Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.cer (raw, json)
Hash identifier: XWF4gfD4rjANxUL/pQfpq6cuLE+LWr4DG8cXtPsL5ms=
Subject key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF3E218D3F942AE2399913787B4D7778D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 08:01:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203778
IP: 194.33.76.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:e2:18:d3:f9:42:ae:23:99:91:37:87:b4:d7:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 08:01:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:cc:c5:b4:25:fb:e7:e8:d3:14:40:e0:2e:
30:83:30:23:45:a7:17:fc:17:1e:4c:72:fb:72:c9:
93:28:76:b0:c9:d7:da:b4:91:60:67:27:05:22:c9:
2a:0d:2b:2f:9b:19:4f:f2:de:d2:47:f8:f2:50:28:
76:3c:f4:f1:62:7e:54:2c:9a:ab:a9:dd:dd:19:a4:
00:c8:2f:de:94:3c:67:de:79:07:64:7e:70:26:dc:
aa:31:3b:94:91:a7:38:13:32:f4:fd:bf:71:6c:73:
ac:72:a7:b9:2f:17:75:5b:e8:4b:97:93:96:9b:db:
92:6c:96:08:68:25:ef:0c:b4:58:08:5b:1c:a3:d8:
5c:b1:51:72:36:fc:2b:c9:34:a2:0c:a4:34:b0:9f:
e5:b6:1f:4f:ba:c6:87:74:30:5d:cc:82:86:f6:78:
90:13:de:07:a7:4f:1d:74:78:00:67:ff:0e:cb:34:
c4:6d:e4:d4:76:34:ff:71:94:33:55:ba:9b:0d:d3:
9f:da:c0:0e:4d:e8:24:b9:89:20:8f:d6:e8:75:5e:
71:9f:c3:f9:d2:d7:e0:fd:d0:a3:b5:e1:53:65:c6:
b9:f1:51:7c:8e:82:17:39:fb:64:2f:1e:2e:0e:b4:
9c:82:db:a3:87:36:e8:9e:74:4d:87:c7:43:01:57:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.76.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203778
Signature Algorithm: sha256WithRSAEncryption
3c:51:d5:14:df:66:d1:2b:6e:6b:fa:e9:57:49:f1:6e:f9:0e:
52:a7:56:08:d2:04:27:30:33:cd:72:3c:30:d0:d3:2c:e1:f7:
82:b7:54:19:f8:66:95:5a:2c:a2:34:fb:18:29:0a:3f:85:c7:
8b:2e:f8:1a:90:88:32:28:44:8f:3d:84:b8:33:6d:9d:05:10:
92:ac:d6:3b:85:7d:47:de:7d:03:5b:17:c7:59:74:2b:72:b9:
ee:8b:37:d1:8a:f1:4b:79:ea:60:b6:f3:dd:a1:6c:73:60:7a:
95:2e:50:3d:57:89:c3:7a:63:9a:b6:48:dc:2d:90:d3:74:51:
68:48:8c:00:6b:c8:a3:d1:41:e0:b7:33:3a:8d:6e:c8:1e:25:
60:54:69:b9:9c:5b:b4:42:51:05:f6:0b:1e:b2:75:52:ee:39:
f8:68:ff:3d:a7:a8:87:43:89:9a:df:e9:e7:58:85:9e:93:78:
af:d1:e5:ea:02:9f:10:5d:cd:76:6f:c9:0e:33:ff:df:5a:fd:
2d:5b:1d:d2:9b:7d:5d:6e:d3:b1:72:c4:1c:ab:7b:70:12:5d:
d2:6a:ba:b7:97:14:ba:3f:eb:5e:ea:90:73:20:e5:28:ca:de:
ac:b5:ca:06:72:b9:1a:28:ec:13:7f:5b:88:45:d8:70:da:02:
51:c8:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:08 2024 by rpki-client on console-ams.rpki-client.org