Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer (raw, json)
Hash identifier: lu+MKgZvNYFn2GKGU+nrwsiQ5Ws5lO9NP2rMfk25vro=
Subject key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4E041313E35DEC9DF7D3B23CADD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216286
IP: 91.199.2.0/24
IP: 2a13:e440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4e:04:13:13:e3:5d:ec:9d:f7:d3:b2:3c:ad:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:99:bc:52:48:63:84:6f:6f:f2:c4:6f:ff:
9e:af:a1:d1:0a:56:ec:90:6b:76:41:c8:c5:37:5a:
7a:4c:b2:44:b6:65:31:f5:7a:66:79:25:4a:d4:02:
78:bd:65:c2:9b:97:1f:8f:2e:bd:b7:92:7c:60:8e:
83:89:1f:7a:c7:03:c6:ad:c1:8f:5c:80:8d:10:9a:
f7:27:59:c6:b6:d6:7b:69:52:d4:09:dc:fd:b2:97:
be:b4:56:89:1a:aa:1d:37:c3:da:37:69:65:97:1b:
0d:22:16:3e:49:8a:d5:5b:4c:2d:01:ed:96:48:a7:
8c:f9:58:1f:c1:dc:15:53:b1:2a:35:d0:85:c4:0e:
66:ee:21:52:e2:9a:cc:8c:fa:32:ef:cc:25:a1:af:
31:98:c1:9d:eb:bd:a9:13:b8:06:7b:c0:f7:63:e0:
bf:7e:d6:fd:4f:a3:3e:8b:17:12:f2:db:94:4c:2e:
50:96:71:b5:ec:45:02:85:47:da:79:91:26:1e:3a:
b0:c2:e9:1f:2c:e4:ba:06:e6:9f:77:5d:c4:22:b9:
6b:4b:52:c9:f3:3b:39:93:8f:5f:f8:17:45:82:8c:
66:df:96:b2:ec:8c:31:60:d7:18:58:cc:8d:bd:9b:
35:09:e7:3a:47:ec:f7:74:e1:e1:6c:c8:76:08:c6:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.2.0/24
IPv6:
2a13:e440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216286
Signature Algorithm: sha256WithRSAEncryption
1f:bf:ed:c0:eb:8f:71:f7:e3:f2:e8:2a:b5:ae:66:f0:77:31:
f2:6c:07:8e:f4:ba:d5:62:f6:5b:5c:8b:4b:ee:33:f0:dd:e4:
d5:26:bd:ff:59:23:af:57:a8:f8:e6:cd:e2:db:53:4f:8e:aa:
9d:9d:24:31:6a:e6:e6:07:1b:17:71:a9:0c:09:c3:5b:cc:5c:
85:55:6a:7b:39:6b:a9:9a:64:c1:d1:f7:6b:11:14:36:34:79:
63:7a:0a:66:2a:a5:39:1a:bf:cd:c9:8e:f1:f2:ee:e4:12:45:
ba:1f:5a:57:59:d6:48:91:fe:86:c4:bb:4c:ba:ed:d3:f1:1f:
f0:d9:75:bc:0f:b5:e3:6d:44:67:4c:99:b2:74:7c:17:a1:e9:
44:c7:77:32:88:4a:1c:c5:e3:6f:73:99:e2:0a:07:2e:98:16:
ed:c5:b3:5c:19:c2:95:16:11:00:0e:d1:c6:ce:5e:1f:5e:b9:
51:7e:75:f3:c3:5d:94:14:f1:db:05:67:a4:29:d2:e9:81:3a:
4c:4d:ae:62:b8:5c:c7:d7:77:19:e8:59:fa:73:4b:18:17:cf:
59:f3:6a:08:b9:a3:e5:29:db:9c:86:31:2b:41:5f:c7:cc:4a:
32:7a:db:29:4b:89:2c:93:28:2b:43:bc:ab:b8:6f:d9:7e:d3:
8b:49:91:48
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzC204EExPjXeyd99OyPK3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQ2YjE3MTIzM2YyMGIzN2U2MWEzYTFmZjU5ZWE1NTNiY2YyMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mWZvFJIY4Rvb/LEb/+er6HRClbs
kGt2QcjFN1p6TLJEtmUx9XpmeSVK1AJ4vWXCm5cfjy69t5J8YI6DiR96xwPGrcGP
XICNEJr3J1nGttZ7aVLUCdz9spe+tFaJGqodN8PaN2lllxsNIhY+SYrVW0wtAe2W
SKeM+VgfwdwVU7EqNdCFxA5m7iFS4prMjPoy78wloa8xmMGd672pE7gGe8D3Y+C/
ftb9T6M+ixcS8tuUTC5QlnG17EUChUfaeZEmHjqwwukfLOS6Buafd13EIrlrS1LJ
8zs5k49f+BdFgoxm35ay7IwxYNcYWMyNvZs1Cec6R+z3dOHhbMh2CMYhdQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKnWsXEjPyCzfmGjof9Z6lU7zyHTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5Lzg5Njkx
NC00MWIxLTRiNjctOWRiNC0wOTVkY2UwZTAxOWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvODk2OTE0
LTQxYjEtNGI2Ny05ZGI0LTA5NWRjZTBlMDE5ZS8xL3FkYXhjU01fSUxOLVlhT2hf
MW5xVlR2UElkTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW8cCMA0EAgACMAcDBQMqE+RAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNM3jANBgkqhkiG9w0BAQsFAAOCAQEAH7/twOuPcffj
8ugqta5m8Hcx8mwHjvS61WL2W1yLS+4z8N3k1Sa9/1kjr1eo+ObN4ttTT46qnZ0k
MWrm5gcbF3GpDAnDW8xchVVqezlrqZpkwdH3axEUNjR5Y3oKZiqlORq/zcmO8fLu
5BJFuh9aV1nWSJH+hsS7TLrt0/Ef8Nl1vA+1421EZ0yZsnR8F6HpRMd3MohKHMXj
b3OZ4goHLpgW7cWzXBnClRYRAA7Rxs5eH165UX5188NdlBTx2wVnpCnS6YE6TE2u
Yrhcx9d3GehZ+nNLGBfPWfNqCLmj5SnbnIYxK0Ffx8xKMnrbKUuJLJMoK0O8q7hv
2X7Ti0mRSA==
-----END CERTIFICATE-----
Generated at Fri May 3 08:19:50 2024 by rpki-client on console-fra.rpki-client.org