Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
File: Q5p_k_yoCMgtJvv-D94bloz26NM.cer (raw, json)
Hash identifier: Ix1mwhxZyyj9AFkpOMDgcj15gSYRjRMQ7kfJ5sUzMtA=
Subject key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49392107FC7CF44824FF151AE32751B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198824
IP: 2001:67c:c74::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:92:10:7f:c7:cf:44:82:4f:f1:51:ae:32:75:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:3a:4c:ab:2f:be:56:52:b6:bc:25:af:fb:
4f:52:50:36:43:39:3e:d2:8f:dc:8b:1f:91:f5:e2:
31:7f:44:a1:06:7c:6e:7b:4b:ee:ec:97:4a:f8:4f:
37:43:1f:f8:73:2f:c0:06:a0:06:7b:42:58:9a:ca:
33:ff:c9:83:c2:65:e9:f3:34:d7:13:41:3d:43:c1:
b8:9f:e5:dc:87:5b:61:a6:6c:bb:39:84:14:46:0c:
20:6b:df:59:2b:67:de:84:85:ff:00:65:2f:4c:71:
d4:4e:72:1c:ab:eb:53:52:dd:9a:db:d7:d1:d0:11:
c2:ed:53:b2:f7:65:00:f0:00:c1:e6:26:20:50:9b:
ed:61:18:c9:ac:87:8a:17:b6:7c:a6:9d:32:49:31:
e2:ae:3b:5e:cc:f5:ad:5d:a4:3c:7f:23:3d:80:14:
1e:4f:7d:4b:b2:5d:78:41:cd:b4:fa:d8:fb:26:5b:
26:b0:36:69:f9:7c:9e:31:50:f8:81:1d:9b:01:15:
53:93:00:ba:fc:e6:f2:79:12:2c:66:19:4a:c5:29:
cc:8d:ce:8f:c2:fa:98:2f:3f:a0:1f:e3:51:11:0d:
13:06:3d:01:b6:22:8c:13:5c:76:58:e3:d9:65:96:
11:c6:7a:83:d1:93:cc:c3:ee:97:23:64:4a:89:af:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c74::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198824
Signature Algorithm: sha256WithRSAEncryption
41:80:9c:8f:98:b1:93:7e:b1:15:24:aa:b5:a0:d9:3c:cb:2c:
c8:35:de:5e:87:71:e1:58:f4:ba:ec:a6:9e:9a:c6:47:6d:76:
38:01:e6:d1:4e:18:78:30:9a:93:75:4b:d4:e0:aa:ce:00:eb:
41:63:3c:c7:4b:2b:2f:89:ca:e0:61:dc:69:6c:d7:08:e9:1c:
e5:d9:76:3b:f5:4a:d2:bd:36:f0:51:87:4d:1f:7b:1e:8c:2b:
2c:3a:f3:cf:52:50:e8:b6:46:86:6b:f7:72:58:cc:4f:d3:b5:
48:b1:bd:38:7a:08:54:e1:0d:40:bd:2e:f1:c3:3c:46:39:1a:
69:d9:31:13:2e:70:6d:61:3a:d0:a7:cf:bc:98:c5:08:5b:8c:
37:d0:e5:a7:d6:bb:da:f1:96:e1:cd:0e:46:8b:68:00:1b:13:
be:39:94:fd:10:a3:61:a9:7c:23:95:c5:03:0a:75:d0:6f:bf:
93:96:42:b1:43:fa:5d:cf:a5:d8:1d:36:4a:ac:b3:59:df:46:
fa:d3:b8:b1:45:e9:25:ed:2c:18:22:0b:83:39:c4:1a:58:8f:
cf:0d:ea:72:72:3f:69:14:f7:33:c8:7a:b6:2d:20:76:fa:52:
f6:a1:4d:57:b0:b2:ee:a6:da:51:4d:23:0d:cb:f7:6e:8b:4a:
1e:7f:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:43:00 2024 by rpki-client on console-ams.rpki-client.org