Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
File: QET6VEALxs_DDLgxGoGdW9pCGnI.cer (raw, json)
Hash identifier: 37S6b9+x4+RFHFLJ+cFdb88AGGfovBY6stop+HUDli4=
Subject key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AB541E237237136F241D18D9A2C50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60627
IP: 185.113.56.0/22
IP: 185.124.112.0/22
IP: 185.140.56.0/22
IP: 185.143.204.0/22
IP: 185.145.8.0/22
IP: 2a0e:ea00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b5:41:e2:37:23:71:36:f2:41:d1:8d:9a:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:e0:9a:03:37:23:70:bb:3a:c8:16:a7:9a:
ea:e9:df:53:82:29:55:9a:05:26:58:d6:3a:a3:ed:
11:78:ed:85:95:b3:ca:3a:cb:4c:f3:50:45:ee:c4:
4a:02:16:15:1d:e5:43:6a:84:38:3e:be:01:3e:c1:
46:bf:4b:8d:c0:e4:16:34:86:96:0e:53:a4:c8:d8:
19:3a:b0:a9:b9:01:18:19:4f:94:de:cf:57:e9:fb:
25:89:c5:b8:7e:0c:5a:ea:f3:0d:80:ce:fe:d0:85:
f1:5c:89:95:8b:19:bd:05:bf:77:b0:6b:43:40:54:
81:d0:0f:ea:90:da:71:d0:27:e0:86:39:e0:4d:3b:
95:65:58:1b:72:cf:cb:70:29:3f:4e:17:2b:31:f5:
65:6a:50:de:d6:47:1a:36:3e:f8:8f:c3:fd:a2:2d:
30:3f:69:f9:96:ba:05:ca:ff:9d:36:41:bc:95:5f:
8e:4e:6e:6c:8e:b0:7c:49:21:ac:c4:6b:12:49:68:
6a:fb:42:ac:16:9d:06:90:9f:fe:18:c5:9c:3c:c4:
78:9e:56:24:86:07:a5:6c:4e:d7:20:4b:39:db:ff:
9e:ff:a0:ca:b8:89:de:a8:c5:10:8a:ce:f0:7a:b6:
bc:87:c6:25:aa:c5:2a:5e:e0:f4:18:32:f5:1f:b4:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.56.0/22
185.124.112.0/22
185.140.56.0/22
185.143.204.0/22
185.145.8.0/22
IPv6:
2a0e:ea00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60627
Signature Algorithm: sha256WithRSAEncryption
57:a6:94:67:af:65:3b:2d:14:10:38:27:5e:77:64:e9:3b:fd:
aa:67:e9:9d:a7:e3:5a:71:79:10:67:6a:b8:70:35:b4:40:c6:
fe:87:f6:19:6b:6c:4a:85:f1:ea:bd:59:b5:53:2e:ec:19:75:
0e:2a:0d:db:24:1c:0d:54:dd:a0:a4:8a:59:51:13:1b:99:e9:
b7:f4:30:21:01:d1:67:df:28:d7:e7:b2:f8:19:98:67:9b:26:
b6:d0:13:e6:1b:2c:d0:75:4b:bc:4a:02:42:89:a1:fe:6b:9b:
3a:ef:5d:ff:93:e7:fb:ae:8a:b8:42:5d:42:7d:3d:08:54:dd:
30:2c:cb:68:39:9a:d6:73:b2:a4:9a:1e:de:13:81:7c:22:4a:
ff:7e:f0:9e:5c:99:3b:aa:07:d1:9c:1e:ce:4e:6f:2f:76:d3:
12:6a:67:af:05:a5:d4:2a:6c:a0:11:0c:46:24:6f:19:86:d2:
91:a9:63:bd:63:3e:0e:f6:2a:5e:f9:77:69:1a:b1:d3:03:ed:
6e:97:43:48:14:25:c9:e1:8f:81:3e:de:a2:0c:23:c0:84:32:
98:27:ea:2d:14:4f:0f:9a:42:72:1f:28:95:ee:10:1b:a3:af:
80:f1:a8:0a:1f:b9:bb:62:f9:51:3f:2c:a9:04:3d:54:14:e3:
e3:a6:2e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:06:20 2024 by rpki-client on console-ams.rpki-client.org