Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
File: QoWCG7eoRF779DPUwZiQp_qUn6g.cer (raw, json)
Hash identifier: czECKXOHjjp+TK+22/WgEGzJMEiRwqkzWFxU0mNLvbo=
Subject key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80171D928DF27A33DDE72A758B18174
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209383
IP: 139.28.192.0/22
IP: 2a09:1b40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:71:d9:28:df:27:a3:3d:de:72:a7:58:b1:81:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:81:88:7b:26:59:49:68:ff:bb:fa:18:62:
f3:01:c5:df:8e:c8:9e:ae:81:e9:c2:e9:12:be:2d:
2f:b6:78:f5:b4:fc:f7:66:4b:57:63:8d:31:97:e5:
92:d0:ad:74:fe:47:ec:05:11:b2:90:be:81:fd:46:
07:8b:65:ae:9f:e7:58:52:47:d8:fa:3b:e5:5d:97:
74:86:8a:84:32:99:85:bc:05:6d:2c:07:d3:0a:65:
d7:cf:8f:a2:b7:52:8e:92:07:97:56:79:91:2c:73:
1f:f6:a5:b0:d7:9a:69:0d:5a:5c:92:37:c1:07:d2:
56:4b:2e:d8:9c:39:d8:b1:d6:06:4e:3c:6a:ba:53:
88:35:db:95:9b:6f:4b:21:69:30:8f:9b:a8:b2:d6:
b9:00:23:f0:89:2e:af:e8:27:f4:5e:b5:80:10:c8:
51:d8:2b:d3:0d:80:4a:56:79:0c:1d:27:8c:e3:e8:
73:0f:7f:33:06:76:46:2e:57:0d:a5:da:ad:3d:6f:
55:31:d1:03:95:34:bd:f4:19:af:3f:5d:21:59:52:
4e:6f:8f:ce:35:a3:39:d3:ca:8e:f1:2e:f2:29:3e:
97:cd:5a:67:5e:40:47:b9:66:5a:81:10:04:52:e4:
70:49:60:7a:79:85:db:18:f0:c1:7c:68:a2:19:63:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.192.0/22
IPv6:
2a09:1b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209383
Signature Algorithm: sha256WithRSAEncryption
78:11:94:c1:78:75:ea:74:a1:e1:3c:77:00:b4:60:34:e0:6b:
12:65:ee:0f:08:28:1b:4d:21:f6:d1:22:a9:f4:78:b6:99:77:
f0:fb:bc:02:c2:af:d1:0c:29:4f:f2:25:0d:21:00:95:97:d4:
ba:df:9b:68:84:5f:72:5d:d3:65:19:11:a6:f6:2c:36:93:71:
f5:e4:5c:98:fa:cd:e1:09:d9:6b:87:aa:0a:a6:91:9a:a2:73:
48:e3:5f:f6:78:6c:f8:f5:9b:1a:13:93:6f:5e:cc:7b:55:f5:
db:b9:e0:41:74:6d:d0:97:92:f7:51:f5:6f:0a:3d:f9:3a:a2:
57:3d:0f:c5:31:01:74:c5:d7:1c:92:10:fe:84:d0:2a:2f:a8:
91:9d:98:a9:22:8a:83:cb:40:7b:ec:f9:41:73:69:09:74:ae:
5e:13:3d:18:d9:b5:32:38:2f:20:55:d9:1f:2d:af:cd:36:c7:
0d:31:46:26:cf:e5:3f:60:fc:c1:5c:5e:36:cd:c8:6a:b3:d1:
da:fa:16:06:50:31:34:3b:85:0e:14:a5:f8:37:0a:38:28:74:
6d:6b:a7:6d:99:03:c4:7e:a4:18:b7:33:08:b7:46:30:5a:2c:
a6:b3:96:66:fa:e1:34:bf:87:30:86:d9:57:bc:03:75:49:32:
f5:ef:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:43:26 2024 by rpki-client on console-ams.rpki-client.org