Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.cer (raw, json)
Hash identifier: gFTBuJ7sz1iuNSBlJOBj6W2QWR60hx2ph0CGK5C4Anc=
Subject key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEAE15E04EB818E47A08880EFA0B03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207925
AS: 212109
IP: 193.143.226.0/24
IP: 2a10:8700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ae:15:e0:4e:b8:18:e4:7a:08:88:0e:fa:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5026c9974092e220542401281f9bdfd356c2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:a3:b2:15:20:c8:95:8b:1f:5b:71:fc:f8:
0c:75:ab:21:2b:9a:78:a8:45:f5:35:7b:a9:cd:22:
57:56:d7:c2:6e:f5:4f:15:ca:13:10:aa:ca:ba:35:
5c:4f:74:8c:7a:f5:b2:72:26:44:87:9f:24:92:25:
87:2a:ba:e2:86:16:37:fa:c0:e2:af:98:4d:69:4c:
0a:06:3f:18:52:9a:90:92:6b:3c:e0:59:21:11:a7:
97:5b:c7:b9:16:47:2a:65:88:7a:5c:ca:df:6b:11:
c7:76:df:bd:35:a4:e7:43:75:d1:28:81:10:52:12:
5a:2c:fb:dc:bc:30:7b:a1:f0:b9:1a:d1:e9:33:db:
ee:23:78:43:e3:3e:a7:0b:f4:9c:fd:83:91:cf:ce:
11:1f:82:1f:09:1f:9c:e4:ec:3a:f4:03:5a:68:fa:
57:0d:39:79:d2:e4:c5:de:96:27:99:de:f6:5a:41:
54:ad:84:2e:81:57:3e:36:23:c8:58:06:57:e6:ef:
15:e4:04:d1:62:37:f8:d6:61:f4:d0:1a:66:12:d4:
f3:f1:dd:81:9c:9d:49:5b:1c:c5:dc:b5:cb:0c:f4:
b4:a6:0e:ca:dc:08:a6:84:f9:65:4b:61:3c:31:12:
09:e5:ce:1d:7b:a5:92:20:a0:0a:d6:34:6b:e7:da:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.226.0/24
IPv6:
2a10:8700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207925
212109
Signature Algorithm: sha256WithRSAEncryption
1f:bb:ad:74:87:8b:00:4a:5b:83:1a:00:c7:f9:5f:39:65:f7:
5b:9e:21:bd:1b:8b:70:ba:18:55:45:4f:b2:1b:b1:4f:c0:d8:
d2:57:ee:e1:71:c5:d3:ba:a0:c9:4f:65:03:35:de:b4:a2:4c:
74:80:9f:6f:50:ef:7e:9e:6c:eb:04:27:2a:9f:cc:e3:3e:3c:
d6:0f:9f:68:8d:6c:30:3d:b7:13:1a:1e:86:84:0b:ca:04:2e:
59:ad:29:71:9c:59:28:9d:b4:5d:6e:f5:9a:2e:ba:48:8c:bd:
87:4f:8a:e2:33:1a:b9:92:ff:77:80:88:a9:63:f7:8f:15:3d:
51:61:b7:1f:4f:14:59:04:e4:b6:7c:a5:5e:da:43:40:e0:e8:
4f:e0:cc:6a:c2:71:54:b9:07:d3:2d:6a:09:2f:9c:10:f7:7b:
35:ce:36:4e:10:93:e9:60:1f:83:2d:09:82:29:58:8f:99:de:
cc:27:40:47:c2:37:7a:f9:09:9c:d6:dc:70:76:e0:fa:6a:4e:
db:58:4a:4d:15:54:69:1f:8f:d8:8a:d8:0e:61:42:27:e5:a8:
6e:15:4d:6f:d5:fc:2e:5d:d6:76:ce:85:e6:1b:14:e5:c8:da:
ca:93:ab:9f:d9:d8:31:cb:b3:55:6a:41:75:05:7a:19:70:2e:
ad:e8:eb:40
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYzI3q4V4E64GOR6CIgO+gsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTAyNmM5OTc0MDkyZTIyMDU0MjQwMTI4MWY5YmRmZDM1NmMyODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruKjshUgyJWLH1tx/PgMdashK5p4
qEX1NXupzSJXVtfCbvVPFcoTEKrKujVcT3SMevWyciZEh58kkiWHKrrihhY3+sDi
r5hNaUwKBj8YUpqQkms84FkhEaeXW8e5FkcqZYh6XMrfaxHHdt+9NaTnQ3XRKIEQ
UhJaLPvcvDB7ofC5GtHpM9vuI3hD4z6nC/Sc/YORz84RH4IfCR+c5Ow69ANaaPpX
DTl50uTF3pYnmd72WkFUrYQugVc+NiPIWAZX5u8V5ATRYjf41mH00BpmEtTz8d2B
nJ1JWxzF3LXLDPS0pg7K3AimhPllS2E8MRIJ5c4de6WSIKAK1jRr59pH4wIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFLUCbJl0CS4iBUJAEoH5vf01bChCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2FmNjIz
Mi1hNGY1LTQyNDQtOTQzNi1lZWEyNjdhNTg0OTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYWY2MjMy
LWE0ZjUtNDI0NC05NDM2LWVlYTI2N2E1ODQ5NC8xL3RRSnNtWFFKTGlJRlFrQVNn
Zm05X1RWc0tFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwY/iMA0EAgACMAcDBQMqEIcAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMsNQIDAzyNMA0GCSqGSIb3DQEBCwUAA4IBAQAfu610
h4sASluDGgDH+V85ZfdbniG9G4twuhhVRU+yG7FPwNjSV+7hccXTuqDJT2UDNd60
okx0gJ9vUO9+nmzrBCcqn8zjPjzWD59ojWwwPbcTGh6GhAvKBC5ZrSlxnFkonbRd
bvWaLrpIjL2HT4riMxq5kv93gIipY/ePFT1RYbcfTxRZBOS2fKVe2kNA4OhP4Mxq
wnFUuQfTLWoJL5wQ93s1zjZOEJPpYB+DLQmCKViPmd7MJ0BHwjd6+Qmc1txwduD6
ak7bWEpNFVRpH4/YitgOYUIn5ahuFU1v1fwuXdZ2zoXmGxTlyNrKk6uf2dgxy7NV
akF1BXoZcC6t6OtA
-----END CERTIFICATE-----
Generated at Fri May 3 02:17:16 2024 by rpki-client on console-ams.rpki-client.org