Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer (raw, json)
Hash identifier: 5vBm/MwBqNaMvjH8oPVuskhMDX+naNzB2uumtCxjoWU=
Subject key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E47C90AEAD07EB8EEA402786A8CE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48293
IP: 91.194.246.0/23
IP: 91.212.217.0/24
IP: 94.228.192.0/20
IP: 185.108.20.0/22
IP: 2a06:4180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:47:c9:0a:ea:d0:7e:b8:ee:a4:02:78:6a:8c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:28:92:ed:c7:71:54:3e:ef:44:5d:30:a9:
ed:93:3f:c6:3e:f0:2b:97:46:65:51:7c:a1:59:17:
e6:fc:b5:71:5d:d6:86:af:cc:4d:11:8d:93:73:b6:
6e:b0:5c:35:34:a4:61:7b:80:27:15:d9:05:cb:da:
f2:1c:7a:84:20:15:18:1f:f9:28:23:92:e3:40:5b:
9b:57:62:b1:fe:2a:57:c6:1f:28:f0:6f:fd:17:97:
45:e1:54:cc:7b:b3:2a:bd:69:b6:dd:f2:35:8f:48:
60:62:8a:bc:60:75:54:75:36:a0:3a:e6:29:ef:7d:
e1:39:81:2f:18:10:29:e9:c4:31:c1:79:6c:2f:99:
79:20:2a:6f:a2:18:78:7e:b6:47:fc:ed:c5:95:b9:
55:9f:d6:8a:e5:1b:e9:42:32:36:3a:c7:32:a6:2f:
81:b1:e8:4c:97:5a:ee:eb:95:3a:bb:e7:01:35:83:
ba:48:a6:cf:4f:c0:da:b4:bc:18:b4:11:60:b9:92:
af:bb:a3:d3:cd:a8:4e:aa:f2:d4:3f:62:db:9a:0e:
c9:eb:56:3c:9e:b8:71:2d:c6:ff:05:6a:71:35:7f:
cb:97:fe:5d:5f:9d:5b:74:8d:df:71:80:54:e1:bc:
8d:e2:0c:b1:0f:5e:45:71:4a:a6:b6:e2:1b:bf:77:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.246.0/23
91.212.217.0/24
94.228.192.0/20
185.108.20.0/22
IPv6:
2a06:4180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48293
Signature Algorithm: sha256WithRSAEncryption
35:a1:aa:70:b1:5f:07:0d:b5:1b:29:aa:9b:1f:7f:d9:98:cf:
43:51:de:7a:be:ff:11:e3:fc:0a:81:88:ef:f6:eb:37:b4:d1:
90:9d:99:3d:dd:e1:17:35:a6:6c:88:8a:f0:08:a3:c5:31:eb:
17:59:36:e4:0d:da:fd:9f:17:ad:72:cf:56:43:9d:07:79:c1:
bc:40:1e:34:02:10:9b:c7:b5:4d:11:55:0e:3e:5c:6f:59:ab:
e8:47:17:73:28:e9:f5:1c:52:8a:76:75:8c:e7:95:e6:96:a6:
84:29:f6:c3:59:42:96:b7:df:00:c9:7a:18:da:fa:5c:99:fb:
c5:b0:33:41:23:83:74:01:98:9e:25:53:62:10:9f:56:da:76:
7d:28:a4:18:d0:9d:1c:bf:7c:d0:2c:3f:cd:4e:ae:cc:71:10:
73:94:cd:36:7e:57:29:2f:6f:b0:bf:c5:4f:8c:91:8e:89:62:
e7:b4:f0:8e:b0:40:ae:61:27:fe:f5:c4:28:8a:33:90:d4:c7:
bd:94:db:2d:bf:a4:37:05:d9:c8:8e:88:38:87:94:8f:7f:5c:
d7:54:37:69:db:5f:30:9d:ca:b8:d9:bc:9b:f2:ca:ca:3c:52:
96:8a:4b:14:c4:c2:0f:74:cb:58:e8:9d:35:e9:d0:60:ce:a5:
62:bb:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:11 2024 by rpki-client on console-ams.rpki-client.org