Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.cer (raw, json)
Hash identifier: CJq81JONQLTA3Q6WJsKbBiebieDu6TUJW/ipbFFsl9M=
Subject key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB1873E732E9ABCB8FB9B8DCB5FFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35180
IP: 85.119.56.0/21
IP: 185.115.196.0/22
IP: 2a05:4200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b1:87:3e:73:2e:9a:bc:b8:fb:9b:8d:cb:5f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:8f:e5:b2:97:b3:38:37:73:dc:f5:ff:0c:
56:c3:3b:7f:f9:0a:78:db:dd:78:49:93:36:83:d4:
7a:e2:ed:f3:fc:42:f2:2a:55:97:61:59:6b:75:10:
2f:2b:3c:92:fe:c2:17:21:48:5b:0b:9a:1f:3c:26:
ef:c9:65:c1:31:ab:a0:8c:5e:fe:54:af:e2:79:d0:
3b:fe:fe:a1:f2:08:f0:df:7c:3f:96:f4:48:44:50:
cf:c7:4d:f0:3e:15:0c:e7:e6:6d:c8:4b:96:de:64:
82:a0:48:a7:90:71:24:f8:ff:1d:28:4e:f5:6b:37:
b9:2a:32:de:24:fa:cc:8b:52:45:4e:dd:10:df:47:
fd:c4:ea:54:26:90:17:3c:f5:15:90:02:e8:30:8f:
63:64:a4:45:2b:bf:08:c8:4f:e5:2f:13:ee:1f:00:
83:ca:5c:3d:ff:45:4e:a1:3b:8c:05:84:ab:1c:15:
16:a9:ff:af:58:bd:da:ae:a7:bf:92:c7:45:37:f0:
41:11:87:d5:d8:3f:6b:46:a9:f1:0e:b1:89:ea:b2:
4e:b0:84:da:c3:d6:67:37:a6:63:40:ec:31:34:48:
f4:bf:a5:c0:da:87:aa:49:8a:f5:0a:69:68:18:32:
e4:80:83:6c:f2:23:73:13:d0:b3:ba:1c:b5:10:70:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.56.0/21
185.115.196.0/22
IPv6:
2a05:4200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35180
Signature Algorithm: sha256WithRSAEncryption
46:fa:3a:c5:af:1c:55:c1:0a:2a:31:e1:58:13:f1:60:63:38:
5a:36:a3:d3:0a:f2:5e:00:b5:03:d4:de:de:6e:4a:25:f6:de:
bb:0f:3b:50:32:91:d2:84:35:62:31:f9:bc:a6:10:6f:08:23:
b3:d8:e4:c6:75:2c:9d:7f:ef:b0:6f:4a:b8:d4:88:b0:5c:6e:
40:61:1b:12:bb:fb:3f:7c:7c:70:bb:e2:9b:4c:30:b8:0b:21:
7d:be:e8:f7:53:ac:86:71:f9:75:3d:96:16:34:a0:5f:c5:1e:
ed:8b:db:e4:05:d4:0d:77:b6:e3:44:f0:2c:9d:22:df:af:04:
6b:63:55:7f:8c:b9:90:5b:cd:9b:05:3f:5b:64:a2:e5:da:44:
a8:31:f4:c3:c2:61:a7:86:0f:f3:db:e4:53:66:8c:a8:67:c4:
6b:c7:f0:09:18:c9:ad:fd:19:91:af:19:45:a3:a8:7c:6d:8b:
ea:df:40:de:68:15:10:78:5b:e6:c3:e5:72:62:0a:27:7f:1e:
47:cc:a7:c9:ae:15:0f:41:b4:a7:74:27:77:10:07:74:a5:e4:
3e:8c:9c:d1:87:8f:4c:55:10:0e:cb:1a:1e:5d:26:7d:2c:e0:
dc:8b:0e:ae:16:95:41:79:63:c5:2f:ea:da:f3:05:aa:bf:2a:
cb:c0:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:30:24 2024 by rpki-client on console-fra.rpki-client.org