Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
File: Qkq4x890A7ViChuBPmrR2g2stE0.cer (raw, json)
Hash identifier: YIn9GZPdyMJQRy5Pgs6fVhwVejwp4KBxutQatLG9y7E=
Subject key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC5DB61E2BD3DD51703C123773A28E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.188.108.0/22
IP: 2a0b:bf80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5d:b6:1e:2b:d3:dd:51:70:3c:12:37:73:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:c6:ba:15:1c:52:95:92:28:6f:7b:19:24:
63:36:41:da:d5:02:04:2a:c6:5e:6b:ce:1f:22:3e:
48:4a:7e:ae:df:ee:5c:ca:30:ba:24:a6:0f:fa:e5:
7c:51:a5:50:38:fb:bb:f3:78:4c:1b:f3:a0:d4:18:
00:80:94:69:ac:ce:0e:03:5f:a8:bf:ba:33:67:c0:
34:cc:3d:35:af:cd:3b:ec:45:53:2b:11:40:da:25:
e0:ad:cb:3e:93:50:2d:d9:83:f0:07:12:fa:b6:bf:
d3:e7:35:f0:c0:ae:48:00:70:b5:87:83:dd:3c:5d:
0f:10:cb:8c:bd:8f:74:e6:ed:c3:27:8e:43:40:f5:
3f:53:70:93:20:c1:b9:a1:07:94:a0:3f:5b:70:b1:
da:c5:dd:61:75:c2:11:be:ee:97:4a:11:28:3f:75:
b0:58:3e:10:c0:0f:d8:7b:68:f1:e5:2c:3f:3d:b2:
03:8e:b2:56:d1:af:a9:2d:f3:ec:3b:1b:f9:86:27:
4a:23:9e:04:b6:01:a1:55:00:a7:e1:64:f5:30:77:
63:2f:0d:14:e7:3a:48:a2:73:a3:a3:97:69:84:33:
70:2f:eb:2a:4f:4b:79:d0:3f:32:a8:90:ec:79:3d:
16:e5:8f:9b:45:b7:de:b4:69:7a:d3:e5:f3:d6:e6:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.108.0/22
IPv6:
2a0b:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
91:c9:71:2b:6e:f3:b7:6f:fc:07:ad:3d:56:3b:c4:84:d8:f8:
a4:89:67:a7:e4:a7:86:75:2a:54:25:3a:a3:39:a9:a9:51:5a:
dc:48:f0:39:b6:70:87:38:59:a4:c7:05:ee:f9:ff:ac:0e:93:
4b:89:d8:b1:84:42:53:ec:8a:93:5d:f6:e5:1b:85:23:89:b7:
e4:97:0a:b1:bd:39:6b:3e:69:c9:ae:d3:a3:14:f9:71:2a:7e:
39:90:cb:c2:fd:a7:6f:b2:53:f2:e8:a3:99:76:3e:01:b3:d9:
05:ec:ff:fc:e5:e0:3b:28:57:d2:11:32:c2:ed:81:c6:2b:06:
9f:25:b4:b2:56:6f:d7:b4:12:f8:65:a3:e9:0a:91:de:a1:f1:
78:78:57:0a:b3:39:76:ce:3e:61:24:57:03:40:c1:b9:f3:6a:
ad:3e:e2:02:11:c9:ff:ec:1d:2f:77:b1:87:b1:89:22:a9:0c:
08:28:f7:84:36:fa:1d:40:bf:be:1d:b3:a0:48:b1:bc:41:88:
b2:4e:76:97:d9:9b:ec:12:e9:aa:66:d7:21:0a:ee:fc:6b:20:
d1:9c:a0:48:62:c0:ce:7c:47:be:40:96:5a:59:80:ed:26:e1:
4f:63:d0:5c:84:8c:43:8f:2d:eb:53:e8:5e:f3:ea:69:11:ec:
00:4a:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:07 2024 by rpki-client on console-ams.rpki-client.org