Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
File: Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer (raw, json)
Hash identifier: v6YD3T49EkVeTH9LtNnd9abYa+HZPe7HRG+sUKU5oNc=
Subject key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E578136AEA818A01CD4E510B3322F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.50.112.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:57:81:36:ae:a8:18:a0:1c:d4:e5:10:b3:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:1a:59:ee:86:42:b5:e9:d2:e5:e1:b7:2e:
a2:0d:06:44:20:8c:a5:42:56:7c:d9:b5:68:a5:6c:
07:44:d9:8a:c5:78:c5:5e:15:99:fb:f2:58:ec:ee:
26:25:1d:d1:e6:6f:13:20:44:cf:1b:5b:53:7c:64:
3a:f8:ff:ea:6b:90:c4:9b:2e:3a:2b:8a:83:45:90:
da:eb:8f:c3:21:cc:51:01:f6:ca:9f:b3:2e:41:b0:
f8:c1:f9:85:7a:dc:83:73:8d:20:f6:0e:53:42:3d:
37:29:6e:6c:f8:b7:62:00:1f:68:2f:f2:fb:70:29:
44:cb:6e:c2:85:ed:a3:e7:39:e7:30:e8:de:18:24:
e5:04:55:51:40:84:76:37:ed:ba:78:c7:48:29:5b:
b7:04:ae:91:da:ed:18:03:68:79:37:52:fa:d7:4a:
cc:de:36:aa:4c:e4:38:d1:8a:8b:0e:93:66:02:cf:
72:70:dd:1b:d1:06:64:b4:71:14:2c:0c:00:da:22:
2f:93:15:8b:14:dd:c7:14:72:15:cb:03:b7:b1:4f:
1e:21:66:ef:6b:1a:47:17:eb:93:d4:2f:b6:e0:e9:
f7:cc:d3:76:e3:1a:9e:45:53:df:ed:11:8f:35:9a:
4c:90:f6:8a:1f:de:99:13:c0:20:63:ac:58:f7:8b:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.112.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1d:88:1d:1b:dc:b2:da:ac:a2:6a:19:4a:f9:bc:cc:21:cd:
45:27:12:52:e8:95:c7:79:86:42:75:4c:c9:a6:aa:75:1f:79:
26:f2:a5:2e:4b:42:0c:ff:fe:74:e5:db:08:df:d0:bf:45:3e:
3c:47:2c:32:7a:04:d2:46:5e:bc:d0:e1:c2:b2:bc:8d:28:ce:
70:b2:21:b6:ba:cb:ff:e7:a6:24:2c:95:46:a9:a2:92:65:18:
e7:d4:3e:3b:4e:08:34:6b:07:27:e5:7a:38:6d:12:e1:1d:39:
5f:fd:80:6b:13:d1:da:e9:e3:2d:dd:bf:ff:21:48:27:d2:bd:
3a:1a:60:28:6f:80:b5:fe:e6:24:d9:c5:13:13:18:c2:28:e8:
09:d9:da:2a:1b:fa:51:47:1e:66:5b:7e:8a:d5:c7:1e:38:9e:
a8:86:77:bc:aa:3f:c0:6e:03:76:9b:7c:17:bc:1a:4b:3a:0f:
39:d6:5d:6d:7a:a7:2b:e3:00:0f:b3:77:78:71:d9:17:fe:b3:
30:53:73:a5:56:50:01:2e:c9:25:c9:d9:ca:4a:08:f9:03:ec:
b8:cf:81:dc:0c:63:ff:8c:54:21:b7:81:17:85:5b:09:f9:02:
94:3b:db:b8:0a:99:21:d1:18:cf:e0:40:6f:87:21:57:e0:e7:
3d:9c:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:28 2024 by rpki-client on console-fra.rpki-client.org