Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
File: QDx-hd5J15JM5Q09ap5S6enC4xI.cer (raw, json)
Hash identifier: M9iQFh+227q4c9bPOupHcmcaHPZLdNN1C0xZjZh/41o=
Subject key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F30B10055D6C1E087AD15FC9D40B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58150
IP: 185.56.0.0/22
IP: 2a02:4ee0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:30:b1:00:55:d6:c1:e0:87:ad:15:fc:9d:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:ff:1e:0c:bf:49:63:11:9d:da:3d:2f:74:
1b:8c:d9:c0:36:76:a0:83:b7:f6:73:c4:95:a9:18:
6d:7c:3a:fd:d3:75:e7:da:2b:da:e2:2e:ca:bb:a2:
ec:3b:c0:0f:6e:17:3c:d6:59:70:23:eb:83:cb:fc:
f0:76:74:4a:45:62:6b:cd:5f:8b:a7:04:09:f9:78:
55:0b:94:bc:8a:f2:91:7a:86:43:54:d3:eb:0b:da:
35:21:26:05:18:1a:41:c5:56:00:3d:8b:3c:af:59:
9b:d7:c5:44:d6:75:7b:c0:65:a7:2f:57:66:e5:4e:
7d:a3:00:46:ae:0f:1b:fc:58:7d:f2:53:54:77:a7:
58:38:d4:27:5a:e9:16:70:c5:50:3c:58:2a:fb:d3:
28:89:59:80:83:b9:ce:b9:c1:57:ec:95:a3:ad:0d:
46:0f:80:f9:9b:ae:5c:67:a8:4b:e7:7e:08:34:dd:
c0:f6:2a:e0:6f:2c:e2:f1:43:36:91:72:21:c5:8d:
f2:ee:00:18:c4:a8:7d:fc:f3:cf:7b:59:ce:e5:3b:
02:6d:79:88:97:58:7a:8c:e2:fb:bb:4c:4c:32:6b:
32:1a:52:0a:11:d2:32:d6:77:a4:aa:e5:d4:aa:fb:
ad:8b:c3:dd:48:a7:e9:7c:89:ca:01:3a:f9:a6:fc:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.0.0/22
IPv6:
2a02:4ee0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58150
Signature Algorithm: sha256WithRSAEncryption
53:e1:87:0a:a9:be:3e:b9:da:68:93:15:f3:ee:5e:f5:1c:d2:
5e:00:c5:59:85:c0:78:ed:66:bb:44:6b:a1:fb:cf:1a:84:87:
1d:ec:39:d0:7d:0c:3b:57:de:b7:82:81:3a:fa:91:bb:87:c5:
1a:f6:0f:b3:36:93:3a:3f:eb:e8:50:0e:ea:c0:5d:14:d5:97:
83:58:6d:a9:fe:9e:5d:a4:a8:58:76:dd:cc:a0:24:9c:18:cd:
81:17:74:e3:28:c1:09:56:c2:47:2e:6f:f5:93:5b:28:0e:c2:
14:2e:c7:68:40:52:bb:17:3d:ed:ec:32:c8:f6:70:bd:3a:37:
2b:91:83:23:41:e4:0d:6d:26:fa:1c:f5:6c:06:b0:b8:96:bf:
7a:88:4a:6d:36:6a:4a:23:66:4f:bc:30:e9:6d:97:0c:01:38:
55:e4:e2:0d:89:33:c5:03:41:ab:6a:cc:0d:de:60:c6:b0:8f:
ce:b8:21:6e:5e:b5:c9:91:5c:a6:54:1d:b6:e5:4c:9e:6a:5e:
d9:cb:24:c2:f8:51:9f:75:c4:5f:5e:71:63:c8:af:f8:5e:7d:
6a:7a:f5:1e:6d:0b:55:a9:d7:98:03:73:b6:5c:36:89:c1:cf:
66:70:e9:be:bf:5b:72:d5:1c:f3:57:a9:01:44:00:5d:6e:a9:
b8:3d:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:17 2025 by rpki-client