Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer (raw, json)
Hash identifier: 24rYj+BJReOyTvc5HHwaLXTglk7fjPYR84rR1hxETrw=
Subject key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70B28580DA0F78DC2D7A765FA6FC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.91.64.0/22
IP: 2a05:e880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:28:58:0d:a0:f7:8d:c2:d7:a7:65:fa:6f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:1e:55:bf:88:84:2d:c0:e0:d0:62:8e:0d:
1f:8a:12:f2:73:75:ea:fe:1e:ed:d6:37:e6:a7:ba:
75:11:3d:d2:02:48:17:b6:79:e5:15:cb:3e:dc:4f:
67:c8:bd:8a:83:0a:57:d9:65:57:cb:a0:82:aa:07:
d0:a3:60:91:97:70:2e:74:cb:29:4e:e8:7a:21:5b:
93:10:06:c5:e3:f1:90:b8:36:1e:7b:c4:e5:35:61:
30:90:9b:76:72:2d:6d:80:31:a8:e1:a0:fd:48:2a:
bd:99:25:24:32:20:ca:a5:95:e7:c8:1a:e4:88:93:
7e:35:89:df:80:b1:a4:b5:01:5c:aa:e8:90:f4:d7:
06:e8:75:93:a3:c0:b0:43:3d:54:0f:27:c3:50:5c:
ac:1d:8b:e4:63:48:83:9e:c6:7f:3a:a1:15:59:3b:
1b:bf:82:2a:b4:1c:fb:70:d7:ec:50:23:e9:50:ae:
11:ea:0f:94:2e:95:4c:15:37:73:8f:eb:29:0e:eb:
34:4a:ae:67:6a:50:46:1e:54:f1:f4:03:ca:3b:f3:
25:99:d6:7d:c2:14:dd:84:eb:ed:15:a1:4c:a4:46:
df:b7:13:62:24:3b:c2:5b:d7:75:63:68:b2:72:4f:
34:f0:35:f1:cf:5e:5f:7f:8e:26:6c:0a:3d:59:8b:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.64.0/22
IPv6:
2a05:e880::/29
Signature Algorithm: sha256WithRSAEncryption
45:f9:86:9e:a7:63:10:bb:d4:87:71:43:cd:35:92:55:86:d4:
bb:a4:c6:4b:22:a0:96:b4:90:48:03:ad:c7:1d:05:5a:85:dc:
9a:aa:a0:bd:5f:6f:a0:07:0d:df:3b:48:72:d0:27:1b:48:72:
65:00:ee:8d:89:f8:5e:9c:2d:e7:78:77:db:89:00:98:d4:db:
90:f6:dd:c1:1f:2e:81:ea:33:4c:53:da:38:46:ac:a0:c8:6b:
80:7c:c6:c6:83:1f:45:e5:ff:20:16:cf:48:9b:0b:c7:c3:2c:
93:80:b6:0e:56:df:3f:48:f3:8f:8d:1b:13:eb:94:8a:45:af:
19:b1:77:cd:48:22:b2:7f:db:09:92:36:43:d9:52:49:91:df:
d8:c6:35:0d:de:d3:a7:f8:71:7d:15:6f:ab:ad:d5:f9:b9:a7:
6d:92:e0:f3:cd:60:dc:60:90:41:db:44:ab:39:01:2a:da:0c:
32:2e:2f:b4:bf:5a:42:1a:0c:62:ca:c9:84:c3:33:a0:21:cb:
c7:0f:16:78:7c:d1:c7:9a:f4:fe:25:cd:95:7d:ac:15:ea:cc:
6a:85:48:00:e4:b4:cf:dc:ec:50:1b:51:4a:6b:40:29:d2:12:
85:fa:75:78:83:db:07:32:3e:58:a1:c6:a8:f0:cc:c7:e1:73:
a8:6c:8d:17
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzDtwsoWA2g943C16dl+m/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQ4MGNmMThmZDc4NTlkZjlhZDk5Nzk0MDAxM2E5OWI4ZGVlMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbIeVb+IhC3A4NBijg0fihLyc3Xq
/h7t1jfmp7p1ET3SAkgXtnnlFcs+3E9nyL2KgwpX2WVXy6CCqgfQo2CRl3AudMsp
Tuh6IVuTEAbF4/GQuDYee8TlNWEwkJt2ci1tgDGo4aD9SCq9mSUkMiDKpZXnyBrk
iJN+NYnfgLGktQFcquiQ9NcG6HWTo8CwQz1UDyfDUFysHYvkY0iDnsZ/OqEVWTsb
v4IqtBz7cNfsUCPpUK4R6g+ULpVMFTdzj+spDus0Sq5nalBGHlTx9APKO/MlmdZ9
whTdhOvtFaFMpEbftxNiJDvCW9d1Y2iyck808DXxz15ff44mbAo9WYsUWwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKlIDPGP14Wd+a2ZeUABOpm43uN0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2EzOTEz
OC1mNGYxLTQyNTktYTRiOS1hY2Q4N2M1NDYwNDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTM5MTM4
LWY0ZjEtNDI1OS1hNGI5LWFjZDg3YzU0NjA0OC8xL3FVZ004WV9YaFozNXJabDVR
QUU2bWJqZTQzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVtAMA0EAgACMAcDBQMqBeiAMA0GCSqGSIb3
DQEBCwUAA4IBAQBF+Yaep2MQu9SHcUPNNZJVhtS7pMZLIqCWtJBIA63HHQVahdya
qqC9X2+gBw3fO0hy0CcbSHJlAO6NifhenC3neHfbiQCY1NuQ9t3BHy6B6jNMU9o4
RqygyGuAfMbGgx9F5f8gFs9ImwvHwyyTgLYOVt8/SPOPjRsT65SKRa8ZsXfNSCKy
f9sJkjZD2VJJkd/YxjUN3tOn+HF9FW+rrdX5uadtkuDzzWDcYJBB20SrOQEq2gwy
Li+0v1pCGgxiysmEwzOgIcvHDxZ4fNHHmvT+Jc2VfawV6sxqhUgA5LTP3OxQG1FK
a0Ap0hKF+nV4g9sHMj5Yocao8MzH4XOobI0X
-----END CERTIFICATE-----
Generated at Fri May 3 09:37:57 2024 by rpki-client on console-ams.rpki-client.org