Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qbgpjZsVbAla0UYELIOLm5Lr6dw.cer
File: qbgpjZsVbAla0UYELIOLm5Lr6dw.cer (raw, json)
Hash identifier: 8AkJyWTb7ASifjskBkHqlIUtFZgw2x8ZPiMREO8J6tg=
Subject key identifier: A9:B8:29:8D:9B:15:6C:09:5A:D1:46:04:2C:83:8B:9B:92:EB:E9:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCE65246DB56E12144C737D561279B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/qbgpjZsVbAla0UYELIOLm5Lr6dw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51745
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e6:52:46:db:56:e1:21:44:c7:37:d5:61:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9b8298d9b156c095ad146042c838b9b92ebe9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:0e:ba:b4:e5:c6:17:31:40:da:ff:0c:af:
37:b1:0c:e1:b1:04:e9:b9:07:ce:71:2e:08:2c:b9:
cf:75:f3:fa:b9:9b:60:c6:85:4b:6f:4a:92:ff:b7:
58:e8:4f:96:9b:78:26:43:54:bb:a5:7f:27:0f:da:
67:11:f4:93:d9:f2:00:03:e3:0e:64:db:fb:8b:05:
78:f5:f8:36:aa:92:d9:b6:ff:4c:64:06:b0:1a:8f:
98:78:ef:1e:df:40:13:bd:78:0a:f0:a6:ca:f7:7b:
1b:f0:95:e6:71:35:8e:7b:76:40:54:91:00:87:10:
81:b6:f3:0f:f1:22:6e:e2:64:d3:a4:dd:88:48:b0:
5d:d1:9e:a9:15:d7:d5:5f:e4:5e:82:87:fb:57:f4:
68:49:f6:8a:77:7f:dd:f3:52:35:85:cb:4b:8a:c9:
b6:cd:d6:29:c3:06:c2:a7:bd:1f:b4:2a:b2:31:23:
15:48:f7:bc:1a:93:22:b2:05:34:95:f8:3b:03:ae:
a2:fe:ad:ab:e0:09:8d:f5:6b:60:66:5f:bd:78:13:
e8:e5:be:74:68:08:ec:93:6c:17:87:3e:a3:95:61:
b4:b8:ef:73:fe:5f:3e:99:d9:88:81:96:30:9d:9a:
48:57:63:de:cf:41:24:a6:5e:60:c7:33:eb:b1:58:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B8:29:8D:9B:15:6C:09:5A:D1:46:04:2C:83:8B:9B:92:EB:E9:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d00cfc-8820-43de-8675-1fa7bc5478f6/1/qbgpjZsVbAla0UYELIOLm5Lr6dw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51745
Signature Algorithm: sha256WithRSAEncryption
1d:ad:8f:15:bd:9c:c5:e3:26:a5:94:62:99:dd:b2:39:46:b1:
e0:de:d1:6f:5b:5c:91:ab:f0:e0:d0:d8:e1:99:28:10:77:27:
3a:92:36:96:82:8e:a0:b3:da:54:e4:25:db:e2:32:53:e0:a1:
58:02:47:9e:93:a1:0c:ab:c6:0f:32:12:a5:81:40:01:15:91:
05:68:bc:b7:83:e3:1f:04:25:28:8a:1e:2c:f0:8e:a8:e7:19:
23:4c:43:1e:e8:b0:3e:c6:b5:4e:2c:63:5b:5b:07:7e:35:3f:
ec:05:91:59:10:65:c3:f9:c1:a6:30:05:f8:7d:ac:6a:67:84:
cf:74:29:48:cf:ee:2d:40:15:4d:35:d5:2c:f7:4c:a2:53:6d:
3b:c4:bb:ac:40:ae:25:6f:b4:2f:80:14:93:8f:01:bf:57:22:
dd:5d:28:c2:3b:eb:95:1f:29:ba:f3:b8:83:88:6e:0f:7c:d2:
e8:65:1a:99:c7:9b:c7:64:4f:fa:19:b4:f1:aa:2c:f0:c4:b7:
d3:85:49:26:a5:29:82:eb:4c:e2:2a:8a:04:c9:f6:41:9f:9b:
fb:6a:f0:e9:39:54:16:86:da:90:68:20:08:9d:09:69:a6:d9:
fb:c8:eb:4f:56:c7:f7:19:e0:c4:41:c9:48:56:31:4c:04:0c:
28:e2:24:b4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzJvOZSRttW4SFExzfVYSebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzNDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWI4Mjk4ZDliMTU2YzA5NWFkMTQ2MDQyYzgzOGI5YjkyZWJlOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4IOurTlxhcxQNr/DK83sQzhsQTp
uQfOcS4ILLnPdfP6uZtgxoVLb0qS/7dY6E+Wm3gmQ1S7pX8nD9pnEfST2fIAA+MO
ZNv7iwV49fg2qpLZtv9MZAawGo+YeO8e30ATvXgK8KbK93sb8JXmcTWOe3ZAVJEA
hxCBtvMP8SJu4mTTpN2ISLBd0Z6pFdfVX+Regof7V/RoSfaKd3/d81I1hctLism2
zdYpwwbCp70ftCqyMSMVSPe8GpMisgU0lfg7A66i/q2r4AmN9WtgZl+9eBPo5b50
aAjsk2wXhz6jlWG0uO9z/l8+mdmIgZYwnZpIV2Pez0Ekpl5gxzPrsVjkgQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKm4KY2bFWwJWtFGBCyDi5uS6+ncMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2QwMGNm
Yy04ODIwLTQzZGUtODY3NS0xZmE3YmM1NDc4ZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvZDAwY2Zj
LTg4MjAtNDNkZS04Njc1LTFmYTdiYzU0NzhmNi8xL3FiZ3BqWnNWYkFsYTBVWUVM
SU9MbTVMcjZkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDKITANBgkqhkiG9w0BAQsFAAOCAQEAHa2PFb2cxeMm
pZRimd2yOUax4N7Rb1tckavw4NDY4ZkoEHcnOpI2loKOoLPaVOQl2+IyU+ChWAJH
npOhDKvGDzISpYFAARWRBWi8t4PjHwQlKIoeLPCOqOcZI0xDHuiwPsa1TixjW1sH
fjU/7AWRWRBlw/nBpjAF+H2sameEz3QpSM/uLUAVTTXVLPdMolNtO8S7rECuJW+0
L4AUk48Bv1ci3V0owjvrlR8puvO4g4huD3zS6GUamcebx2RP+hm08aos8MS304VJ
JqUpgutM4iqKBMn2QZ+b+2rw6TlUFobakGggCJ0JaabZ+8jrT1bH9xngxEHJSFYx
TAQMKOIktA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:38:01 2024 by rpki-client on console-ams.rpki-client.org