Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer (raw, json)
Hash identifier: eb23yvJuKAVzjGBq5595FQkPZSVQCLJEuSc0eMKuSoU=
Subject key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348FFD8E16B4886FB1BB58E837BFE2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.50.177.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ff:d8:e1:6b:48:86:fb:1b:b5:8e:83:7b:fe:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43a438813750133e55001bf89670a0db3ae5be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:c6:c5:d6:83:6e:1c:af:e9:19:22:52:10:
15:a6:20:87:5d:7c:2d:0f:62:fa:be:3d:6e:c7:ff:
61:ff:1b:f5:44:cb:e8:15:7a:cd:e4:c4:26:d2:49:
f4:8b:15:09:f2:3d:00:be:ef:e3:dd:26:72:11:14:
0d:c1:f3:7b:fa:63:27:0f:eb:be:59:8c:a2:f9:1f:
ab:ae:83:80:e6:d6:59:fc:70:c6:95:f9:b4:11:c9:
00:8d:3f:76:21:a8:03:c1:e0:3f:83:20:53:b1:a5:
45:c0:a6:fc:15:87:d0:1c:b0:48:4b:2b:d7:96:6d:
1d:bc:d3:17:54:94:0f:e0:44:8c:4f:ea:72:5b:b4:
99:25:d9:77:8b:df:d2:84:8b:4c:25:2b:52:cc:0a:
4b:dc:3f:cf:30:d8:22:84:16:9c:65:c0:c9:96:68:
0e:d2:12:99:0a:fd:f7:0c:e3:07:fb:d0:05:e1:be:
6e:ba:61:28:77:d7:3b:85:49:2d:55:b2:94:d5:59:
ad:04:98:70:b3:86:d9:4c:fb:27:c0:9a:3c:26:59:
98:79:1d:23:21:5a:a6:a9:f4:e4:11:53:c5:5e:d4:
28:70:b0:af:70:23:14:97:5a:68:c0:a9:66:1f:c7:
55:1f:35:57:0d:78:d6:68:d7:35:53:db:68:91:db:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.177.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4f:31:ea:77:f2:c2:10:0e:9d:10:e6:e7:1a:f5:cf:85:6a:
40:48:ca:c8:8d:1d:e7:eb:98:99:25:16:c8:00:91:06:78:d2:
a7:e6:b1:cb:ac:e1:0a:b9:6a:76:b8:e4:dd:78:16:46:b3:82:
31:3d:1a:f4:83:47:f6:42:80:bb:b4:76:a3:85:9b:ae:d0:fc:
8c:28:4d:f1:33:60:51:2a:f5:ff:c3:f4:5b:18:87:b5:e4:60:
2b:24:8c:2d:0d:91:12:d1:08:c3:ca:08:8c:49:93:5e:dc:b1:
4c:d9:c6:03:a0:6d:5a:89:02:ac:10:17:33:a9:3f:7c:94:90:
83:cd:4e:31:10:b7:45:b7:bc:f6:ce:ab:28:9a:7e:c3:e6:48:
d5:bc:53:d3:bd:46:eb:9d:79:28:db:94:4b:23:59:b3:62:a6:
99:ee:79:83:77:3c:78:a5:4c:32:ad:dc:a2:c2:67:7c:6a:22:
6a:91:a8:40:71:97:2b:ea:39:a7:d4:74:23:5b:01:8f:45:3c:
30:9b:d9:1c:e8:1c:a3:9d:3d:ca:f4:8e:c7:58:08:f1:1f:9a:
be:48:e6:d8:04:cc:f6:fe:c2:9b:5a:71:2a:e2:2a:25:b2:07:
2b:d8:13:ac:db:cc:c4:98:a1:22:94:8c:ed:c9:fe:da:67:9e:
10:0f:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:49:50 2024 by rpki-client on console-ams.rpki-client.org