Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
File: PQSDU4c3RT4vV_-1dJnDki6DY20.cer (raw, json)
Hash identifier: yarppyYMcNX+qPLDYWFBw0bf/dr/yR7axKdzpdQCbe0=
Subject key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC3E247F05F859BD9F33E72A9C6FA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44592
AS: 213030
IP: 45.156.84.0/22
IP: 91.245.220.0/24
IP: 185.150.24.0/22
IP: 194.62.1.0/24
IP: 194.62.6.0/24
IP: 194.62.29.0/24
IP: 194.62.157.0/24
IP: 2a07:6d40::/29
IP: 2a0f:5480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3e:24:7f:05:f8:59:bd:9f:33:e7:2a:9c:6f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d0483538737453e2f57ffb57499c3922e83636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:2e:a4:02:82:19:d7:44:93:19:de:81:c9:
91:95:21:eb:dc:ea:73:47:5e:64:46:1c:ca:9b:0a:
80:de:19:87:ec:71:eb:2c:69:98:1c:3c:5c:9b:f5:
72:62:71:ab:66:a3:9b:35:2a:31:ca:59:4d:31:5d:
d8:e6:ea:72:8d:57:81:ab:8f:ac:a0:c5:49:f2:95:
c8:51:09:4b:76:85:33:6d:62:b9:fe:62:25:dd:64:
f8:47:13:07:6d:5a:98:ff:df:17:6c:56:89:5d:f8:
47:91:0b:df:bd:37:94:d4:1e:b1:bb:79:0f:25:d0:
5f:c9:38:0e:f8:f6:57:f7:c0:33:3f:ec:75:d8:76:
44:84:d6:d5:af:69:70:49:32:00:59:de:27:1d:d8:
7c:9a:4e:02:b5:87:8b:87:87:96:9b:ec:8b:f0:a1:
00:a9:85:63:ef:0b:85:84:de:a5:0c:c1:e5:2c:e8:
42:3d:5f:e0:5a:86:83:f3:30:a7:82:5c:c9:69:fc:
08:56:b1:bc:9c:25:cb:04:9e:63:2f:3d:f1:7e:f0:
4c:36:45:7f:66:f1:43:a0:7b:bc:88:89:fe:17:d3:
f0:fc:5b:9a:72:7d:3b:a8:3a:bd:8c:4a:cb:50:3f:
af:69:ba:d6:23:4d:e9:5e:90:2b:9b:3d:f7:70:cb:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.84.0/22
91.245.220.0/24
185.150.24.0/22
194.62.1.0/24
194.62.6.0/24
194.62.29.0/24
194.62.157.0/24
IPv6:
2a07:6d40::/29
2a0f:5480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44592
213030
Signature Algorithm: sha256WithRSAEncryption
7f:c7:ea:f1:22:1f:61:9d:4a:d4:9b:1f:6f:30:7f:96:0e:4b:
9b:f2:3d:57:9d:ce:97:17:83:9f:b3:d9:de:c2:f2:39:54:b7:
ee:8f:7f:1d:07:a7:fa:f5:cf:24:f1:3c:ad:e9:35:4e:90:18:
20:e6:11:3f:54:43:91:15:fd:0c:29:60:1d:ed:4a:e7:f4:40:
c2:e6:53:cd:6f:14:91:96:e3:ca:36:b8:0c:c6:56:2e:ad:33:
e6:53:ce:5e:18:db:73:e9:5e:5f:b9:e4:73:c8:6d:fa:99:ef:
20:ae:71:f2:48:2d:05:ca:ee:83:24:4d:ad:2a:0c:ce:e9:f5:
88:93:10:32:05:02:95:ba:91:4e:a9:96:83:57:94:60:cb:0f:
03:07:69:d2:4b:de:2b:ce:42:ba:04:65:50:35:aa:28:01:fb:
73:3e:3c:f8:fb:71:b5:23:93:7b:13:e5:51:7b:8f:e4:fe:d6:
25:ba:4d:a2:d3:fd:34:d8:e9:f4:cd:fd:bb:46:35:d7:14:71:
d1:1c:0f:4d:4b:17:08:b1:2a:5f:7c:e6:44:91:66:74:97:6b:
8a:48:28:ee:cc:64:a6:c3:e0:c2:01:70:79:a0:ad:3c:cd:ab:
e1:f9:36:80:08:a0:93:66:fe:4b:27:e5:f9:5b:6a:9a:4c:ce:
af:eb:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:20 2024 by rpki-client on console-ams.rpki-client.org