Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.cer (raw, json)
Hash identifier: wbwX5e2wyuketfYJVewfLaA+IyR1XhJ6Mlwx5cVnAhA=
Subject key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8017A68626AC5EFFA757BBA3938AA26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44214
IP: 185.79.8.0/22
IP: 2a05:6c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7a:68:62:6a:c5:ef:fa:75:7b:ba:39:38:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:ac:94:1e:49:42:c5:7e:e2:3e:ed:a3:f3:
7f:ac:89:04:f2:fd:1b:7b:18:61:e8:e2:d2:24:98:
5a:b4:cd:b7:3c:25:29:fa:cd:6a:ef:ef:be:d5:00:
51:08:1c:3b:f2:fc:d2:e6:fa:69:2e:e4:fb:64:76:
b0:1c:2e:6b:c4:b8:76:7d:51:9c:89:c9:45:2f:41:
f4:d8:b7:64:1f:57:12:b6:b5:6f:bd:46:89:b5:71:
0d:4f:d8:e9:3d:0f:62:62:e6:3a:7b:9b:2b:de:54:
d2:b0:7a:67:ac:df:41:aa:58:c4:52:60:ec:2a:62:
4a:b9:65:12:0c:10:d5:60:f3:cc:91:fd:43:fa:75:
d8:fa:89:f2:60:29:aa:bf:2f:3c:79:16:af:57:9a:
0f:ce:5a:c4:38:f3:43:fd:f4:a3:19:19:fa:79:36:
12:9d:52:08:fd:a3:f2:4e:00:91:af:61:02:14:b7:
65:93:43:5f:9d:63:9c:47:05:b9:05:9d:e4:60:9d:
94:7b:3d:36:b4:81:69:0d:40:3e:20:50:f4:78:c1:
18:a8:b9:06:8d:95:00:a8:0d:e3:fe:62:8b:56:ab:
89:df:63:80:98:a6:71:ca:3b:f3:6e:36:00:7c:67:
18:87:7d:57:a0:e4:7f:c0:ef:32:82:5b:48:ca:5a:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.8.0/22
IPv6:
2a05:6c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44214
Signature Algorithm: sha256WithRSAEncryption
33:10:ed:27:fa:4a:d0:3a:1a:ca:68:bb:75:85:79:78:8a:e3:
fd:c8:02:6d:0a:5d:eb:96:6e:47:19:ae:76:9d:3a:d1:c5:4f:
02:5b:74:28:51:c1:2d:c4:fd:5d:09:5a:68:a2:19:b4:ee:46:
41:78:06:39:18:50:d5:a2:79:85:91:ec:88:37:14:6b:48:0b:
ff:d6:bd:6f:71:c6:e5:ae:9d:49:95:34:68:58:ea:65:ed:f5:
93:87:2c:ca:3f:7a:63:0b:fa:9a:09:fa:09:73:f3:54:94:89:
e9:be:bb:e6:d7:00:f0:55:f6:56:f3:0b:13:74:36:3b:76:49:
73:b4:56:d8:ae:cb:d9:51:99:58:5b:63:d0:50:eb:14:a6:61:
e3:57:c9:6c:55:76:8e:20:7f:75:0d:93:dc:1c:7c:cf:d1:12:
49:e6:ba:dd:61:9a:75:59:da:45:ee:0c:9f:43:50:91:5e:65:
36:a5:cc:19:d6:fd:aa:58:02:7e:c3:6a:16:32:62:93:7b:8a:
1f:27:56:62:2c:9a:91:ee:c6:83:f4:0d:44:95:84:ad:23:c8:
37:6b:e7:82:09:e5:24:b6:04:3d:f3:08:ca:ff:27:ab:55:0a:
79:1f:b9:30:44:2b:ff:b8:69:46:87:1d:3c:23:6e:6f:1c:19:
a1:56:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:01:36 2024 by rpki-client on console-fra.rpki-client.org