Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
File: QfxINXn14C0-SZzXOiOq2RQDGDE.cer (raw, json)
Hash identifier: WtgcrH1bdRjy9cfFScr3zYQWE2crTk1l1jIIYW/mMr0=
Subject key identifier: 41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79365E92EC997BFF54F8EA1862EB16C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212057
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:65:e9:2e:c9:97:bf:f5:4f:8e:a1:86:2e:b1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41fc483579f5e02d3e499cd73a23aad914031831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:2a:22:c7:c9:f4:89:76:79:33:09:2a:3a:
6c:c9:71:2b:8d:a5:41:58:a6:ae:3f:a7:d5:03:e1:
d9:c5:fc:51:2e:5b:e6:47:6a:c6:6c:e7:ae:65:ac:
24:b3:9a:ef:c6:3e:9b:7b:eb:2f:65:af:57:39:69:
4f:2f:42:87:0c:03:32:5f:b7:1e:ad:a5:1b:2f:4e:
a2:e0:84:7d:28:34:4f:49:45:92:60:8e:c0:6d:ae:
db:96:1b:e3:f2:aa:f6:f1:c5:89:7a:95:0c:66:3f:
65:28:b4:2f:a9:2d:8e:a1:e3:52:b7:75:20:42:64:
60:39:6b:b2:0f:77:cb:e1:74:a3:82:0e:20:3c:18:
b7:67:03:f9:ac:58:32:00:38:78:b8:fd:41:bf:43:
f3:11:62:08:37:1b:01:4b:e1:51:88:5c:30:a4:2f:
c5:d6:3b:5b:70:17:fa:55:46:21:e1:64:8d:03:40:
59:f8:03:93:2e:d4:59:31:43:2c:1a:64:96:99:f1:
7b:3e:9d:d3:d5:f1:61:c0:f3:3c:ec:ba:af:f6:ad:
02:79:ab:1f:03:38:a3:b0:bf:32:cf:75:7a:d0:7d:
a6:72:9a:7e:d1:94:e5:6f:11:16:70:8c:30:c6:1f:
bc:ba:cd:d1:c7:83:d3:68:0c:b9:e1:0f:36:ca:ee:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212057
Signature Algorithm: sha256WithRSAEncryption
2a:1c:7d:46:1e:7b:16:77:58:b0:1b:e5:be:df:1e:86:f3:b7:
1d:fe:bd:8d:b1:05:df:ce:10:1c:8a:ee:9c:29:ea:5f:f7:10:
66:ba:2e:f2:ee:74:45:57:7b:e3:8f:79:1d:49:57:d3:7a:c7:
47:f6:76:d5:9f:99:61:cf:41:9a:1c:ae:a1:d7:d9:e1:0c:1c:
88:6b:b6:d7:0e:1b:b8:97:99:08:29:a4:47:8f:99:7a:42:c2:
fc:71:5b:a8:98:0e:5d:b0:23:7c:13:68:4a:ec:c7:dc:4e:5c:
80:d5:52:28:4c:b8:9b:3c:66:9f:c5:c4:cb:ae:4a:06:a4:2e:
4a:d3:e6:d6:a4:b3:31:cb:ae:02:39:28:34:0c:b0:b7:52:1f:
c4:b0:95:24:78:7f:c4:68:ad:bb:9e:bf:25:6a:c8:6e:3f:bd:
72:9e:61:cc:e8:1d:35:45:8a:95:49:d6:2b:68:36:f0:c6:44:
4e:6f:0d:98:1c:29:6e:12:49:68:08:9f:d2:19:5d:4a:7f:12:
2e:92:99:04:b6:57:20:9a:a6:36:8c:f3:52:fa:0e:24:8d:01:
52:d7:e3:1b:71:72:09:52:ff:2d:45:66:28:f1:c8:26:66:db:
46:05:e5:c2:65:5d:4e:36:41:55:d9:cf:79:e5:bb:49:70:48:
97:38:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:49:59 2024 by rpki-client on console-ams.rpki-client.org