Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer (raw, json)
Hash identifier: lgLOPUFiAEhAWSrxu6CXwmCb8+6xule0GGEb4j2yz3Y=
Subject key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB492CCFCE6D129AEFB5E3A0F474F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202223
IP: 185.49.164.0/22
IP: 2a01:a0e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:49:2c:cf:ce:6d:12:9a:ef:b5:e3:a0:f4:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:f5:37:eb:57:dc:d8:29:c1:62:d9:88:89:
05:4a:1c:c8:10:c0:01:5b:73:43:63:7b:73:6b:a6:
8e:bf:7c:77:da:5d:51:de:c7:4e:45:e1:04:4c:ef:
61:1d:ec:f2:26:4a:75:c5:8e:c6:3a:0b:24:fc:d3:
55:3c:71:65:c7:49:fe:7c:0e:22:09:98:c0:6c:be:
c7:be:a2:d9:51:71:c5:15:01:be:49:9c:2a:27:c0:
c0:4e:33:c5:eb:7a:a1:13:47:f7:cb:2a:ce:a0:e3:
92:f6:9b:db:52:8a:ea:32:36:77:6e:2a:cc:74:46:
49:69:5d:1f:7f:5c:bc:db:18:66:b2:44:d3:fc:f7:
84:10:01:3c:3c:87:fa:78:af:0f:84:f9:8f:2b:cd:
50:b2:aa:19:da:7f:3e:ec:b3:a8:49:07:8c:c1:ef:
7f:37:eb:99:ab:4f:12:70:a8:0f:35:eb:61:63:45:
6a:28:bb:fb:b6:4f:6f:88:78:2e:ca:5f:b8:46:ba:
77:a4:53:27:4e:2f:23:cf:9a:e5:70:06:d5:8b:a2:
70:09:dd:6d:f7:5c:ff:91:b3:86:8f:eb:e3:08:c5:
09:16:58:16:b1:14:54:0d:3e:70:3e:ec:f6:37:f8:
48:22:fa:ca:d7:cd:f8:f3:08:62:0d:0d:d7:53:13:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.164.0/22
IPv6:
2a01:a0e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202223
Signature Algorithm: sha256WithRSAEncryption
8c:86:b2:c5:a5:a4:44:92:49:9b:50:73:a1:c2:8f:6b:46:e7:
bf:4f:6a:ba:86:10:f7:20:cb:30:fd:36:f6:67:de:69:b2:95:
3c:dc:b8:10:85:ef:cc:d1:71:52:f3:85:3a:bc:33:a2:ba:ce:
54:5f:0a:a8:45:a8:0c:0a:17:f1:79:d1:c2:05:9d:b6:02:53:
e3:f0:df:2e:d2:f1:a4:00:40:39:77:2c:5a:a8:eb:d0:54:48:
77:f3:8e:8d:03:bc:97:49:e5:aa:4d:30:2c:8d:6b:6e:48:c6:
16:b6:3f:ad:2d:7f:8a:d7:d0:2f:f7:0d:5b:3c:38:a0:9e:19:
95:4d:4d:9b:af:60:f9:3f:80:e7:26:d3:40:64:47:f8:29:6c:
10:07:58:fc:96:6e:23:e4:ca:32:24:4f:d3:aa:60:8e:2e:5e:
e8:ce:97:51:6a:3b:19:80:5c:2d:65:4e:21:2f:53:2d:04:5d:
74:1d:f5:82:79:44:6e:cf:e3:d3:cb:fc:36:4e:8a:52:f3:82:
d5:b8:96:8d:28:3f:f3:63:c3:b0:3d:27:fc:1b:76:dc:ff:9b:
04:09:73:e0:32:75:fd:65:1f:c0:ce:32:67:42:d0:66:e4:c3:
7c:e4:8d:85:87:0f:db:25:1c:0b:6b:18:a3:9e:52:dc:37:d1:
f5:a0:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:59:46 2024 by rpki-client on console-ams.rpki-client.org