Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
File: QD1jsy5xwcFpJD79ttVu1cprgk4.cer (raw, json)
Hash identifier: bSesLuN/0zooPx0uxlNLo765XuEAGJeHTMdfN0iyXpo=
Subject key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC19D869C9C44DCE39F7E1E6D58EAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.47.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:19:d8:69:c9:c4:4d:ce:39:f7:e1:e6:d5:8e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:0f:e3:6b:09:3d:50:42:6b:27:36:ef:99:
83:63:cb:19:81:e2:46:d6:79:52:db:49:ed:e1:ce:
61:40:5b:77:75:1a:cf:0f:74:f0:ec:7e:08:3a:e6:
52:ee:3f:7e:92:6f:24:8c:35:43:4d:0b:69:37:96:
07:cb:8d:f2:a7:ba:75:af:c6:c2:80:15:e9:71:d7:
51:00:d0:13:ef:74:0a:ca:cc:1e:3f:c9:28:01:66:
55:ae:da:1a:e0:98:cf:55:22:e5:8c:01:78:67:60:
55:df:22:b7:fc:6c:f4:22:fb:76:2e:d0:fb:e9:e1:
a9:ab:5d:b0:78:ac:14:13:a8:2e:3b:de:ae:2f:76:
6d:f3:d8:cb:fa:e5:1f:cc:96:6d:14:36:a8:fa:34:
51:a2:e6:38:c2:3c:52:fb:b5:a4:98:2b:25:b7:a7:
2c:88:0c:1e:47:1c:b8:ca:80:5c:c0:c6:0f:bc:61:
33:1a:a5:3a:4b:83:9c:ff:b8:27:7d:88:51:e3:c5:
4e:1e:15:e9:94:78:27:a1:b2:c4:24:b1:b6:14:fe:
c8:93:f6:94:80:82:60:be:d5:b4:cd:d5:7c:0a:aa:
6c:3a:12:9c:d9:24:13:34:9f:b9:da:3b:25:ce:85:
c0:b0:2c:4b:0e:c1:bc:62:6d:93:d0:0d:b3:4c:5a:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.190.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b9:69:44:b5:62:a4:14:87:9e:fa:01:db:ba:96:3b:61:3b:
83:4f:2a:12:36:b9:06:b6:cb:0e:df:93:4c:c5:d3:26:b9:f1:
14:94:a5:d3:bd:ff:57:2b:03:53:29:8b:a3:af:c3:4a:29:2d:
e2:b6:cc:96:0a:b8:e7:07:c0:65:e8:0e:4c:db:7b:e8:6d:47:
5b:14:b8:97:43:6b:ed:42:9b:42:03:28:43:de:b4:3e:52:42:
7a:0c:2e:e5:b7:c4:9e:33:28:33:08:6b:0a:75:45:9b:be:7a:
55:31:17:24:23:ee:35:b4:f9:20:e9:24:51:36:11:47:ee:25:
eb:59:e8:7b:28:e2:34:37:47:33:1b:a8:f8:c7:9d:a3:7c:38:
13:e8:6e:f8:94:d8:17:b0:f5:d0:5d:e7:96:2e:2c:99:8b:b6:
47:35:02:6c:e4:29:3f:d7:f6:5d:7f:0a:57:46:6d:2a:a7:5c:
5d:e2:14:4d:71:4a:a6:0a:d4:19:a4:87:71:2f:16:bd:16:b6:
84:08:9a:85:4d:0c:8b:c2:0f:1f:6c:81:3f:8c:eb:6f:67:44:
e6:6f:31:c1:51:a3:3d:56:c8:23:df:81:36:9f:89:aa:ca:db:
24:05:3b:7b:73:a9:6f:cb:12:76:d1:b4:fe:48:03:6d:80:92:
9e:b7:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:48 2024 by rpki-client on console-fra.rpki-client.org