Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
File: QA4H15n7NVyVICXz0nsA6bTuNO0.cer (raw, json)
Hash identifier: RlFZKHVlk1nNti5bBS9cSu5Rkw5zV+OD/5Yn8v8HK5M=
Subject key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF57B17EEADEFBB8DE34473208769
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61102
IP: 89.33.28.0/23
IP: 107.150.178.0/23
IP: 176.223.65.0/24
IP: 185.18.204.0/22
IP: 185.37.148.0/22
IP: 185.217.96.0/22
IP: 188.210.255.0/24
IP: 2a03:ff40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f5:7b:17:ee:ad:ef:bb:8d:e3:44:73:20:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:c1:91:bb:58:a1:48:4e:05:04:cf:d5:07:
1f:cf:c1:14:59:15:9c:ae:88:77:ee:03:8c:83:e6:
13:ff:37:bc:e2:e5:f5:a2:7e:3c:93:31:11:36:2e:
22:54:6a:08:28:17:ee:7e:de:71:6c:07:87:c2:1a:
a0:77:45:35:c8:cf:8c:e8:61:0a:02:fc:e7:ae:b4:
89:4e:2f:64:72:fc:0a:a8:7b:67:d0:2b:59:1c:7e:
bf:11:f1:07:fd:20:86:4f:7f:c4:b9:99:5b:df:ee:
42:00:a2:2e:1c:6b:0f:7d:98:ad:c1:a9:b0:37:9d:
cc:48:76:a6:c0:82:7f:8b:b2:61:09:2d:14:34:7c:
c2:1c:5f:22:3c:2a:b3:7e:19:3a:60:16:a7:ad:3e:
6b:f1:35:03:be:69:e8:94:38:ee:58:16:32:63:18:
17:b8:c7:98:68:17:40:66:01:76:41:58:a5:5e:1c:
7f:4c:6c:d5:c9:0d:71:70:f5:fd:60:ac:af:2b:75:
97:58:01:c4:95:e8:54:b5:1e:14:62:c1:fb:30:e7:
6f:4c:67:c2:df:c1:c2:d0:94:e6:41:77:64:af:a2:
f9:fc:ff:e4:a9:20:8c:67:93:68:cd:d8:b3:a0:d4:
bd:c4:79:55:41:10:dd:bb:3c:c0:5b:99:b4:89:84:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
IPv6:
2a03:ff40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61102
Signature Algorithm: sha256WithRSAEncryption
21:69:79:2f:c8:ea:71:5e:d4:25:37:ff:45:14:55:67:2c:ce:
63:91:0f:00:05:5d:cb:29:be:47:7b:90:11:6a:76:c2:b1:47:
59:7a:30:ec:24:7c:01:46:cc:b6:ff:84:25:a8:34:a6:55:b5:
93:29:53:93:04:b7:53:f1:0b:9d:da:24:59:44:16:e7:cb:48:
86:ef:27:ab:6c:96:30:11:00:43:aa:7b:ad:dd:e9:20:32:c8:
1e:72:ad:89:3f:95:11:1c:80:6a:76:38:13:d9:bb:ce:5b:cc:
16:83:b2:5c:26:11:8b:de:4d:4c:12:ca:66:32:94:88:20:6b:
bb:19:86:98:f1:4a:2f:61:61:ae:c6:e4:85:42:0e:48:84:6f:
6a:da:14:84:96:bc:43:e5:d3:97:99:58:b7:1f:f3:13:20:6d:
ae:c5:eb:de:73:53:92:02:76:d5:c1:0f:66:9a:e1:29:c3:b6:
c0:52:46:c1:87:08:bc:da:c7:8d:cc:ce:54:e3:33:e7:97:a7:
5c:d5:cf:4d:4a:75:0d:53:6b:52:18:d6:05:06:77:bf:be:28:
12:11:40:24:b3:31:df:da:db:59:33:d2:22:6a:86:6d:a4:b9:
c0:35:a0:50:ad:f4:ef:55:c9:62:92:b6:65:30:bc:d6:a4:42:
32:5e:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:13:40 2024 by rpki-client on console-fra.rpki-client.org