Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
File: QNiN23rtct6j_41pztZTGlJ5Sqc.cer (raw, json)
Hash identifier: 1+1lZF9QJoao1YSH5BlFwtiQKjWZdlH33PUwDmvebfk=
Subject key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255357DDFA786FFA673493EBCDCE83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211786
IP: 193.108.200.0/24
IP: 2a10:92c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:53:57:dd:fa:78:6f:fa:67:34:93:eb:cd:ce:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:91:24:9b:0a:86:f6:63:f8:45:e2:0b:73:
c5:56:27:ee:98:40:b1:24:72:d2:5e:00:17:1c:e5:
a4:8c:b2:7f:39:61:b4:a6:b8:78:89:4d:20:11:aa:
22:08:9f:47:6a:0b:f1:6e:b9:2e:f5:91:62:a1:a8:
0e:6a:3d:82:6a:27:f9:29:f1:a6:a3:72:cf:aa:56:
29:1d:28:3d:e6:7b:3f:8e:d2:a8:35:10:b0:28:3b:
11:09:51:2e:d4:2e:0f:25:bc:1f:84:e3:31:2b:56:
37:6f:a0:8e:d9:8d:d9:a7:eb:cc:80:62:c7:b9:d7:
fa:d7:da:29:b5:19:91:8a:1e:41:a8:be:f8:f1:27:
57:0f:63:22:46:4e:b6:db:db:67:57:13:f8:0f:60:
24:97:a5:87:d5:e0:44:85:7d:67:a6:8a:54:e9:ea:
c1:25:1c:ca:61:67:34:e6:41:e8:f8:a3:64:0a:c1:
fb:f3:fe:08:0e:b0:3c:6f:3a:82:37:33:54:0d:85:
a6:63:a1:95:aa:e5:bb:a6:e3:c0:b0:56:5a:e6:c7:
24:76:4c:6f:50:e9:79:a6:e1:99:24:bb:20:90:a5:
3c:bb:4b:78:ae:ad:ea:92:9d:22:18:09:d2:6d:55:
42:7d:8f:82:2f:ad:f6:ef:fb:27:89:47:5a:45:00:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.200.0/24
IPv6:
2a10:92c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211786
Signature Algorithm: sha256WithRSAEncryption
07:e3:75:bb:9c:7e:a3:0c:ab:94:c8:a5:cf:bf:20:a2:d4:eb:
81:06:61:9c:7b:f0:f0:79:1d:d0:2f:60:3d:54:96:af:a6:2b:
ec:a8:7e:07:b4:ab:f1:cb:e7:a3:fc:b0:f5:ea:17:03:e0:e9:
ec:bf:16:76:f4:29:b3:6f:2d:06:80:92:a0:65:11:21:b2:d0:
a5:b3:3d:15:59:c6:86:7a:f1:b1:94:57:1a:57:72:35:25:8f:
09:b6:17:21:1e:cc:31:b5:fa:47:dc:1a:24:a1:58:9d:e3:e6:
e7:8d:9c:40:63:5c:de:70:51:b8:92:c8:5a:72:0f:78:44:4e:
f2:a2:1e:40:60:98:f3:f0:a3:6b:b8:10:b2:6b:38:1f:dc:ea:
a5:59:df:23:2e:9a:33:e1:9c:f2:05:64:3d:9e:c9:1e:84:0a:
99:aa:55:7c:16:29:c0:4c:ba:cd:44:d9:7f:c5:2c:b0:e5:24:
41:a3:81:e1:21:82:4d:3b:67:85:af:a4:5f:d4:c9:40:89:fd:
34:92:29:66:c8:8f:ef:09:7d:81:5a:cb:d3:6d:31:dc:85:d7:
94:2a:23:f8:3d:fd:9f:14:19:db:6d:7d:1a:fe:9a:be:ad:f3:
de:18:12:7f:69:75:c8:e0:2e:a9:9e:4b:cb:19:81:3f:dd:b6:
d0:e6:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:59 2024 by rpki-client on console-fra.rpki-client.org