Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
File: QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer (raw, json)
Hash identifier: GVf5i9+ZJmt4mYvUA6dNSQbYSRXwMvMEln2j4Z3xTdY=
Subject key identifier: 40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348925417997B774B26E0BC59F53F8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6872
IP: 185.122.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:54:17:99:7b:77:4b:26:e0:bc:59:f5:3f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:89:48:7b:a3:31:eb:9f:9c:63:23:0b:7e:
e6:37:4d:67:0d:c1:89:34:d2:71:dc:7a:e5:00:6a:
a3:aa:34:63:6b:26:54:f4:1d:d8:28:8e:f5:9e:9b:
11:c4:7e:ff:39:d7:8a:94:4f:65:ae:c0:01:03:4c:
1a:25:97:01:e8:e7:b1:c0:6d:a5:3d:5f:55:d5:b9:
a3:a9:08:ed:50:5b:bd:ad:e4:b5:e2:81:cd:74:02:
f5:53:86:da:54:92:ee:da:da:e4:ba:03:a1:13:a1:
3e:44:85:9f:64:64:e7:55:7f:2e:08:6b:cb:ce:51:
90:1b:eb:11:a6:72:a0:e9:d2:9b:49:34:87:e2:9f:
8a:06:76:d9:1a:30:e9:ae:e2:a8:e6:ab:ef:98:07:
c1:2c:bd:49:dd:12:be:bd:31:18:99:a5:8a:b5:0c:
02:42:78:79:dd:37:56:6e:74:db:cc:a0:4f:41:d4:
a1:83:3e:10:3e:4a:e1:17:88:d3:29:cf:fe:f6:b5:
45:7d:06:c4:eb:7e:d3:0b:0f:40:9f:c8:fa:4c:2d:
50:57:fb:5f:70:7e:02:93:25:be:fa:2a:6b:bb:35:
b3:38:80:06:61:7d:f5:6a:80:35:ef:cc:ef:6f:59:
01:1e:ca:76:93:cf:61:4b:44:54:50:80:37:64:98:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6872
Signature Algorithm: sha256WithRSAEncryption
af:54:6b:3c:af:6f:0e:fa:32:f5:83:39:e9:57:5e:01:93:ee:
d9:aa:a9:af:03:46:00:cb:06:bc:e8:7a:e0:9f:25:c3:23:cf:
5a:a8:41:5b:3c:c2:34:39:5e:4d:14:e2:ba:41:76:64:e2:b8:
f2:08:8b:98:ec:c3:ff:f9:a0:02:c8:ad:69:8d:ac:4a:8e:83:
de:b6:0c:0b:cf:50:6d:e6:77:42:f6:83:bb:f7:42:3c:e6:96:
d3:fd:ec:a7:e5:f4:4b:f8:30:4a:b7:03:31:9c:54:a6:24:32:
ea:d0:c2:33:bf:c6:af:85:31:b5:03:40:9b:55:50:88:aa:84:
75:25:4e:fc:0a:91:e2:dd:3a:d7:2e:ab:80:3a:06:d2:4d:c1:
24:cb:ff:5d:7c:7a:bb:fa:34:ee:d6:e0:d8:d0:52:82:88:46:
95:50:f4:b2:4b:f5:3a:b9:4b:96:37:94:d9:89:9c:91:b5:80:
13:fe:db:23:4a:a7:04:7a:9f:44:c2:6d:09:c6:20:9e:01:76:
69:04:70:cd:ef:e4:bc:c5:82:34:a8:c4:6f:ef:93:89:be:dd:
fb:18:3a:75:df:2e:72:51:e0:fd:18:8c:9c:7e:22:e3:f2:2e:
a5:9f:73:4b:f7:70:3a:9d:c2:f3:2c:f2:4b:2b:97:b8:b7:23:
ec:94:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:52 2024 by rpki-client on console-ams.rpki-client.org