Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.cer (raw, json)
Hash identifier: Ct5szqIAn9TDZBg16TvbWDLZq1VlPWzFow/xu7pQ3JE=
Subject key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192AD958CB2D90BBBFA4D190F966C30288C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Oct 2024 05:38:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.66.60.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:95:8c:b2:d9:0b:bb:fa:4d:19:0f:96:6c:30:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 05:38:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:70:d0:a8:ff:43:a3:cd:7d:a1:ee:bc:a4:
0e:a4:be:c1:e3:75:1d:6b:57:7b:4e:4e:07:b5:64:
ad:fd:a5:0d:4d:84:d0:e1:29:dc:78:08:95:4a:01:
37:f0:7a:f7:69:48:97:7b:27:47:50:04:57:b4:78:
14:24:01:b5:de:be:a3:69:8b:e9:d1:0f:d3:e0:5f:
e8:d5:07:78:cd:4a:6c:b4:d1:2f:6b:aa:60:b4:0b:
03:44:1d:43:48:74:ba:04:50:6a:86:5c:19:16:7d:
79:08:60:1c:a1:61:1a:24:71:09:3a:c4:41:5a:e8:
d2:96:83:30:53:0b:ef:fb:df:4c:c9:a8:9f:6a:d6:
92:8b:b6:81:42:dc:bd:cd:6a:4e:5d:eb:ba:23:1d:
80:9e:67:b5:0e:12:72:ac:f5:8d:e3:44:52:d9:27:
83:60:2d:e9:2b:ad:0d:bc:8b:22:1a:f8:be:cd:ab:
3e:6e:b5:7b:4a:6b:ac:b4:90:7f:13:a8:d3:1b:b8:
a9:29:07:c7:19:c6:c6:0f:86:3e:48:c2:83:c1:a2:
19:75:4b:11:74:e1:e0:18:ef:d0:54:48:63:4b:18:
44:46:a2:41:da:d5:74:bb:d1:3a:5d:a8:15:c2:ed:
3c:7c:1f:68:f1:a6:66:9c:d0:80:dd:56:6f:02:26:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.66.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ef:ca:ee:51:7c:c7:b7:7f:8f:42:70:b3:68:ec:e3:72:84:
c8:2d:e0:a7:2c:db:eb:0c:e8:ec:1b:4b:bf:56:56:1f:cd:45:
0b:21:ec:de:09:c1:e7:28:b0:7f:7a:75:95:87:fd:b9:10:da:
8a:4d:bf:26:0a:dc:92:89:cf:38:a6:d8:dd:1b:a1:5a:04:08:
33:2a:ff:7c:59:76:63:54:3e:33:b8:3a:66:ca:bb:0d:68:56:
5e:77:d5:75:a9:c4:a5:f7:b1:50:06:69:b7:75:0b:82:62:77:
1d:44:19:54:fa:7e:4f:e4:fc:0a:79:78:c8:22:9a:6b:f2:a3:
df:22:ac:7c:f4:2c:39:ae:f8:66:fc:95:d5:9a:fd:db:22:e7:
7d:34:c6:34:12:65:8e:a0:b4:01:40:6a:35:f6:a6:f7:f1:4f:
d6:77:ef:6b:98:32:86:b6:02:53:d5:80:97:69:48:2e:56:bd:
21:a8:2e:77:71:10:ec:0a:1a:d7:8d:8b:31:5c:8b:fe:5b:d2:
37:2d:32:57:f1:65:31:e0:fa:85:bb:ea:db:8b:6e:3a:2e:a8:
50:55:a7:b3:59:e4:41:0c:8f:3a:ab:dc:07:02:41:31:86:cb:
16:cc:12:ac:90:bb:d8:91:56:6c:ac:8e:db:a4:24:c0:3f:1b:
51:34:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:31:32 2024 by rpki-client on console-fra.rpki-client.org