Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
File: QZs3miRkEoEOioBSpio5aIyjRXk.cer (raw, json)
Hash identifier: n5jYqwLxwTL6iXpny+NoYcccOr5KWropmHGzpjQydVg=
Subject key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274651EE844D31235ED479B028AECEAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56932
IP: 91.225.48.0/22
IP: 193.176.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:51:ee:84:4d:31:23:5e:d4:79:b0:28:ae:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=419b379a246412810e8a8052a62a39688ca34579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:19:ef:b8:f1:49:1a:a7:1d:20:90:e2:b3:
2f:31:7f:ca:5f:7d:51:1d:2b:57:68:bc:b8:1f:66:
c7:19:05:67:c3:45:0a:68:d4:a4:78:73:2f:79:17:
0c:de:de:d8:08:a3:54:a2:fe:9e:18:63:d0:57:35:
29:13:3d:d0:e6:76:ab:1f:ee:92:0f:be:e9:b9:c8:
79:57:5f:af:01:9e:ce:68:d9:64:1e:ad:5b:38:d6:
c9:46:57:05:37:a5:51:e8:d0:52:18:a6:59:0f:6d:
65:1d:f3:10:42:a8:e2:06:26:2b:8d:7d:13:50:4e:
2b:56:6a:ae:12:a1:2d:82:d0:70:8a:49:c3:21:fd:
4b:42:44:8c:6b:09:fa:0e:01:77:3f:cf:fc:d8:75:
c0:36:dd:4a:f5:09:48:3f:53:98:f4:e3:2f:ac:45:
6e:5c:70:6a:53:81:ca:1c:a5:59:23:72:b0:ce:d5:
87:e2:74:50:b2:0f:77:73:6d:7b:61:cc:67:ae:9e:
74:f6:c6:cf:2e:0c:51:99:23:10:c7:7c:19:31:94:
a8:24:67:8b:05:f8:0c:40:cb:21:a1:22:c8:20:55:
05:54:6d:ea:ce:8c:5d:5e:fe:e4:2a:54:d8:5d:85:
fe:fc:8d:2b:76:cb:7a:3b:e1:6c:83:c8:e2:cb:38:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.48.0/22
193.176.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56932
Signature Algorithm: sha256WithRSAEncryption
61:ff:70:e3:21:7a:50:17:9a:d6:2a:84:6b:f7:9e:75:2c:32:
2f:26:df:37:7d:ef:3d:32:5a:96:09:3b:de:08:6a:e9:22:55:
8a:03:8d:44:6e:0e:86:a5:91:34:cd:ec:2b:d9:1e:11:61:6b:
ae:fe:ad:a1:9e:b3:20:03:b9:38:9d:52:56:92:78:be:c9:e2:
4a:14:9d:ee:cf:08:b6:98:59:38:94:15:22:5e:95:61:90:18:
34:82:62:2c:02:c3:da:b1:a1:55:09:ce:0c:d7:a0:2c:04:c8:
79:67:55:04:c6:d0:8f:2a:b2:1e:63:55:2d:7b:62:77:6f:28:
f9:8f:b3:c0:34:0c:f8:2d:90:4d:31:dd:11:a9:21:3b:cf:37:
4b:87:d0:38:06:00:75:71:0a:9a:aa:79:b3:81:cc:f6:1c:df:
ab:06:87:eb:ba:d2:fe:98:63:85:1f:54:44:dd:85:53:37:9f:
43:1a:c1:52:32:be:37:5b:3d:f2:e4:0c:3d:1b:b2:6c:84:ab:
46:b1:09:3c:d6:41:2f:a9:7e:a8:e3:e8:31:a8:6b:06:4c:04:
f3:eb:91:14:9f:a6:8b:4c:54:d9:dc:65:9d:fa:56:53:e9:29:
b8:85:25:74:a8:59:40:11:71:22:64:d8:29:bd:32:10:cf:ca:
6c:47:26:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:18 2025 by rpki-client