Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.cer (raw, json)
Hash identifier: sBqdY+0jzw1FxmlsO3uC/mn25Yh41v4KVRYk8T92uQI=
Subject key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4AC4E85F3914625D7FB478F6BC31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.195.80.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4a:c4:e8:5f:39:14:62:5d:7f:b4:78:f6:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:f7:25:70:70:f1:ce:ab:cb:15:ff:df:c0:
63:05:9c:32:5d:c5:35:21:db:09:08:ba:69:09:0d:
9f:10:97:ec:c6:55:dc:6b:d0:66:d2:17:e4:3d:86:
29:2c:ed:95:29:50:cd:60:a7:bb:79:06:a1:40:71:
9f:2d:8e:89:dc:92:23:f1:3f:57:10:12:66:fa:ad:
ce:40:10:ed:55:fd:8c:69:d7:ca:3e:3d:ff:eb:27:
d5:cc:ae:93:7a:71:57:d3:c7:f9:df:69:69:16:8e:
83:bf:62:b7:03:6e:0a:f4:91:54:a8:3e:a1:97:d5:
d0:db:09:5e:63:a9:28:36:63:4c:21:7b:2b:3b:71:
9b:36:2e:8b:f6:fc:df:f7:07:63:27:52:97:02:6b:
fd:0b:1e:95:14:6e:5c:02:04:80:e6:4b:61:f2:ac:
f1:ef:cc:66:01:20:76:39:e8:0d:fb:5a:19:26:71:
c2:cb:3f:e2:40:10:f3:5a:e5:74:26:95:a4:41:d3:
e8:c6:4d:8b:ba:19:bf:5c:6b:05:23:c5:f1:aa:5a:
9c:6d:01:c5:4b:d5:fc:ea:ef:46:47:7a:5d:00:41:
ab:49:2a:6a:2a:33:e1:d0:88:ec:6c:17:7d:fa:1e:
e6:60:0d:9e:5d:07:cd:f0:5f:e8:fe:6d:6a:f4:07:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:a4:be:de:81:94:91:b4:9f:19:e9:18:56:0c:16:19:f7:a7:
bc:05:86:97:c8:9a:e7:c1:a1:12:9f:bf:23:e5:e2:fb:4b:a5:
76:23:0f:1e:e2:af:6e:01:d5:1b:e6:0f:1d:f8:cd:73:37:10:
c8:eb:1d:3b:87:b7:22:8b:1f:bc:22:b3:61:0a:fe:9a:47:d1:
70:39:25:ce:d3:99:5e:cb:ca:19:bf:1b:e3:35:f9:95:82:82:
1f:4e:f9:22:64:0d:2a:07:ef:a2:d5:37:46:e2:f9:5b:08:ab:
3a:e7:2d:4e:db:f2:8b:66:44:80:95:52:ba:3c:59:fc:89:08:
1b:9c:18:b5:2e:bf:42:b3:74:2e:f8:8d:52:dd:39:13:23:3f:
4c:4b:21:e8:f1:ec:d5:69:cb:0c:e1:01:94:7e:0e:03:2f:60:
4c:4e:fe:9f:66:ba:1f:7c:1a:20:4d:88:aa:b9:97:fa:d8:d4:
be:3f:2e:7f:fc:af:74:71:8b:6a:7e:26:a4:35:bf:77:e4:5e:
b0:55:37:8f:87:92:8a:b8:6a:10:2b:89:d0:2e:db:76:e3:8d:
7c:c5:31:31:d6:93:07:f4:5a:fe:88:ef:75:15:72:6e:75:02:
c8:27:03:ec:d4:dc:f2:1a:09:20:e5:e1:aa:7f:a9:f7:e0:cb:
fd:36:62:a1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzF3ErE6F85FGJdf7R49rwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMxYzk4ZTNjYWI4MjFjODRkZGVmZjIwNjllMDIyNTliZDZlNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjv3JXBw8c6ryxX/38BjBZwyXcU1
IdsJCLppCQ2fEJfsxlXca9Bm0hfkPYYpLO2VKVDNYKe7eQahQHGfLY6J3JIj8T9X
EBJm+q3OQBDtVf2MadfKPj3/6yfVzK6TenFX08f532lpFo6Dv2K3A24K9JFUqD6h
l9XQ2wleY6koNmNMIXsrO3GbNi6L9vzf9wdjJ1KXAmv9Cx6VFG5cAgSA5kth8qzx
78xmASB2OegN+1oZJnHCyz/iQBDzWuV0JpWkQdPoxk2Luhm/XGsFI8XxqlqcbQHF
S9X86u9GR3pdAEGrSSpqKjPh0IjsbBd9+h7mYA2eXQfN8F/o/m1q9AfmjQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKoxyY48q4IchN3v8gaeAiWb1uYcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzRiMWQ1
Ni1kMjVmLTRmNjQtOGEwYy0wNWJmZjMxYzUzZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNGIxZDU2
LWQyNWYtNGY2NC04YTBjLTA1YmZmMzFjNTNmZS8xL3FqSEpqanlyZ2h5RTNlX3lC
cDRDSlp2VzVody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW8NQMA0GCSqGSIb3DQEBCwUAA4IBAQCkpL7e
gZSRtJ8Z6RhWDBYZ96e8BYaXyJrnwaESn78j5eL7S6V2Iw8e4q9uAdUb5g8d+M1z
NxDI6x07h7ciix+8IrNhCv6aR9FwOSXO05ley8oZvxvjNfmVgoIfTvkiZA0qB++i
1TdG4vlbCKs65y1O2/KLZkSAlVK6PFn8iQgbnBi1Lr9Cs3Qu+I1S3TkTIz9MSyHo
8ezVacsM4QGUfg4DL2BMTv6fZroffBogTYiquZf62NS+Py5//K90cYtqfiakNb93
5F6wVTePh5KKuGoQK4nQLtt24418xTEx1pMH9Fr+iO91FXJudQLIJwPs1NzyGgkg
5eGqf6n34Mv9NmKh
-----END CERTIFICATE-----
Generated at Fri May 3 09:38:05 2024 by rpki-client on console-ams.rpki-client.org