Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
File: KqJOWBL8wxBrnrCusA5ie6I10FY.cer (raw, json)
Hash identifier: 1/0P8gZ4fGMrLtX37ok7FiDLYJzngNc8Im5blZ7JA30=
Subject key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B1E51968A5C017EF005DE9050E306
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50538
IP: 37.110.240.0/21
IP: 109.235.216.0/21
IP: 2a03:dcc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1e:51:96:8a:5c:01:7e:f0:05:de:90:50:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:46:8c:c2:bd:de:cd:9e:da:f0:57:fc:f5:
43:7a:7e:83:17:44:11:1f:97:26:32:1f:5e:5a:ac:
89:ae:52:dc:3c:09:ec:69:e7:f8:35:88:8c:e0:a3:
46:48:d9:8f:ee:db:6c:df:32:43:77:52:83:ec:6c:
4a:36:87:33:62:29:4b:dc:f0:20:67:30:00:d6:57:
2d:58:05:ee:94:cd:43:47:18:4b:c1:31:b9:69:99:
32:cf:8f:ef:4f:41:d2:8e:d2:5f:af:2f:d2:62:40:
61:7a:02:ad:55:06:9f:33:8c:12:04:03:b9:f2:67:
c3:c2:f8:4c:9a:ad:38:bd:12:09:f9:1a:69:27:94:
73:7a:75:71:7c:7a:2b:c9:71:b3:ba:0d:c1:16:0a:
51:3e:d6:66:22:b8:8f:e9:1d:08:3e:0c:6f:0d:2b:
c1:26:d6:ef:36:d5:41:cc:c8:7f:6b:1c:86:3e:d7:
79:33:b4:ac:ef:e2:cf:81:54:a8:ba:7a:4b:6f:a0:
91:f8:70:bf:b2:34:7a:8e:70:2a:68:c8:ae:f6:6e:
d5:5b:2d:0a:6c:ee:06:47:b7:0d:df:a0:b9:3b:9a:
bc:78:5b:d1:ae:13:c7:f3:a4:25:dd:39:f3:1f:6a:
87:f5:54:f6:0c:5c:6b:b5:de:19:45:38:b5:fe:c8:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.240.0/21
109.235.216.0/21
IPv6:
2a03:dcc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50538
Signature Algorithm: sha256WithRSAEncryption
08:70:96:5c:74:e5:f4:f5:d5:ad:d1:70:40:69:c1:b4:57:a3:
ff:14:4d:72:59:60:11:2d:9c:ba:4b:1d:a9:e5:4d:e0:8a:c5:
13:c2:cf:b1:13:0c:08:f9:aa:f0:08:57:54:04:f7:83:2f:ee:
86:d2:4a:5e:48:91:df:93:7c:e8:3c:c4:83:5f:77:2a:e8:d2:
da:90:56:0c:86:ca:47:72:79:1a:07:ba:fe:82:15:0b:3d:7b:
2e:a0:9d:c7:c8:02:a3:44:71:25:da:fc:12:1d:85:e3:d9:41:
20:b7:2b:33:83:85:a1:fe:16:3b:e4:0f:6c:a0:b5:1d:37:3f:
11:d6:16:b4:7b:c8:f3:48:71:df:3f:db:a3:f8:05:01:3b:f3:
a4:fc:e3:5f:99:db:ae:1a:c3:73:95:d0:a8:86:bc:da:b6:21:
d5:8e:d4:f1:28:ab:e9:35:76:86:e5:dc:4c:d7:77:72:e5:b0:
94:22:a4:de:8e:e3:54:87:e4:97:d5:ae:f0:3c:c6:4f:ca:a5:
fb:01:c5:d2:13:12:61:e4:dc:5d:e6:24:af:7d:b2:95:0f:f0:
7f:93:45:dc:29:5b:33:ff:72:07:10:8e:af:06:74:ff:38:cc:
10:dc:02:4b:54:4e:38:5d:57:74:ed:89:a3:e6:fa:29:5f:42:
36:75:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:03 2024 by rpki-client on console-fra.rpki-client.org