS3HvbydCXM23mJDtVCrFzN16jk.cer (raw, json)
Hash identifier: hZ/og34jYyLhqWlhX+6lUZTdv4O1y52klpXUMC/p1Bg=
Subject key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E534529117A33327693A1D5C82AD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212632
IP: 193.194.192.0/18
IP: 212.39.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:53:45:29:11:7a:33:32:76:93:a1:d5:c8:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:e1:05:e0:c8:68:6b:0b:bb:71:33:04:2d:
66:75:61:2e:ae:42:02:f0:24:b5:bb:e4:31:3f:65:
a9:9c:e3:d3:ec:fb:73:03:f1:c6:da:97:1b:f1:1d:
d3:b2:fd:67:7c:6e:4b:a8:bf:5e:6b:38:6c:ea:c3:
cd:83:72:30:4a:ea:ef:1c:1b:a6:ba:c0:bd:02:57:
46:7a:a0:2b:0a:c4:99:4c:51:9f:01:27:e1:56:15:
24:c8:b3:27:ce:69:bf:59:9c:86:8f:91:91:56:65:
72:d5:84:70:b6:8a:aa:d3:1f:e0:b6:70:4a:ee:5f:
37:4b:3f:7f:cf:f3:37:3e:b9:a1:07:f5:1c:af:e0:
cc:d9:9b:49:4d:4b:1f:1b:02:2e:a3:4e:58:bc:a0:
27:84:9b:3c:2c:ca:a1:3e:64:f6:65:e7:39:d1:2b:
98:d9:b3:1a:24:0a:d0:7c:7f:ce:c5:4d:b2:62:37:
9c:d1:76:c4:81:f1:c8:c4:1b:34:86:88:71:eb:88:
57:e7:04:e8:7c:a3:b3:a4:69:be:a1:64:f0:7d:b6:
22:af:53:3a:78:cd:e5:4a:4c:ae:cb:f3:6a:3e:fc:
7b:91:df:bf:3b:40:78:62:1e:55:d8:29:a9:44:ce:
59:60:32:d3:2d:24:6e:bb:db:dc:cb:11:2e:8f:32:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.192.0/18
212.39.32.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212632
Signature Algorithm: sha256WithRSAEncryption
16:b9:ed:5e:d2:68:c1:83:4f:54:eb:fd:f6:d3:69:9c:ae:ce:
11:93:e3:a6:41:1e:a1:ea:29:ee:f2:ce:b4:a6:ba:9e:9b:9c:
88:43:41:5c:e8:32:72:5d:ed:2c:44:62:a5:35:54:8c:1a:59:
1f:81:66:16:75:8d:8f:c9:9b:24:ce:38:f0:65:cc:69:25:5a:
5b:9d:60:db:f5:5e:dc:d4:aa:65:eb:f4:15:23:d1:58:09:ac:
0e:5d:a8:fe:aa:af:16:10:30:d8:ea:b8:b7:86:a5:66:66:58:
0d:9b:ec:8c:c8:52:db:c6:1e:02:3d:88:75:a0:02:99:7a:25:
8e:a8:d4:e7:3c:c1:61:7b:a0:0d:ff:c7:1f:35:15:7e:07:94:
59:39:21:87:c4:cd:e4:74:ce:94:29:ac:e7:66:8c:56:6d:57:
3f:ca:58:77:76:88:e1:70:d7:0c:0f:d3:ab:5f:98:43:93:1a:
6c:56:2b:a5:c9:13:47:86:c6:f8:8d:f1:00:24:e0:29:d4:51:
3a:75:c9:f5:7f:31:c7:3f:b3:80:65:c3:53:b5:09:f8:be:2b:
d5:63:88:1b:71:4b:e2:6e:6d:cc:3e:4a:36:1f:f8:cd:63:83:
82:7d:17:1a:6f:b4:8a:7e:c2:39:e5:af:60:00:41:0a:42:9e:
a7:49:08:e3
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzFblNFKRF6MzJ2k6HVyCrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTJkYzdiZGJjOWQwOTczMzZkZTYyNDNiNTUwYWIxNzMzNzVlYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6fhBeDIaGsLu3EzBC1mdWEurkIC
8CS1u+QxP2WpnOPT7PtzA/HG2pcb8R3Tsv1nfG5LqL9eazhs6sPNg3IwSurvHBum
usC9AldGeqArCsSZTFGfASfhVhUkyLMnzmm/WZyGj5GRVmVy1YRwtoqq0x/gtnBK
7l83Sz9/z/M3PrmhB/Ucr+DM2ZtJTUsfGwIuo05YvKAnhJs8LMqhPmT2Zec50SuY
2bMaJArQfH/OxU2yYjec0XbEgfHIxBs0hohx64hX5wTofKOzpGm+oWTwfbYir1M6
eM3lSkyuy/NqPvx7kd+/O0B4Yh5V2CmpRM5ZYDLTLSRuu9vcyxEujzLAQQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKktx728nQlzNt5iQ7VQqxczdeo5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzBiNDYy
OS0zOWNjLTRlNmMtOWUxYy05OTFiN2FlZTc0NmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMGI0NjI5
LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2Yy8xL3FTM0h2YnlkQ1hNMjNtSkR0
VkNyRnpOMTZqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQGwcLAAwQF1CcgMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwM+mDANBgkqhkiG9w0BAQsFAAOCAQEAFrntXtJowYNPVOv99tNpnK7O
EZPjpkEeoeop7vLOtKa6npuciENBXOgycl3tLERipTVUjBpZH4FmFnWNj8mbJM44
8GXMaSVaW51g2/Ve3NSqZev0FSPRWAmsDl2o/qqvFhAw2Oq4t4alZmZYDZvsjMhS
28YeAj2IdaACmXoljqjU5zzBYXugDf/HHzUVfgeUWTkhh8TN5HTOlCms52aMVm1X
P8pYd3aI4XDXDA/Tq1+YQ5MabFYrpckTR4bG+I3xACTgKdRROnXJ9X8xxz+zgGXD
U7UJ+L4r1WOIG3FL4m5tzD5KNh/4zWODgn0XGm+0in7COeWvYABBCkKep0kI4w==
-----END CERTIFICATE-----
Generated at Fri May 3 07:30:50 2024 by rpki-client on console-ams.rpki-client.org