Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.cer (raw, json)
Hash identifier: sPMA5hGQwdBm0PNdf7sGf1Rz6wcW35lw61PCtRFbNzM=
Subject key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC03AE34CBCB2769B7289139AF0828
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200573
IP: 185.239.40.0/22
IP: 2a0c:3e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:03:ae:34:cb:cb:27:69:b7:28:91:39:af:08:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:c8:21:6a:fd:d1:30:8d:f9:e5:0c:8c:2f:
fd:e9:92:3e:87:4c:de:e2:c7:37:9a:4e:c1:99:2c:
4e:79:b9:ba:6d:f4:90:62:1e:24:1f:38:bc:e6:e8:
6f:d4:41:de:e2:15:c6:89:2a:d5:c9:43:f7:22:dd:
c7:28:1f:43:de:4d:0f:04:e6:f2:4e:a1:8d:1f:44:
7d:03:23:2d:2e:79:49:46:b3:70:f2:02:b1:1e:5f:
0e:22:69:0a:6e:f4:30:05:76:70:bd:45:d7:fe:88:
1c:fe:d2:56:62:2f:b2:7d:f5:c5:16:ef:51:fb:8a:
42:54:27:23:18:82:91:99:28:cd:98:06:6f:26:b7:
b4:69:c2:07:2a:2c:50:cb:da:7f:ae:4e:c3:89:c3:
29:ad:be:52:20:22:5d:37:0a:53:82:41:49:c7:53:
80:3d:45:f3:14:a3:89:79:e3:97:75:9a:cd:90:59:
97:6d:05:25:c7:aa:6b:89:90:67:1a:e2:f1:9d:50:
7f:13:06:6e:f2:ba:e6:8b:8c:1d:fe:06:8d:9d:9d:
fe:88:16:ae:a7:0c:ee:24:c6:39:09:5a:d7:7a:3b:
c4:82:c4:78:a7:a3:0a:8b:7f:5d:b3:5f:d2:01:89:
b2:3c:12:7b:17:dd:95:cc:a8:b5:10:e5:e3:29:01:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.40.0/22
IPv6:
2a0c:3e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200573
Signature Algorithm: sha256WithRSAEncryption
54:24:d9:a2:0b:4a:fe:59:17:b0:d1:e7:14:f3:a6:25:6f:4b:
fa:23:ec:90:d3:b4:32:d3:81:0b:09:7d:bd:b1:20:7c:fe:88:
b5:64:77:22:3a:37:02:91:bd:1d:12:d0:eb:60:cc:c6:20:f3:
5d:62:cd:41:84:f6:26:ab:4d:e6:59:48:27:bb:3b:84:3e:33:
72:c5:af:c1:ad:b0:14:1e:e8:a2:9c:8d:86:5e:34:c6:7c:5c:
b6:35:70:82:70:7e:18:98:75:24:63:0a:f8:32:ca:c1:cc:fc:
25:8d:0d:99:80:d9:7f:9f:4c:9b:01:56:64:bc:9b:28:f0:99:
a6:8a:71:3b:88:f1:c5:c1:e9:14:c6:fe:a2:fb:5d:ff:b8:56:
69:8b:c2:c7:f6:4f:f5:09:5e:ef:e7:6b:86:52:7e:bb:66:15:
01:6f:7a:14:51:de:ee:79:4a:80:f1:6c:50:de:8b:9d:ab:80:
c9:88:54:a7:41:bf:05:58:58:66:11:50:7a:55:50:d5:ce:6a:
4d:48:e9:da:f2:91:d8:95:25:ec:15:b5:2e:b1:0a:2d:f3:e8:
60:76:78:29:ef:98:6c:bc:ae:50:85:71:cb:a1:03:9e:c3:c3:
e6:a6:a0:d0:f6:67:84:16:78:02:98:d3:db:44:88:36:d4:64:
84:c6:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:06:31 2024 by rpki-client on console-ams.rpki-client.org