Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer (raw, json)
Hash identifier: iJgmgiIQV1svU3Cqs6m5rFIZBQotMxfOY73HV2jdIOE=
Subject key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B73BDD46B9F11A32ED38AB6D6B3ADD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57154
IP: 5.10.8.0/21
IP: 31.47.80.0/21
IP: 88.133.248.0/21
IP: 185.36.44.0/22
IP: 185.80.168.0/22
IP: 213.152.96.0/19
IP: 2a03:80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3b:dd:46:b9:f1:1a:32:ed:38:ab:6d:6b:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43acc2f2be1a36b089216544d23c95ace232e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:b8:8f:7b:57:1c:b2:34:0a:39:ca:97:fd:
15:f8:3e:99:36:49:5c:25:54:09:92:4f:99:21:4f:
61:b6:24:57:59:5c:ee:7e:66:d4:a5:fb:57:c0:ab:
e6:3b:e1:bf:79:e2:15:60:a8:df:81:a3:65:75:62:
29:0e:e5:a8:bc:a7:0b:0e:20:51:d0:0c:9d:16:f7:
48:48:8b:33:d0:4e:47:c8:29:9c:04:a9:d0:ee:fe:
cf:df:f8:d9:de:ee:ff:f7:f9:20:54:3d:bb:86:48:
12:56:2c:96:71:dc:a3:f3:b1:0d:1a:c5:86:58:f0:
57:59:b9:74:28:f5:d9:95:1d:e6:d9:5a:97:eb:1a:
84:3e:0b:2e:26:2d:3d:2d:44:f8:5a:01:d2:e4:55:
6e:d8:d9:23:f5:84:37:b4:3c:5e:26:ff:02:a7:3f:
1f:a6:21:61:66:d8:3f:49:75:86:23:d2:f4:36:ec:
23:1f:da:44:ec:26:ba:05:b1:d1:d9:10:46:1c:be:
7a:59:56:da:47:7a:24:cd:57:60:e2:0f:ca:c3:91:
db:b5:5b:a1:b6:06:3d:2f:de:dc:7e:aa:38:2a:fe:
09:05:e9:9f:44:ab:0a:a2:83:23:92:da:5a:82:2e:
1a:45:3b:08:6f:aa:83:2f:9c:ad:ed:43:27:05:dc:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.8.0/21
31.47.80.0/21
88.133.248.0/21
185.36.44.0/22
185.80.168.0/22
213.152.96.0/19
IPv6:
2a03:80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57154
Signature Algorithm: sha256WithRSAEncryption
38:81:d1:e7:ea:66:90:e7:2d:a1:8c:c6:0c:1b:74:63:09:6f:
57:cf:74:55:61:38:3a:8d:ab:f2:39:24:77:7a:e5:de:47:9e:
db:15:25:26:06:fa:61:b6:1d:ea:2a:f8:5d:fc:a2:4f:31:d8:
f8:cb:96:84:d8:f7:1b:1c:96:48:eb:6b:33:17:57:6d:35:4c:
65:02:df:34:69:8f:44:e1:27:a2:6c:20:f3:24:8e:56:9d:c6:
4b:d1:0b:c7:81:b1:42:2a:0a:00:a9:70:55:10:46:f4:58:ac:
92:98:1f:4c:85:c6:12:19:7b:d1:a8:37:e3:df:3e:b6:80:76:
26:71:5c:1b:37:38:89:59:9c:9b:16:3a:de:0d:37:37:f8:3b:
bc:13:9a:dc:0b:60:1a:5c:83:4b:30:dc:96:ec:c5:ec:a7:77:
e8:10:60:b7:4b:fc:b7:de:d2:2c:f4:ff:a3:4c:b3:46:b0:f6:
9c:ee:00:ad:00:d8:33:84:11:02:e5:b6:24:57:7f:40:02:06:
5d:cb:e8:40:00:89:57:bc:2c:87:20:65:5d:f4:12:f3:2d:7c:
c0:f9:2a:b1:56:c6:31:31:c5:f1:17:6a:cb:8f:b1:f4:64:4f:
b7:09:83:c7:69:81:ce:e9:58:f0:80:52:f9:0e:59:52:9c:f1:
a1:f0:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:43 2024 by rpki-client on console-fra.rpki-client.org