Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.cer (raw, json)
Hash identifier: 46imERMYpDRokqf0J9NdbBNIOp2ha4Zx0dhRf9uR/u4=
Subject key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4C52B82FD4C6602327A60BAFF038
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213032
IP: 2001:678:dc4::/48
IP: 2001:678:dc8::/48
IP: 2001:67c:27c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4c:52:b8:2f:d4:c6:60:23:27:a6:0b:af:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4121c7fb04153829d96a1c038f0df714da595404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:c3:05:c5:a3:09:39:99:88:25:f8:1f:b7:
4b:80:5e:f1:fc:33:1c:64:31:91:6d:4d:ca:90:ef:
25:25:90:2f:5c:2f:ae:37:ab:fb:d0:71:2d:39:30:
7f:9c:a9:68:59:44:7b:41:38:8e:ec:32:36:0c:2f:
f7:70:91:ec:28:ab:84:77:09:ec:06:7c:6e:17:66:
f7:98:b0:c6:c1:16:31:4f:52:a9:e1:76:69:23:e3:
5a:c0:51:62:ac:57:f1:87:d0:7b:3d:00:6f:3f:33:
42:03:fa:d4:cb:44:42:91:d3:cb:fe:30:ad:22:0d:
38:33:ee:08:0c:45:18:67:9d:be:77:0a:72:f0:d3:
bf:10:06:6f:da:92:b4:62:bd:b0:0c:3f:99:ce:e8:
38:22:81:fa:a1:49:15:65:0f:a7:f8:fa:67:1d:4b:
28:91:ff:6a:3d:4a:91:63:63:dc:11:2c:37:d8:cc:
17:44:16:e8:cb:e5:24:7d:51:21:28:49:0b:3b:ac:
62:52:ef:fd:fd:23:dc:f4:ad:49:6f:3a:1b:ea:27:
1e:4f:ac:e1:55:72:b0:b7:2d:d1:19:99:8e:d4:a7:
26:84:ba:bb:da:1f:08:b5:33:47:fa:34:03:d5:73:
27:06:64:a9:1f:09:7b:bd:6a:75:63:e9:72:7d:ff:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dc4::/48
2001:678:dc8::/48
2001:67c:27c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213032
Signature Algorithm: sha256WithRSAEncryption
67:42:df:17:7b:0a:1c:48:c7:3b:65:5d:79:79:a2:ff:c7:e8:
b8:3e:ff:d2:5c:54:26:19:36:a6:e0:cb:17:40:e2:af:8f:cb:
b2:90:23:e7:f5:64:7b:8e:e9:19:72:ad:52:06:e6:9a:4d:75:
32:8e:94:6b:1f:f3:8c:81:99:66:00:d9:05:3e:ea:3f:a2:da:
0a:1e:74:82:b4:c7:39:ef:fd:c3:42:08:ef:86:5d:b0:6e:1b:
31:fa:e8:c8:2d:b0:69:7e:28:a5:34:62:d9:5a:06:cc:92:15:
45:99:7f:83:b9:72:33:ec:43:c9:3b:b8:79:ff:b9:1c:49:6e:
e7:9f:d8:f2:2b:40:09:1b:da:fd:4a:7d:48:95:a9:38:8a:e0:
5c:4e:d0:9b:85:e2:8d:7f:e6:cc:f4:ac:f6:e3:81:d3:bd:3c:
8a:f3:b9:6c:63:d2:f3:d8:20:b6:da:dd:eb:27:61:f1:57:a7:
4e:1b:76:c8:47:0a:9e:aa:3f:a5:5b:60:cf:28:8f:0a:d1:d4:
f4:74:a7:92:42:02:3d:86:16:3d:bd:0b:ed:2e:ea:f1:31:08:
19:c0:a9:97:0a:95:20:7d:28:53:57:0f:59:54:0e:97:16:c7:
15:9b:4b:54:71:f4:8d:7a:ac:c2:71:e9:e7:49:bf:a3:8c:76:
70:d7:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:03 2024 by rpki-client on console-fra.rpki-client.org