Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.cer (raw, json)
Hash identifier: zkfs5txTZWW8MFhxV+wIJ+p2ewVDWgMWZQwDZRaSUNU=
Subject key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE38CA79F007008D373D44FB6F02B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.92.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:38:ca:79:f0:07:00:8d:37:3d:44:fb:6f:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:69:ef:e3:86:e0:d7:19:d1:e7:e0:2b:c1:
59:e6:22:e3:58:4f:ee:bf:b7:b4:cf:49:fe:83:4c:
c3:64:1a:77:9e:30:6d:99:1a:db:91:68:1b:84:4f:
79:97:b6:79:87:96:5a:19:61:56:41:58:8a:07:78:
84:6d:6a:75:06:82:92:f1:74:cf:10:49:cf:c7:1b:
79:31:cd:9a:c1:7f:2f:5b:f8:a4:90:6e:17:45:07:
00:ff:b9:74:8e:8b:90:21:8e:b5:20:9b:bb:85:85:
26:79:ae:fd:98:de:31:3c:ee:0d:90:16:ae:ce:54:
66:b6:3e:7a:4d:c2:e6:45:d0:79:91:db:40:e1:e9:
fa:f9:3b:a9:f1:8c:3c:d4:87:a6:57:34:78:5a:bf:
78:7a:e9:5b:0c:88:aa:47:4e:0f:20:1b:49:8b:dc:
9b:2c:82:be:59:b6:da:d8:74:fc:8b:10:05:6e:52:
06:e9:2c:8b:92:67:d9:ad:ed:67:f6:57:90:f3:0c:
85:27:3b:a2:37:61:e5:55:5b:35:fa:fa:22:5e:9f:
21:63:90:7c:28:ab:f4:bd:8f:04:df:ce:32:4d:1e:
37:bc:bd:e7:b7:51:7a:56:1d:a0:78:f5:ff:80:77:
a0:8f:d4:91:7e:da:c1:d4:81:63:43:f4:ed:a5:79:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
af:21:83:93:3f:fb:53:39:4f:d7:8b:2a:1c:89:66:7c:d1:5e:
35:3d:2c:f2:a1:c4:e9:a6:ef:41:c8:ed:9a:44:61:91:e9:6c:
2f:7b:20:36:b9:ca:e4:dc:40:fe:bd:b3:97:01:24:7d:0c:9e:
bd:46:8b:96:2f:61:91:21:a8:8c:0e:40:9b:79:47:46:4e:49:
89:17:d4:ef:d6:d8:98:98:6e:41:85:5f:84:4f:68:3b:4f:17:
2e:40:f9:cc:5c:a4:33:53:0f:b4:a3:d9:92:a8:c2:c7:6a:d3:
8f:cf:47:f1:60:e4:6d:6f:4b:e1:b0:e6:74:28:02:86:72:d6:
0d:40:34:ea:1a:75:c1:0a:52:fa:11:0c:10:bb:ca:f3:64:11:
51:1e:3f:77:a9:31:59:e4:9f:8b:63:0c:61:3b:9d:7a:bf:7e:
7c:28:c7:43:a6:f0:28:db:8d:56:b8:4a:99:f5:cc:6d:7a:26:
ca:8b:0f:3c:4f:15:37:db:99:d6:9c:1e:70:be:fd:3a:5a:ed:
e3:c7:80:45:5e:63:f2:59:32:d4:b6:34:9d:cb:46:83:cd:f4:
e7:c1:ac:ed:6b:58:d6:a0:3e:1b:73:db:d3:fb:1e:84:ca:5e:
1d:00:06:b4:8a:8c:f2:9a:c7:c9:17:a0:dd:c1:01:0d:5e:e9:
63:94:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:06:45 2024 by rpki-client on console-ams.rpki-client.org