Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.cer (raw, json)
Hash identifier: SRT84WR9BttBF9wwITA6TU5UZg36mfapgUVnny/q+XU=
Subject key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEE057F23DE532EA620B5873572CE97FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 11:39:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211986
IP: 185.234.103.0/24
IP: 2a10:dc80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:05:7f:23:de:53:2e:a6:20:b5:87:35:72:ce:97:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 11:39:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:90:9b:99:49:73:50:3c:27:13:4e:fb:e7:
d7:1a:a7:64:76:0a:68:f7:a9:e9:f0:6c:9a:6b:f0:
0d:2b:06:f3:6f:78:14:f1:ff:11:4d:dc:0c:c2:57:
f9:24:17:4d:34:92:0d:fb:29:89:f2:5d:3e:78:f9:
cb:b2:6e:28:a5:f6:d6:58:9f:00:f7:1b:2b:80:d9:
ea:6f:ab:ac:9c:e9:37:71:1a:c0:2d:c1:a0:56:9d:
5a:2f:0c:3d:93:19:ce:98:4d:2d:1d:f3:dc:8e:4a:
3a:f8:f8:49:68:3f:92:1d:15:c9:40:2c:91:c4:bb:
78:bf:fe:7c:89:3a:96:e5:80:ae:a3:50:31:70:47:
59:d4:0c:d5:2b:b4:c5:f6:e6:f6:39:af:eb:d7:af:
29:cc:d3:32:16:5b:18:f5:f0:d7:4f:64:01:75:28:
9e:a9:32:e2:56:da:9d:f1:68:c4:df:07:0c:d9:15:
4a:54:2c:40:1a:3b:ee:b2:cc:e5:b7:77:1c:bd:f3:
d3:21:ec:d6:a0:b5:ce:8c:e5:cc:25:19:89:06:ab:
25:73:77:cb:f5:b4:97:1a:f2:ce:92:3f:a3:54:ae:
24:bf:eb:2b:2a:87:6f:43:d1:64:de:3e:b3:08:ea:
03:d1:2f:9b:bf:2a:11:c0:fc:35:b2:95:c6:90:e7:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.103.0/24
IPv6:
2a10:dc80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211986
Signature Algorithm: sha256WithRSAEncryption
6d:ea:0b:78:22:64:c6:40:c9:fa:38:67:2b:02:b6:40:17:9f:
13:b0:21:27:65:76:d7:7d:37:15:70:af:e1:79:f4:dd:3b:5e:
79:43:48:3b:ea:8b:15:28:96:f9:f9:63:5f:f1:5c:08:f2:9c:
d6:92:d7:26:7f:6c:02:0e:d0:05:91:f9:f9:d0:57:2b:32:82:
7d:60:cf:6c:fc:eb:c4:c3:26:7c:19:29:2c:85:21:4b:ae:4e:
e8:c6:18:54:c5:1c:17:70:a7:71:59:40:b5:11:5b:2b:06:ed:
df:67:e1:8c:69:98:93:8c:09:cd:52:4e:f0:f4:87:ae:5c:ae:
32:8d:f5:7c:b2:f0:ff:0a:9e:8b:c0:b6:db:02:42:56:2b:95:
8a:ec:2b:ac:41:e2:b9:c7:e7:c2:5e:8d:39:17:57:88:a0:2b:
7c:a0:d5:95:70:58:95:ca:95:2c:0a:2e:f9:3b:e7:16:c0:cf:
60:63:bc:44:20:06:0b:ae:4f:0d:f7:9a:0a:ca:30:ae:f5:f7:
4f:cb:1c:3d:f5:28:11:08:49:d0:36:da:9b:36:37:e4:44:e8:
64:4d:42:60:52:97:7d:df:29:e7:1d:b4:1d:77:fe:fa:e2:4a:
ef:0e:cf:a6:77:66:0f:6c:f1:ff:f1:18:4f:45:26:4b:c2:71:
20:82:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:14:14 2024 by rpki-client on console-fra.rpki-client.org