Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer (raw, json)
Hash identifier: N8MTiQIRdNrD3kDyZi1BzlPcmQOmjbhFoqsDQQiMiHk=
Subject key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423693CF069E5C487FBD77DC1EDD96965
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202223
IP: 185.49.164.0/22
IP: 2a01:a0e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:3c:f0:69:e5:c4:87:fb:d7:7d:c1:ed:d9:69:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:f5:37:eb:57:dc:d8:29:c1:62:d9:88:89:
05:4a:1c:c8:10:c0:01:5b:73:43:63:7b:73:6b:a6:
8e:bf:7c:77:da:5d:51:de:c7:4e:45:e1:04:4c:ef:
61:1d:ec:f2:26:4a:75:c5:8e:c6:3a:0b:24:fc:d3:
55:3c:71:65:c7:49:fe:7c:0e:22:09:98:c0:6c:be:
c7:be:a2:d9:51:71:c5:15:01:be:49:9c:2a:27:c0:
c0:4e:33:c5:eb:7a:a1:13:47:f7:cb:2a:ce:a0:e3:
92:f6:9b:db:52:8a:ea:32:36:77:6e:2a:cc:74:46:
49:69:5d:1f:7f:5c:bc:db:18:66:b2:44:d3:fc:f7:
84:10:01:3c:3c:87:fa:78:af:0f:84:f9:8f:2b:cd:
50:b2:aa:19:da:7f:3e:ec:b3:a8:49:07:8c:c1:ef:
7f:37:eb:99:ab:4f:12:70:a8:0f:35:eb:61:63:45:
6a:28:bb:fb:b6:4f:6f:88:78:2e:ca:5f:b8:46:ba:
77:a4:53:27:4e:2f:23:cf:9a:e5:70:06:d5:8b:a2:
70:09:dd:6d:f7:5c:ff:91:b3:86:8f:eb:e3:08:c5:
09:16:58:16:b1:14:54:0d:3e:70:3e:ec:f6:37:f8:
48:22:fa:ca:d7:cd:f8:f3:08:62:0d:0d:d7:53:13:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.164.0/22
IPv6:
2a01:a0e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202223
Signature Algorithm: sha256WithRSAEncryption
98:05:c4:91:ee:6b:7b:5b:29:3e:76:b7:ed:59:37:39:f5:52:
5d:d0:4a:29:a4:2b:30:9d:59:44:4a:77:b7:49:2c:ce:1d:30:
e9:4b:14:b8:a5:fc:dc:7b:9c:0b:1f:4a:c2:11:25:b7:36:0e:
84:5f:6a:0a:fc:02:0b:47:7d:c8:14:b1:35:aa:e5:ff:e8:7d:
12:bb:60:5b:34:96:e9:5b:d8:73:2f:d5:e6:70:6e:74:15:c2:
e3:4d:ff:d5:0b:7b:de:be:09:0f:5c:d6:7a:68:e1:ea:13:64:
00:56:ee:1a:b7:89:98:53:0f:a8:17:d8:80:06:60:c3:e5:80:
f1:16:84:69:f5:bc:be:4f:c1:c3:0c:92:3c:d6:53:e7:06:a9:
07:c3:33:c3:19:9f:75:ec:73:c4:d4:6e:8e:de:52:39:6e:23:
6e:9b:df:fa:8d:70:a2:67:52:ac:58:ba:0b:d7:7d:8b:42:8a:
64:bb:8c:3b:be:6e:e6:42:c4:27:fa:74:30:f8:e4:ba:ce:62:
32:69:38:5a:6e:20:7c:b6:39:ce:10:94:c9:83:8a:75:32:b5:
bd:d9:70:7e:ef:26:0a:b2:1c:33:d3:3f:e2:b1:e8:48:a7:f3:
01:90:8f:f5:57:9d:3b:a3:7c:a5:a3:e4:50:8f:4f:36:03:a6:
cd:67:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:50:39 2025 by rpki-client