Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.cer (raw, json)
Hash identifier: 60brnjt6NpqHmA8w9n9BXPLxgJ8e/AlVKaPr2f5VUzU=
Subject key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192569D8AA5B3C78D0F2017DAEE540ADF75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Oct 2024 08:20:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15516
IP: 62.61.128.0/19
IP: 77.75.160.0/21
IP: 79.98.192.0/21
IP: 81.161.128.0/18
IP: 82.147.224.0/19
IP: 82.211.224.0/19
IP: 85.24.0.0/17
IP: 87.72.0.0/15
IP: 91.100.0.0/15
IP: 195.135.216.0/22
IP: 2001:14d0::/29
IP: 2a01:558::/32
IP: 2a07:8900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:9d:8a:a5:b3:c7:8d:0f:20:17:da:ee:54:0a:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 4 08:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:c8:b0:e6:fb:b2:4d:27:6b:a0:74:cd:84:
b7:4a:c7:a8:0c:3c:cb:fa:e9:62:e9:a7:8c:4e:93:
fd:76:6e:ea:39:bf:13:e2:dc:fa:f6:d8:18:82:dd:
d1:63:22:c9:0a:33:0f:0c:83:47:7b:37:f5:5a:fa:
28:d6:66:72:7d:63:b4:e3:99:8f:1e:34:e1:f5:a5:
11:36:15:2a:84:90:29:2d:32:7a:da:b1:7c:d5:8c:
ee:ba:46:e1:3c:f2:9b:37:4e:ba:e4:94:3d:f4:86:
54:2a:94:bd:bb:ad:41:d4:a4:30:07:31:6c:ed:3f:
98:2a:46:14:d5:6a:3d:74:bf:76:98:eb:da:09:a3:
3c:8d:93:14:cb:d8:94:47:59:72:a6:b5:e1:0e:52:
61:de:4a:63:47:a6:12:8c:77:cb:4e:4a:b8:5a:a2:
40:56:30:a5:a8:e3:0c:38:3a:2a:35:2c:ac:3b:98:
18:6d:49:80:ed:8c:ad:a7:8f:26:d3:43:ab:01:47:
05:34:44:5a:bf:14:ca:a4:fc:cb:ba:00:24:e0:7a:
b9:b5:a7:b2:b5:cb:33:6d:30:2a:c7:ef:f5:dc:b2:
1d:ff:c4:5c:0b:5f:0b:a3:d8:e9:58:bd:bd:32:d1:
97:42:e7:26:7e:67:3a:24:cf:88:23:8b:2e:58:14:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.128.0/19
77.75.160.0/21
79.98.192.0/21
81.161.128.0/18
82.147.224.0/19
82.211.224.0/19
85.24.0.0/17
87.72.0.0/15
91.100.0.0/15
195.135.216.0/22
IPv6:
2001:14d0::/29
2a01:558::/32
2a07:8900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15516
Signature Algorithm: sha256WithRSAEncryption
a1:db:1e:41:7b:80:3f:3f:25:f9:e2:e2:27:be:61:7a:cc:2d:
07:78:5b:38:d2:72:a7:5b:71:2a:99:00:cc:82:0b:f2:3c:32:
3a:8e:ad:c5:c4:ff:e7:52:51:54:c9:8f:65:42:87:3e:43:ae:
8d:f2:b7:da:d4:1a:c3:78:51:49:0b:0d:30:00:67:46:35:b9:
7f:dd:22:36:6e:d8:c1:e1:2e:ce:69:b4:b6:43:b1:65:4e:15:
2a:6a:0a:f7:c0:66:bd:3d:34:5f:ef:47:2e:79:57:64:d7:3d:
64:e7:dc:ca:1e:3b:ee:48:e0:e5:76:df:e2:f2:9b:b7:3b:9f:
bd:9d:88:c0:2a:27:2b:d5:d8:2e:ab:09:cb:77:19:6f:11:84:
1c:91:b1:f8:50:07:1b:04:7b:2d:33:06:a0:1b:94:ed:d5:5f:
ff:7b:fa:41:12:04:0e:b2:2e:a9:e1:bb:01:95:46:eb:76:5d:
67:b3:92:f8:2a:75:ed:ec:2d:f8:01:d5:7e:1b:b6:36:fa:cc:
a3:e4:f2:82:02:c1:6c:fc:07:e2:c9:be:ac:e5:9c:bf:ef:c4:
e4:1a:49:d9:44:0c:f4:6a:20:97:5c:0d:76:ed:41:2c:c2:f5:
cb:c6:17:a2:75:e4:61:6f:f6:dd:5f:23:55:27:7e:fc:44:ca:
09:09:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:31:26 2024 by rpki-client on console-fra.rpki-client.org