Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.cer (raw, json)
Hash identifier: EOBmGmPSfMCXouAtnmEkds489fEXb9QRjQuiLTOGdXE=
Subject key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348A84D71023C66E186947B09AA030E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35223
IP: 82.117.0.0/19
IP: 193.168.168.0/22
IP: 2a03:5480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a8:4d:71:02:3c:66:e1:86:94:7b:09:aa:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:55:1e:0a:54:1a:65:a8:8e:21:1a:bf:ac:
92:24:a6:1b:9b:93:05:65:54:48:1e:42:6e:43:19:
ae:b0:16:60:3e:99:e2:a4:90:8a:6a:97:fd:b0:e0:
19:b8:e4:ee:5b:d0:7a:3b:9f:53:d0:ab:60:74:1d:
c1:2c:db:c2:ba:24:ec:b2:12:82:69:98:ce:04:f8:
80:53:29:98:38:2d:32:c3:7e:7e:8a:35:a1:d2:26:
da:c6:b9:c8:f9:21:47:1d:b5:69:e5:48:67:53:05:
7c:9d:15:8c:ef:a8:43:df:70:75:c7:b9:9e:89:83:
f3:fa:c3:2b:0a:69:07:fc:d7:e3:10:ad:3e:a7:7b:
b0:f9:cf:57:30:7f:ef:5a:96:e0:1e:be:00:54:97:
2b:74:c7:71:d7:c8:85:58:9a:51:aa:44:a0:7f:a9:
ad:08:05:e0:7a:ac:f0:82:ff:51:58:94:3b:37:1f:
60:6d:ae:24:65:fe:76:93:f6:31:d3:d0:72:4d:52:
4c:52:a2:d1:36:b5:d5:9a:78:fd:a0:86:c2:4e:26:
44:94:c0:d6:6d:42:f5:7c:6d:29:74:01:07:af:25:
a0:b0:98:10:ee:f3:f1:82:cc:14:4c:40:59:25:cc:
cb:87:74:53:29:74:f4:8e:e2:db:e4:67:44:c5:e7:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.0.0/19
193.168.168.0/22
IPv6:
2a03:5480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35223
Signature Algorithm: sha256WithRSAEncryption
35:00:51:41:3c:36:f7:1f:e5:40:12:65:f2:bc:2e:d5:d4:eb:
8b:58:4b:8b:ba:41:0f:2a:76:51:32:00:c5:41:ff:fd:1f:7e:
4c:67:49:1f:3f:34:10:ba:6a:5c:b4:50:26:cb:b0:b5:04:c9:
83:28:0f:1b:84:cd:9b:8d:de:79:3d:fb:9c:c1:f3:2c:04:0e:
6b:6e:5d:d1:a4:58:5a:3c:fe:2f:09:8b:4e:cc:c9:a4:14:ad:
ef:7d:82:d6:36:d6:1c:51:c0:e9:a5:06:b8:93:f9:6b:a8:08:
00:5f:12:c6:62:c0:78:ba:b9:0c:49:16:7d:c2:49:10:f8:91:
af:7a:11:8d:39:25:c2:8f:57:c5:39:c6:bc:72:fd:f9:69:08:
60:e3:ac:7e:2b:f9:69:cf:c7:21:f3:56:25:56:2f:04:e7:e5:
67:db:29:c8:46:66:34:35:29:bb:21:00:0a:9f:a1:e4:2c:d6:
25:2a:88:45:f1:35:5c:b5:fc:19:98:54:3e:ee:8f:d8:bd:2f:
79:32:0b:9f:1a:80:12:39:a8:7d:9f:f2:54:6c:73:1c:03:8f:
e1:e2:86:ce:1e:46:97:80:bd:1b:89:b0:5d:82:ae:05:7e:28:
87:54:d7:ae:4c:48:36:f9:30:d4:a2:56:c3:59:31:63:a3:d1:
c8:bb:9b:e6
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzDSKhNcQI8ZuGGlHsJqgMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTcwZmJiM2RiMjI4NDM3ZDYwNTc5OWFjNGY0NTk4ZDIyZTEzZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12pVHgpUGmWojiEav6ySJKYbm5MF
ZVRIHkJuQxmusBZgPpnipJCKapf9sOAZuOTuW9B6O59T0KtgdB3BLNvCuiTsshKC
aZjOBPiAUymYOC0yw35+ijWh0ibaxrnI+SFHHbVp5UhnUwV8nRWM76hD33B1x7me
iYPz+sMrCmkH/NfjEK0+p3uw+c9XMH/vWpbgHr4AVJcrdMdx18iFWJpRqkSgf6mt
CAXgeqzwgv9RWJQ7Nx9gba4kZf52k/Yx09ByTVJMUqLRNrXVmnj9oIbCTiZElMDW
bUL1fG0pdAEHryWgsJgQ7vPxgswUTEBZJczLh3RTKXT0juLb5GdExeemzwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFKpw+7PbIoQ31gV5msT0WY0i4T4bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2Q4ZTE4
NC1lNzliLTQ3ZmUtOTZkYy01YmE0MjM1Y2U2MTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZDhlMTg0
LWU3OWItNDdmZS05NmRjLTViYTQyMzVjZTYxOS8xL3FuRDdzOXNpaERmV0JYbWF4
UFJaalNMaFBocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQFUnUAAwQCwaioMA0EAgACMAcDBQMqA1SAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCJlzANBgkqhkiG9w0BAQsFAAOCAQEANQBR
QTw29x/lQBJl8rwu1dTri1hLi7pBDyp2UTIAxUH//R9+TGdJHz80ELpqXLRQJsuw
tQTJgygPG4TNm43eeT37nMHzLAQOa25d0aRYWjz+LwmLTszJpBSt732C1jbWHFHA
6aUGuJP5a6gIAF8SxmLAeLq5DEkWfcJJEPiRr3oRjTklwo9XxTnGvHL9+WkIYOOs
fiv5ac/HIfNWJVYvBOflZ9spyEZmNDUpuyEACp+h5CzWJSqIRfE1XLX8GZhUPu6P
2L0veTILnxqAEjmofZ/yVGxzHAOP4eKGzh5Gl4C9G4mwXYKuBX4oh1TXrkxINvkw
1KJWw1kxY6PRyLub5g==
-----END CERTIFICATE-----
Generated at Fri May 3 03:45:01 2024 by rpki-client on console-fra.rpki-client.org