Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
File: GQNkfvskNmLlfmHU7EW0olo36sg.cer (raw, json)
Hash identifier: ZhbUbzwLvLv7WbAX5l8g/xrKcjlNFR0SQ3DtGZHLR3M=
Subject key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349355830E9470ABB21C6643A2BD87B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25538
IP: 91.210.72.0/22
IP: 193.110.90.0/24
IP: 217.10.0.0/20
IP: 2001:1410::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:35:58:30:e9:47:0a:bb:21:c6:64:3a:2b:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:86:15:57:c6:57:5f:90:91:5c:52:55:35:
65:9b:25:a9:bf:75:e7:d3:d6:02:12:06:71:32:4f:
4d:fb:9e:52:09:14:ad:3d:5f:9b:63:ac:bb:6e:94:
1c:4d:51:7e:ba:ec:e0:07:0b:33:65:38:6e:4f:cc:
c7:a5:49:55:f0:f1:14:b0:ff:cd:c0:85:fb:84:30:
ac:8c:64:d0:f0:2b:1c:25:b9:82:04:05:56:b1:49:
6f:d9:1a:62:b7:c2:54:19:30:17:e0:11:cc:68:6d:
7c:71:d3:bb:e2:92:78:ee:a3:bf:53:54:4e:57:52:
ca:2f:35:fe:1a:9d:d4:11:72:00:1a:d9:b7:f0:bd:
9d:ab:cf:3e:4f:22:28:d5:5b:a5:cc:c8:ba:5b:0f:
74:a4:8d:cc:dc:83:b5:4f:2f:42:61:84:d4:85:16:
bf:29:e8:c3:9e:ff:d3:25:d4:35:5c:23:34:ee:18:
ed:6f:62:4a:a3:cc:d0:55:2d:66:48:18:16:fa:aa:
c8:7e:7c:81:59:91:cc:ea:eb:27:27:d6:81:c1:5e:
67:20:2d:42:04:04:87:4f:c2:d1:a9:55:40:e6:d3:
65:a2:e4:55:cd:f7:9f:51:6c:76:d6:e0:4c:d1:c8:
14:35:5b:a1:e1:b0:b0:ca:5b:fb:50:4e:a4:47:d1:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.72.0/22
193.110.90.0/24
217.10.0.0/20
IPv6:
2001:1410::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25538
Signature Algorithm: sha256WithRSAEncryption
53:3f:97:0a:96:08:22:fd:4c:36:39:56:6b:4a:03:a1:b8:67:
3b:b6:96:fa:c2:59:98:bd:f1:30:6b:8f:eb:a5:89:0c:57:ff:
cd:7c:7f:44:02:b8:b3:22:7b:7a:c5:17:6c:26:e8:e6:80:b4:
75:94:69:c6:94:dd:01:2e:5b:33:9e:2b:0a:08:49:2f:1d:b7:
42:9d:cd:6b:f4:a3:4a:01:76:31:15:b6:df:aa:34:4c:79:f4:
52:c6:0d:40:86:de:1d:da:9c:cd:6b:47:8b:a9:7a:3a:09:8a:
94:4b:0c:65:3a:45:78:d2:5f:39:1f:c2:6d:4a:e9:c6:8d:10:
ad:b2:5a:79:82:83:be:a9:d7:83:51:61:9e:11:4d:00:ab:26:
91:c6:75:83:ed:d6:58:a2:a1:79:2f:92:ff:b9:17:91:e4:7b:
7b:3e:2e:9f:4f:c5:73:44:a8:f0:38:1c:18:78:ea:c9:c8:b6:
0d:4a:c5:28:83:98:6f:f5:df:a1:b2:b6:55:ff:09:74:e7:37:
af:7c:c5:3a:80:fe:51:6d:15:f8:fc:51:83:27:92:97:0a:c4:
a9:56:70:4d:0b:6e:38:47:1b:63:d4:b1:fb:61:97:90:56:36:
04:c0:10:d5:bb:96:74:4f:a0:60:a0:62:75:1d:25:59:77:eb:
cc:42:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:15:08 2024 by rpki-client on console-fra.rpki-client.org