Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
File: wqkR1pxPZFehCd53scdSSdxTDhc.cer (raw, json)
Hash identifier: naFxxtOmGntCOD1YJCraNMJTnhzt22f5g/EYv3CT+fs=
Subject key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942669F9CF421BF74604BEAE4E134CE5CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.98.210.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:f9:cf:42:1b:f7:46:04:be:ae:4e:13:4c:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:4e:c5:56:a3:e1:0d:a1:53:ff:a5:b3:a7:
06:d4:58:f1:01:a9:c7:5c:8b:85:50:9e:a4:63:82:
3b:3b:16:bc:d3:31:e3:a2:00:6c:2b:d6:32:9a:17:
16:1d:97:3f:d0:6c:30:53:82:61:28:42:a0:8e:b0:
f3:86:d5:8b:db:f5:c7:52:ab:65:f5:8a:a9:3a:67:
97:ba:50:2f:93:05:b0:60:07:16:fa:59:0f:33:ac:
6c:6c:76:9a:b3:0a:79:2d:13:3a:d8:9f:9e:f7:cb:
2d:10:f3:4f:81:20:d3:f5:34:48:64:9d:63:21:b0:
85:51:18:78:ba:7a:58:af:ec:c6:2d:ea:3d:13:3f:
9a:b9:11:ea:0a:bc:4c:c3:05:a5:19:94:9e:1c:9a:
42:2a:cb:f6:59:2b:52:61:c6:84:43:1c:8c:0f:0f:
61:9e:28:1e:fa:99:d8:ec:d1:32:9f:78:1c:88:35:
db:b4:80:ce:32:1f:be:bd:80:a1:9c:b4:bd:84:63:
0c:d2:e5:d4:0e:bf:31:8e:41:37:93:c0:01:fd:ea:
0a:e0:a9:8f:28:92:d4:f6:09:58:3e:c5:32:86:ac:
d9:2e:42:f3:b6:ed:17:81:ff:70:a1:22:c2:f9:a8:
3c:6d:7f:c7:ac:d9:22:e6:84:ae:b7:9e:ae:d2:f2:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:61:7e:f7:ca:67:4a:3b:4e:e8:0a:59:01:d7:44:3b:1c:16:
a2:a9:3f:48:c9:9a:47:f9:3d:46:3a:a5:d8:f0:e3:48:3a:4d:
83:f8:b0:55:e1:8d:fa:ca:7e:80:61:32:be:4b:9d:83:9f:3a:
c3:06:b3:3d:49:91:a0:c1:7a:26:81:46:b3:18:e9:71:27:00:
ce:00:ac:25:f6:67:2d:cb:b6:d2:c2:2f:5c:40:8d:df:91:31:
51:1e:bc:6f:9d:4d:5e:b4:2f:8c:39:b5:d1:f7:13:4f:fd:65:
ff:41:a7:ee:86:3d:ab:89:8b:34:df:bd:9e:ab:83:e3:a7:3e:
10:f2:09:9a:13:3e:71:c2:cf:8d:70:d2:57:25:44:3f:7c:cd:
8d:e6:d8:0b:62:86:82:8e:e3:54:0f:e6:8c:ad:ef:74:45:5c:
2e:38:5e:87:17:62:dd:3e:ea:b9:d9:c0:a2:8e:70:74:fd:cc:
8f:f2:ee:d6:cd:23:34:8f:6f:30:c6:e0:75:0b:3f:27:11:84:
4d:d1:c3:da:d4:5c:b0:09:1d:4c:bf:37:3d:e4:5b:0c:d1:cc:
da:4d:25:f2:9a:18:b0:d0:e3:d5:c2:4c:83:b8:be:e1:3b:92:
c3:96:6d:fb:ca:e9:c6:bf:cc:d3:66:90:31:3f:c8:8a:de:25:
2d:a9:73:32
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQmafnPQhv3RgS+rk4TTOXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmE5MTFkNjljNGY2NDU3YTEwOWRlNzdiMWM3NTI0OWRjNTMwZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLxOxVaj4Q2hU/+ls6cG1FjxAanH
XIuFUJ6kY4I7Oxa80zHjogBsK9YymhcWHZc/0GwwU4JhKEKgjrDzhtWL2/XHUqtl
9YqpOmeXulAvkwWwYAcW+lkPM6xsbHaaswp5LRM62J+e98stEPNPgSDT9TRIZJ1j
IbCFURh4unpYr+zGLeo9Ez+auRHqCrxMwwWlGZSeHJpCKsv2WStSYcaEQxyMDw9h
nige+pnY7NEyn3gciDXbtIDOMh++vYChnLS9hGMM0uXUDr8xjkE3k8AB/eoK4KmP
KJLU9glYPsUyhqzZLkLztu0Xgf9woSLC+ag8bX/HrNki5oSut56u0vIznQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMKpEdacT2RXoQned7HHUkncUw4XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2M2NTM1
ZC03MjFmLTQzMDEtOWQ4OS1mY2RhZDJiNTY1NmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvYzY1MzVk
LTcyMWYtNDMwMS05ZDg5LWZjZGFkMmI1NjU2Yi8xL3dxa1IxcHhQWkZlaENkNTNz
Y2RTU2R4VERoYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAjWLSMA0GCSqGSIb3DQEBCwUAA4IBAQBcYX73
ymdKO07oClkB10Q7HBaiqT9IyZpH+T1GOqXY8ONIOk2D+LBV4Y36yn6AYTK+S52D
nzrDBrM9SZGgwXomgUazGOlxJwDOAKwl9mcty7bSwi9cQI3fkTFRHrxvnU1etC+M
ObXR9xNP/WX/Qafuhj2riYs0372eq4Pjpz4Q8gmaEz5xws+NcNJXJUQ/fM2N5tgL
YoaCjuNUD+aMre90RVwuOF6HF2LdPuq52cCijnB0/cyP8u7WzSM0j28wxuB1Cz8n
EYRN0cPa1FywCR1Mvzc95FsM0czaTSXymhiw0OPVwkyDuL7hO5LDlm37yunGv8zT
ZpAxP8iK3iUtqXMy
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:35 2025 by rpki-client