Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
File: QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer (raw, json)
Hash identifier: k7GRTiyUF4kUzaRdPRTOsil4UjwcIzQ4KWjtAwlmFag=
Subject key identifier: 40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453071BC160903D773DF55F650DE79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6872
IP: 185.122.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:30:71:bc:16:09:03:d7:73:df:55:f6:50:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:89:48:7b:a3:31:eb:9f:9c:63:23:0b:7e:
e6:37:4d:67:0d:c1:89:34:d2:71:dc:7a:e5:00:6a:
a3:aa:34:63:6b:26:54:f4:1d:d8:28:8e:f5:9e:9b:
11:c4:7e:ff:39:d7:8a:94:4f:65:ae:c0:01:03:4c:
1a:25:97:01:e8:e7:b1:c0:6d:a5:3d:5f:55:d5:b9:
a3:a9:08:ed:50:5b:bd:ad:e4:b5:e2:81:cd:74:02:
f5:53:86:da:54:92:ee:da:da:e4:ba:03:a1:13:a1:
3e:44:85:9f:64:64:e7:55:7f:2e:08:6b:cb:ce:51:
90:1b:eb:11:a6:72:a0:e9:d2:9b:49:34:87:e2:9f:
8a:06:76:d9:1a:30:e9:ae:e2:a8:e6:ab:ef:98:07:
c1:2c:bd:49:dd:12:be:bd:31:18:99:a5:8a:b5:0c:
02:42:78:79:dd:37:56:6e:74:db:cc:a0:4f:41:d4:
a1:83:3e:10:3e:4a:e1:17:88:d3:29:cf:fe:f6:b5:
45:7d:06:c4:eb:7e:d3:0b:0f:40:9f:c8:fa:4c:2d:
50:57:fb:5f:70:7e:02:93:25:be:fa:2a:6b:bb:35:
b3:38:80:06:61:7d:f5:6a:80:35:ef:cc:ef:6f:59:
01:1e:ca:76:93:cf:61:4b:44:54:50:80:37:64:98:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6872
Signature Algorithm: sha256WithRSAEncryption
54:fc:b0:ac:82:54:4c:b3:59:da:f1:cb:76:a6:09:c7:4b:b3:
a3:a2:14:21:0c:5b:36:a9:fa:1a:83:da:c3:1d:16:aa:b9:1d:
b5:fd:0f:18:7d:75:ea:0d:2c:3c:b0:cc:0f:c8:06:ef:43:1e:
58:64:57:dc:73:45:fe:76:cd:4c:0a:74:7b:29:1e:fc:2f:98:
40:40:93:9d:bf:1b:29:54:cd:81:8c:d7:07:d9:aa:23:e4:87:
82:37:42:03:76:60:ca:de:5b:93:26:10:65:43:4b:7e:52:58:
f1:fd:c9:84:e4:cf:d2:95:a7:5c:5c:f9:42:21:ea:11:e3:62:
75:a1:fd:8e:1e:4c:9c:b2:82:b1:b5:c9:4f:fc:bd:0d:b9:b3:
e4:66:72:cd:74:8b:72:23:d7:ee:06:6c:84:16:6a:c6:52:3d:
73:75:13:4e:29:15:da:2b:76:0f:36:40:90:ae:90:3f:24:ca:
b3:81:9d:5f:ad:9b:d2:cb:02:22:0a:2c:d9:2e:72:fe:20:af:
2d:4c:f1:95:ea:bf:09:7b:ca:c3:05:a3:d4:17:d1:10:bc:7c:
2b:a5:30:2d:a0:f1:0a:08:e8:5d:aa:be:64:a3:91:78:7a:c9:
e1:48:79:51:55:26:31:49:1e:11:90:73:73:06:7b:cf:2d:4e:
3f:e6:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:16 2025 by rpki-client