Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
File: QqYv_JnylBAtzOI13Bo8E9q81po.cer (raw, json)
Hash identifier: eF03HKXrsI9FidOIDRmkk5IETd4o2dalP/vf0j6Bgck=
Subject key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726E45F01F3C7F29C30403C7E98ADEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199997
IP: 46.245.224.0/21
IP: 2a01:bfe0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e4:5f:01:f3:c7:f2:9c:30:40:3c:7e:98:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:b7:b6:03:5a:63:09:62:0e:62:72:c8:7e:
5b:80:d9:f8:6d:97:f2:00:84:42:67:39:d4:61:db:
e1:55:43:af:2c:21:18:73:ad:ab:9d:27:7c:bd:7c:
b5:31:17:38:47:ec:67:d8:c4:c1:a7:f9:86:13:30:
bd:29:6d:f6:3b:71:e0:f1:76:4c:b7:a4:93:65:d2:
c6:6c:10:5d:80:df:1e:13:6b:e5:b1:ae:3a:e8:56:
d6:7a:fd:b5:3f:54:a8:4c:5c:c5:68:65:0e:a4:95:
66:88:27:e6:fa:f1:59:ee:58:89:2c:be:75:03:bd:
8a:70:53:17:36:e6:00:e8:3c:75:9d:a6:24:0c:18:
5b:90:e0:2d:c8:3b:b9:23:fc:32:88:af:cc:79:f2:
ce:75:a1:d1:2b:1a:34:08:d1:cf:76:69:29:84:9e:
c7:db:1b:6c:0e:72:a7:a4:70:f4:26:a4:51:17:72:
55:3f:3e:df:c2:81:87:05:43:d2:13:e5:73:5f:d7:
88:d1:bb:31:e6:51:73:05:6e:5f:d9:35:81:82:56:
6b:f9:24:72:05:39:0c:78:25:32:42:31:c0:90:03:
2e:c5:b6:82:24:ae:8d:f7:6d:a4:14:62:b6:ff:b7:
1e:62:96:bf:fd:7f:87:95:02:88:0f:86:4f:e4:0a:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.224.0/21
IPv6:
2a01:bfe0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199997
Signature Algorithm: sha256WithRSAEncryption
18:8e:91:bb:a1:09:7b:5a:1e:3f:4f:f8:ab:dd:db:85:5e:4d:
b4:f3:79:bd:65:39:64:f1:a8:67:36:25:1a:e9:ac:58:bd:a3:
3a:1d:7b:ec:d5:c7:7a:af:f8:02:b9:e0:57:7e:27:ab:3c:e5:
b1:97:e1:71:23:77:88:c4:0b:ea:64:6d:08:e6:2e:86:55:29:
83:fa:e0:02:00:ad:99:55:a7:ad:b5:48:75:f6:df:e2:bb:4f:
b0:03:cb:d0:1a:19:b4:3c:40:ba:fb:53:33:18:7d:d6:40:ce:
b4:0d:ec:a3:b4:5d:08:44:9c:19:3b:16:3a:ec:fe:2c:6b:d8:
ac:85:93:8f:d6:69:e6:0e:0a:41:8e:84:34:86:24:61:a1:a2:
eb:75:c4:31:ff:33:da:ec:7d:bc:3c:c0:c7:4d:20:3f:57:c3:
37:53:43:44:df:dc:21:6f:d8:f6:ba:40:c8:1f:ee:34:a6:a5:
b7:79:e6:e0:c0:e2:84:f4:fe:96:d2:27:87:95:04:29:ac:b2:
22:ac:0a:32:22:0e:81:09:f7:80:1e:47:26:f4:3a:b2:40:00:
fe:91:7f:d3:2b:cb:5f:ee:df:63:f9:cf:6f:db:6f:cf:88:9d:
b4:41:e0:24:20:48:c7:31:3f:0d:79:20:9d:66:99:f2:70:07:
04:bd:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:44:33 2024 by rpki-client on console-ams.rpki-client.org