Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer (raw, json)
Hash identifier: HVHVvExmUZpDiGaJdVgijajHW3HVtWACgnRgwxTvpxY=
Subject key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4A6B843568AD913CC5CF31E6AEC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 78.31.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:6b:84:35:68:ad:91:3c:c5:cf:31:e6:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:ca:40:35:fc:d6:2a:ef:3f:88:e9:69:72:
db:a3:84:58:d0:78:04:54:2b:6c:86:20:f5:0b:fa:
bb:f4:4d:72:96:14:bc:78:fe:7a:82:f8:06:90:63:
36:6f:c9:70:d9:25:24:a2:20:fc:7f:60:57:b9:a3:
4a:ac:00:06:35:ad:c2:5c:d4:93:49:c2:0d:5e:5a:
10:d6:be:a1:43:1f:07:24:37:93:18:6d:d9:29:db:
74:4b:ec:c6:d0:db:b5:1a:0d:a9:62:b9:a7:73:d6:
d5:77:b2:d6:0b:72:9f:e9:86:8c:cf:40:e5:96:ad:
56:b0:bc:c2:0c:d4:5a:64:20:3d:56:2f:5c:aa:3f:
9e:f9:07:b4:13:70:55:a6:ac:d7:f8:67:f5:d0:e3:
11:f9:88:b0:28:79:9b:d2:e3:77:b1:43:35:25:8c:
25:d1:f9:a6:86:2d:77:40:eb:b6:d7:ca:4b:c4:21:
ef:96:98:df:79:a6:80:f9:f7:24:7c:08:9f:e2:9f:
67:f3:5d:1a:d3:15:3d:2a:57:1a:11:31:cc:ae:5c:
42:35:4f:06:1f:ba:84:81:3a:d6:e6:76:d2:2c:88:
a8:ba:d7:59:e0:29:c8:65:58:98:03:e2:b3:73:0d:
0d:63:9a:4d:e6:12:7c:5f:f6:de:c0:ec:b3:70:89:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.8.0/21
Signature Algorithm: sha256WithRSAEncryption
88:ca:32:77:7c:03:ab:84:8a:61:2b:19:28:3a:33:e4:28:f2:
9c:61:fb:22:7c:5d:2c:e4:4d:58:29:37:33:cb:b1:c7:d7:5f:
fb:f2:aa:95:93:12:0f:14:96:30:22:68:fc:60:11:a8:81:1f:
93:1f:0e:5c:16:8f:86:6d:9e:c1:e4:94:c6:3d:4f:47:bb:36:
74:78:e0:87:8f:3f:46:b1:54:cc:e4:88:46:1f:ad:25:03:ea:
7a:38:03:e4:8a:7b:b9:db:02:46:31:76:4a:9a:5b:a6:f1:29:
83:d2:a4:52:11:93:63:ac:db:fd:0e:02:2d:f7:47:35:d4:02:
29:96:96:e5:ec:55:9c:f0:57:0e:e7:df:8c:f1:d0:22:3a:23:
33:17:da:f8:d6:1c:4d:7a:0e:f3:f0:0d:a4:89:d6:c2:70:34:
f5:b8:1d:5a:74:82:1d:bb:55:c5:03:40:48:5c:04:ad:fe:a7:
41:e5:0b:91:d3:91:56:53:6b:14:1c:63:9f:63:58:9f:95:cc:
4c:5a:d7:0f:4b:e5:37:8b:6c:17:8b:8b:d5:5f:87:3c:99:02:
c0:c1:e1:71:c3:3a:ab:f9:fa:eb:f2:1e:c8:ae:3a:74:14:48:
2a:73:05:32:94:85:53:d4:12:5f:98:e1:88:8a:4d:34:c8:d2:
40:8e:13:8b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzC20prhDVorZE8xc8x5q7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWI3OTI0M2ZkYmY3YjM2NWMxZGJjMjNjOTBhOGJjY2IzYzM5NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQjKQDX81irvP4jpaXLbo4RY0HgE
VCtshiD1C/q79E1ylhS8eP56gvgGkGM2b8lw2SUkoiD8f2BXuaNKrAAGNa3CXNST
ScINXloQ1r6hQx8HJDeTGG3ZKdt0S+zG0Nu1Gg2pYrmnc9bVd7LWC3Kf6YaMz0Dl
lq1WsLzCDNRaZCA9Vi9cqj+e+Qe0E3BVpqzX+Gf10OMR+YiwKHmb0uN3sUM1JYwl
0fmmhi13QOu218pLxCHvlpjfeaaA+fckfAif4p9n810a0xU9KlcaETHMrlxCNU8G
H7qEgTrW5nbSLIioutdZ4CnIZViYA+Kzcw0NY5pN5hJ8X/bewOyzcIlutQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKm3kkP9v3s2XB28I8kKi8yzw5dRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzZhNjg0
Mi1jYjNmLTRmYjEtOTA2OS03ODYxMWVjOTRiNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvNmE2ODQy
LWNiM2YtNGZiMS05MDY5LTc4NjExZWM5NGI0NC8xL3FiZVNRXzJfZXpaY0hid2p5
UXFMekxQRGwxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDTh8IMA0GCSqGSIb3DQEBCwUAA4IBAQCIyjJ3
fAOrhIphKxkoOjPkKPKcYfsifF0s5E1YKTczy7HH11/78qqVkxIPFJYwImj8YBGo
gR+THw5cFo+GbZ7B5JTGPU9HuzZ0eOCHjz9GsVTM5IhGH60lA+p6OAPkinu52wJG
MXZKmlum8SmD0qRSEZNjrNv9DgIt90c11AIplpbl7FWc8FcO59+M8dAiOiMzF9r4
1hxNeg7z8A2kidbCcDT1uB1adIIdu1XFA0BIXASt/qdB5QuR05FWU2sUHGOfY1if
lcxMWtcPS+U3i2wXi4vVX4c8mQLAweFxwzqr+frr8h7Irjp0FEgqcwUylIVT1BJf
mOGIik00yNJAjhOL
-----END CERTIFICATE-----
Generated at Fri May 3 11:00:25 2024 by rpki-client on console-fra.rpki-client.org