Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.cer (raw, json)
Hash identifier: j/1bCU2HzZEueP3FvCkLe165lEP05E+RuRKgj01xjfA=
Subject key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42546538EFA491E19129E76BFA322F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57046
IP: 91.230.91.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:46:53:8e:fa:49:1e:19:12:9e:76:bf:a3:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:f3:c7:ab:65:f4:bb:b5:88:12:48:a1:93:
a6:8c:d0:48:b4:c0:a5:fd:bf:41:fe:ea:cc:f6:51:
7a:de:0b:e2:6a:90:da:91:d6:38:10:e0:79:aa:ef:
a2:7d:0a:98:30:a3:dc:53:9d:83:cf:f0:66:55:54:
a7:20:38:85:c9:b7:c9:38:17:e3:1a:99:c9:6e:ab:
79:d1:55:6a:60:58:66:72:4c:30:71:d3:8c:d2:52:
76:2a:56:ca:ff:fb:1c:18:b0:c9:8e:92:07:9a:e4:
a5:b1:1f:88:4b:02:13:b5:ed:c4:94:2f:2d:31:19:
4e:82:a2:0d:7a:46:ea:91:c6:e3:c8:bd:97:51:d9:
ae:4a:ed:4b:3f:dd:5c:81:fb:2d:7d:10:23:4f:b9:
29:6e:6a:c9:a6:af:40:45:3b:35:ac:86:b1:59:94:
ac:90:35:8b:6d:ac:d3:53:dc:c7:d9:b1:8f:8c:ca:
a1:3c:15:2e:45:b6:70:b8:63:45:e0:eb:a6:2e:aa:
14:18:14:a3:04:9d:f8:fb:3b:de:94:42:a3:2e:62:
7f:60:11:fb:d1:be:4a:7f:89:19:3a:63:8b:31:58:
9f:1e:47:b4:ac:cf:83:2f:e5:5c:1a:67:76:f9:a7:
e4:08:59:23:e6:9a:64:42:66:1a:af:60:b6:94:30:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.91.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57046
Signature Algorithm: sha256WithRSAEncryption
4f:49:83:2b:44:ea:81:81:40:ca:05:c8:6f:91:7e:c1:e2:94:
8f:48:29:e7:8c:70:c7:14:94:ce:0f:e3:19:a0:df:90:d5:40:
83:e7:c2:7f:f8:16:c7:da:5f:56:b7:3d:d0:bb:4c:0f:22:5d:
97:13:19:b6:35:71:4e:16:5d:a5:33:3e:4d:b7:32:88:ba:69:
cc:df:0a:76:4d:ee:e6:5d:d7:fe:50:ed:2e:53:94:d7:8c:93:
98:22:5f:ea:76:7b:12:66:16:a5:ae:2c:aa:27:47:86:5c:29:
e7:27:04:55:c1:62:0d:1c:7f:3e:c9:42:d6:ae:5a:bb:36:90:
4a:a3:34:28:00:ea:e2:50:5b:c5:05:29:a4:38:d4:7d:9d:c3:
60:06:50:1e:50:6a:14:38:6e:47:5a:d9:1f:b5:36:bb:7c:80:
07:b7:6e:9a:ac:f0:9f:84:c2:dc:30:f0:f9:42:c3:f4:fb:33:
dd:2c:e5:86:82:be:f7:d4:cd:b9:8e:d1:ea:a4:b6:d4:dd:1d:
b3:d3:ab:8e:3b:49:3d:5a:75:68:59:18:98:de:96:5d:d2:59:
ec:39:1b:a8:68:9a:23:c3:29:e2:13:23:4d:9e:10:13:22:b0:
dd:1d:81:08:de:f7:ac:21:3c:e8:2c:21:f1:66:d4:af:8d:cd:
c9:15:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:56 2024 by rpki-client on console-fra.rpki-client.org