Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.cer (raw, json)
Hash identifier: 6Celp7T+vFSpZll+e+lJRkGiHDwkq2hF1Hq0SnUgTv8=
Subject key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255BC495CB3AC9499EAB3F0505698E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211536
IP: 2001:678:f88::/48
IP: 2a10:afc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5b:c4:95:cb:3a:c9:49:9e:ab:3f:05:05:69:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:43:b2:f2:91:9b:0c:72:eb:e4:46:f0:7d:
33:de:cc:0b:02:bf:a1:9e:86:be:09:54:c8:68:48:
70:cf:24:d2:5f:e2:39:d4:4a:58:47:39:a8:10:0e:
51:9d:bd:36:f3:a0:75:5c:fa:a2:c9:37:15:bd:9b:
e6:f1:ca:55:92:5d:68:72:46:bf:b4:65:91:5c:13:
dd:78:86:d5:cc:9b:63:53:28:b8:41:53:27:73:d4:
ca:30:9a:9c:b3:a3:a7:9d:ed:25:14:17:30:4b:fc:
24:4f:39:d5:42:c5:c7:e4:62:2b:a8:ea:50:b2:5b:
b4:15:0d:94:88:ed:b8:82:89:79:0a:05:94:ff:b3:
1d:c6:70:5d:83:cf:63:aa:5b:58:9c:4c:60:9e:7b:
85:68:c4:7d:ec:c7:b8:e8:5d:58:97:6e:62:74:d0:
08:fb:c9:0a:9f:8e:c9:5c:88:6b:98:9d:72:93:82:
49:76:e7:4d:d5:31:9a:95:ce:ac:40:d3:96:5e:ab:
a2:3e:68:71:93:36:62:42:37:2f:1e:6b:51:32:34:
44:ad:18:ed:23:c4:94:7c:98:45:e6:ba:b4:03:ca:
3d:c0:26:ad:21:a5:9c:a6:56:8a:41:94:89:2c:4d:
c3:2f:72:a7:94:8f:57:fd:8a:3f:19:8b:16:1c:72:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f88::/48
2a10:afc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211536
Signature Algorithm: sha256WithRSAEncryption
71:e6:93:8d:18:44:68:18:6b:2d:64:40:ac:9d:6d:ff:59:a6:
5d:32:ba:ce:83:c2:c9:35:3d:13:97:58:07:08:fc:8a:e0:b1:
55:fd:b3:03:d9:6c:cf:28:38:4b:3d:05:07:48:49:1b:4d:ee:
9c:43:a0:8b:cb:0f:6a:27:71:eb:31:dd:9c:21:36:9e:2a:66:
fa:db:10:59:3f:fd:90:06:e5:e9:67:a9:13:e8:c4:7b:07:dd:
3a:8b:48:39:31:20:22:de:74:ec:ed:e1:dc:96:8b:e0:87:2d:
79:12:73:72:ed:c2:a2:67:09:0a:82:78:41:40:af:0e:c4:f2:
a3:38:3d:93:7f:96:7e:c7:43:db:9e:2a:df:1f:09:3a:c8:3d:
82:b1:3f:53:ce:dc:85:59:2c:a7:dc:b3:cf:0b:5f:a2:92:a3:
0a:5b:a7:8c:0f:f1:cb:ca:1d:77:83:ed:4d:c2:29:b4:88:df:
8b:90:82:78:ea:4a:8a:f2:e5:c7:6b:ce:b4:22:2e:5e:f0:3e:
a8:06:0b:d4:d5:99:d5:27:46:ed:aa:73:92:21:7e:01:3a:74:
f9:cd:41:b0:10:48:52:1c:f9:09:b0:00:18:f6:c0:ce:a0:ca:
37:86:f2:4f:e3:41:bb:0b:04:b5:1c:f0:0f:87:6d:7c:36:5e:
fb:cf:4d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:53 2024 by rpki-client on console-ams.rpki-client.org