Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
File: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer (raw, json)
Hash identifier: w2Ri4T9Z/FeIhALoBiT2l7R1W/2DBOVMFwbfS+UnJlo=
Subject key identifier: 40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0822593E264FF8EFD91FC329AEA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47811
IP: 91.208.154.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:08:22:59:3e:26:4f:f8:ef:d9:1f:c3:29:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:5a:1c:fe:a8:82:7b:74:c7:49:1c:b8:4c:
b7:26:29:eb:1b:bf:cc:1d:c2:c7:a2:95:23:a2:c6:
ce:9e:c6:82:02:8b:ef:e7:26:68:cd:5f:ea:b8:58:
c0:24:58:3a:06:67:92:5f:b8:45:e1:0a:e9:78:dc:
53:da:bd:12:1a:0f:ca:55:db:f2:e8:43:6f:d6:91:
77:c4:75:73:1f:d5:05:2b:1f:c3:7a:d3:98:cb:e1:
51:e4:5e:e3:4b:26:f0:bc:82:27:65:36:5f:f9:51:
6f:ca:61:9d:ac:d4:81:b1:f0:fe:01:df:93:9f:e5:
42:74:9b:ed:68:dc:fa:6d:48:7e:5e:aa:e0:ed:fc:
a4:8e:ad:bd:54:85:05:9c:24:13:79:77:6e:4a:9e:
17:ff:eb:37:3f:12:7b:da:a9:5f:7d:12:66:a1:71:
be:55:6d:8f:7a:fc:f7:e4:4b:76:1f:3c:99:98:5c:
f5:dc:84:35:c0:99:df:36:61:ca:2d:22:39:fd:b6:
a0:30:64:c8:51:09:c8:88:8f:53:63:24:fc:2c:d0:
bd:61:4e:58:79:44:82:bb:61:4a:0c:36:d7:6e:32:
0f:51:86:02:01:dc:34:9b:ae:2a:43:96:fd:51:4c:
b6:1b:34:cf:74:93:63:f5:8f:6d:95:34:4a:94:66:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.154.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47811
Signature Algorithm: sha256WithRSAEncryption
69:e2:4e:be:bc:d4:3e:39:c0:36:ac:c1:19:96:0d:d3:32:b8:
75:c3:59:26:76:b1:07:04:d2:f9:16:3c:8a:bc:f0:39:d0:a7:
0f:21:84:91:4b:b1:91:43:b6:28:fe:47:dd:63:77:96:50:80:
59:d6:dd:fa:06:dc:c5:9f:42:82:b6:b3:e3:c5:a3:ca:d2:0f:
e7:b0:2b:9c:90:cd:67:17:8d:6e:34:03:f1:7a:f4:2c:83:db:
ef:89:58:d1:7a:3e:f7:f6:60:ee:13:0b:5c:32:19:39:15:28:
cd:99:bd:83:4a:3a:93:26:57:c8:b5:c2:9a:88:24:a6:68:2f:
f8:83:17:2f:d4:10:b2:16:4a:53:6e:1b:28:e9:ba:cb:91:c7:
86:5c:b2:af:5a:81:2a:5d:67:67:ad:e3:31:2f:74:6d:7a:46:
05:97:a6:15:1c:d1:ef:76:9b:b2:68:a3:c7:cb:50:3d:59:5b:
52:82:99:31:f9:99:ec:c2:81:88:65:36:70:bf:dd:15:19:c9:
79:a4:df:c6:9f:fe:12:ca:31:ea:a1:7c:f9:9a:5a:88:01:db:
17:52:e9:8e:a8:3d:f1:bd:7c:eb:34:27:95:92:3d:aa:45:c1:
ea:cb:62:17:01:17:0f:57:4e:33:97:57:58:2c:70:0a:c9:6c:
de:81:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:56 2024 by rpki-client on console-fra.rpki-client.org