Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.cer (raw, json)
Hash identifier: TI8p31c7k1NSjo7lTlNNDjV46nuES7Vx/15BjWSTZwE=
Subject key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBFC703223BF373637DD7D160A9499
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211993
IP: 185.233.34.0/24
IP: 2a10:de80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fc:70:32:23:bf:37:36:37:dd:7d:16:0a:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:e8:f8:6e:05:f5:ea:f1:fd:4e:c9:a8:6f:
c3:6f:be:1d:f3:d0:1a:61:85:10:6b:0c:ac:81:f9:
69:bf:1e:2e:ed:19:b9:17:b9:82:39:f4:ff:c1:f5:
cb:a7:30:83:69:44:1c:23:4a:d7:c3:23:38:bf:56:
08:5e:c3:61:5e:57:30:c8:db:ab:e4:f6:05:5a:1f:
05:01:5e:24:b3:9a:85:8d:56:04:fb:0c:33:5c:d5:
ab:a3:e2:f4:4c:92:d2:16:7f:bc:43:43:9b:2b:b9:
f7:c3:0c:54:a2:02:f5:d0:3f:c7:ce:97:35:19:0f:
9e:bb:99:2e:1e:38:79:82:c1:a9:f4:67:9c:4f:36:
57:79:ac:b8:e4:8e:bd:20:6e:6d:ee:21:a7:73:46:
50:a9:cc:05:6e:9e:48:ea:83:9f:ac:50:1a:4a:8f:
7c:26:7e:b2:07:4f:64:8d:54:5a:0e:bd:7d:a0:0d:
b3:d9:a7:1a:9c:9f:d2:dd:e2:c0:d3:61:cf:79:34:
6f:e0:85:55:0a:08:20:8e:11:d2:b5:54:9e:c6:86:
23:22:7e:f2:4e:4b:fc:5c:17:1a:f7:28:fe:6e:1a:
44:97:55:be:2b:0d:89:17:d1:79:d5:1a:a6:c8:85:
fc:eb:61:d0:cb:63:1e:ce:4e:61:38:fd:8f:04:d4:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.34.0/24
IPv6:
2a10:de80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211993
Signature Algorithm: sha256WithRSAEncryption
a0:5d:1a:9c:f8:99:62:ec:e5:20:6f:f2:b1:3c:0c:20:be:19:
eb:2c:6e:e6:eb:04:88:97:98:a0:f8:11:b2:4e:60:4c:64:2e:
90:34:a7:58:b7:c2:79:2f:80:72:ce:78:58:51:ab:12:fa:74:
ca:bc:4c:b4:67:59:e0:01:8e:49:0a:11:84:3c:0d:dc:da:f9:
23:71:cf:59:49:e7:2e:e5:ba:90:d7:a3:f5:95:d0:14:fc:9b:
31:1d:18:a2:03:15:3d:73:d1:d2:5b:75:c7:86:bf:69:97:7e:
01:05:26:29:ce:d0:27:14:4b:5e:40:29:3e:4c:be:b8:8e:7c:
e7:b8:dd:4a:6d:99:70:97:bc:87:79:ef:9d:01:3c:d6:83:a7:
b6:e5:a0:1d:23:84:97:2f:e0:a2:80:9e:f7:e2:c0:21:65:b6:
a9:da:9a:d0:61:eb:4f:d5:05:a4:79:2f:af:a4:92:41:d8:f5:
72:11:87:4d:1c:46:c2:e9:24:87:df:00:64:0d:5b:59:3a:88:
88:78:32:98:95:09:b7:9c:c8:ec:a7:68:69:53:e0:6b:5c:28:
2c:0d:1a:1a:4b:ec:89:0f:03:68:47:14:0c:52:97:6a:cd:8f:
f3:53:98:8c:92:fd:3d:e7:65:2e:d7:3a:01:4c:2e:48:66:de:
d9:4b:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:55 2024 by rpki-client on console-fra.rpki-client.org