Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.cer (raw, json)
Hash identifier: pXGMbpUSOCHtxtObtP3jSVmz50xvw9Pi3eW+vYkgou8=
Subject key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3C3FC9DE4B3B0847821D93D9D3675
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57046
IP: 91.230.91.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c3:fc:9d:e4:b3:b0:84:78:21:d9:3d:9d:36:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:f3:c7:ab:65:f4:bb:b5:88:12:48:a1:93:
a6:8c:d0:48:b4:c0:a5:fd:bf:41:fe:ea:cc:f6:51:
7a:de:0b:e2:6a:90:da:91:d6:38:10:e0:79:aa:ef:
a2:7d:0a:98:30:a3:dc:53:9d:83:cf:f0:66:55:54:
a7:20:38:85:c9:b7:c9:38:17:e3:1a:99:c9:6e:ab:
79:d1:55:6a:60:58:66:72:4c:30:71:d3:8c:d2:52:
76:2a:56:ca:ff:fb:1c:18:b0:c9:8e:92:07:9a:e4:
a5:b1:1f:88:4b:02:13:b5:ed:c4:94:2f:2d:31:19:
4e:82:a2:0d:7a:46:ea:91:c6:e3:c8:bd:97:51:d9:
ae:4a:ed:4b:3f:dd:5c:81:fb:2d:7d:10:23:4f:b9:
29:6e:6a:c9:a6:af:40:45:3b:35:ac:86:b1:59:94:
ac:90:35:8b:6d:ac:d3:53:dc:c7:d9:b1:8f:8c:ca:
a1:3c:15:2e:45:b6:70:b8:63:45:e0:eb:a6:2e:aa:
14:18:14:a3:04:9d:f8:fb:3b:de:94:42:a3:2e:62:
7f:60:11:fb:d1:be:4a:7f:89:19:3a:63:8b:31:58:
9f:1e:47:b4:ac:cf:83:2f:e5:5c:1a:67:76:f9:a7:
e4:08:59:23:e6:9a:64:42:66:1a:af:60:b6:94:30:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.91.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57046
Signature Algorithm: sha256WithRSAEncryption
3f:c6:23:f0:22:10:26:12:84:47:50:57:ad:61:a7:3c:91:6f:
19:23:cf:22:fa:90:cd:c5:ea:84:03:fd:99:2c:06:2a:a3:3f:
fe:d5:b8:b7:84:21:3c:79:34:18:a0:82:ec:ba:5a:20:18:3c:
1a:c6:fd:7e:20:f5:f0:67:58:64:96:f8:8e:7a:cf:08:ec:11:
f8:54:da:9b:86:d5:fb:b9:4e:2b:f4:6b:b4:e8:c4:6b:8f:bc:
a7:45:5a:13:21:9f:0d:6e:7b:f1:c6:99:ab:f6:d9:3d:13:6f:
94:29:cf:e0:b4:37:6b:8d:9a:ae:a7:56:54:b8:42:03:62:b7:
97:d5:d0:c6:04:96:ad:31:52:6a:7e:3a:04:26:ac:89:9e:93:
16:56:de:37:42:09:85:b5:d7:8c:c5:74:5e:0f:56:b3:83:0b:
e9:18:0e:14:43:cc:6a:dd:5d:b7:29:c5:21:4e:bd:04:7a:8d:
af:11:32:e4:c6:79:84:d7:86:9f:06:f3:d4:b7:f5:8d:0e:74:
63:4c:c2:f2:cc:88:d9:31:1b:d0:e8:8d:5b:be:af:4a:31:2a:
2f:3a:d6:53:90:78:5c:4f:fe:45:74:14:06:ae:ec:b8:1b:89:
db:06:2d:18:1a:4c:e0:91:d4:d7:96:89:63:83:13:a9:94:2f:
1c:f2:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:42 2025 by rpki-client