Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.cer (raw, json)
Hash identifier: rqK4q1l3yjsJLRkTx8+5iIKyjkuskHaDs+BzhiDXc5I=
Subject key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDE87E07500F5F8D387A7A98C58021
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211536
IP: 2001:678:f88::/48
IP: 2a10:afc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e8:7e:07:50:0f:5f:8d:38:7a:7a:98:c5:80:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:43:b2:f2:91:9b:0c:72:eb:e4:46:f0:7d:
33:de:cc:0b:02:bf:a1:9e:86:be:09:54:c8:68:48:
70:cf:24:d2:5f:e2:39:d4:4a:58:47:39:a8:10:0e:
51:9d:bd:36:f3:a0:75:5c:fa:a2:c9:37:15:bd:9b:
e6:f1:ca:55:92:5d:68:72:46:bf:b4:65:91:5c:13:
dd:78:86:d5:cc:9b:63:53:28:b8:41:53:27:73:d4:
ca:30:9a:9c:b3:a3:a7:9d:ed:25:14:17:30:4b:fc:
24:4f:39:d5:42:c5:c7:e4:62:2b:a8:ea:50:b2:5b:
b4:15:0d:94:88:ed:b8:82:89:79:0a:05:94:ff:b3:
1d:c6:70:5d:83:cf:63:aa:5b:58:9c:4c:60:9e:7b:
85:68:c4:7d:ec:c7:b8:e8:5d:58:97:6e:62:74:d0:
08:fb:c9:0a:9f:8e:c9:5c:88:6b:98:9d:72:93:82:
49:76:e7:4d:d5:31:9a:95:ce:ac:40:d3:96:5e:ab:
a2:3e:68:71:93:36:62:42:37:2f:1e:6b:51:32:34:
44:ad:18:ed:23:c4:94:7c:98:45:e6:ba:b4:03:ca:
3d:c0:26:ad:21:a5:9c:a6:56:8a:41:94:89:2c:4d:
c3:2f:72:a7:94:8f:57:fd:8a:3f:19:8b:16:1c:72:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f88::/48
2a10:afc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211536
Signature Algorithm: sha256WithRSAEncryption
19:61:85:c6:49:f4:b5:7f:76:39:2c:8c:20:df:6e:bb:33:8a:
20:7d:87:8b:1e:83:f4:38:04:91:04:99:79:bd:e0:e7:7d:1c:
21:d1:f6:f4:f0:80:9a:7d:5b:17:90:1b:75:f5:e3:ba:27:33:
0a:be:b4:70:58:ad:d3:0d:df:89:4e:5f:74:71:d4:bd:01:d9:
ff:de:a4:e5:74:be:5e:8b:7f:ad:87:80:16:09:c0:12:82:b8:
9b:81:2c:5d:bb:80:c8:3d:91:67:3b:6c:c1:d3:d0:8c:4a:d1:
8a:0f:7f:a3:8a:06:b8:b5:1b:d7:22:61:b7:dc:7f:bf:4a:6b:
aa:74:50:10:41:2b:4e:04:cf:33:b9:cb:57:fb:ba:01:ab:9f:
70:e4:75:ec:b8:cc:11:b4:a6:d7:0d:71:e2:cf:41:58:b6:a8:
99:4c:d2:c6:44:80:db:da:2c:fa:59:87:50:d0:5d:aa:ee:01:
d9:e9:87:54:f7:ac:cc:ae:ed:4a:36:a2:fd:7c:18:64:41:61:
4d:30:1f:bc:cf:1c:14:32:9e:f4:9e:03:7a:c5:f7:06:d1:94:
2e:c7:e5:a9:09:9e:38:43:b3:05:50:4f:10:f2:17:09:3d:d7:
3f:eb:1c:71:f5:f7:c6:86:a4:da:f1:29:7d:3b:b5:b8:54:d7:
fd:1c:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:37:48 2025 by rpki-client