Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer (raw, json)
Hash identifier: cCPzzfpXYB7+T8+8bLPgMBzgLpwoKTNN9T5o0GIIZeY=
Subject key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DAAB86CB434A9A1ACF28EF4EC7D1650E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Feb 2024 03:03:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49020
IP: 185.139.12.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:aa:b8:6c:b4:34:a9:a1:ac:f2:8e:f4:ec:7d:16:50:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 15 03:03:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:33:9b:68:47:ca:c8:5b:a4:6f:66:3e:42:2a:
1e:d9:ee:88:d4:94:7c:56:04:bf:3f:fd:65:8c:1a:
56:da:55:c1:28:12:97:50:33:a7:47:02:3f:24:0f:
4f:eb:68:a8:74:78:c6:85:c0:60:16:1f:91:0a:7e:
96:a6:82:07:1c:4e:d5:9a:aa:22:9d:3d:d2:e6:f4:
26:53:d1:76:1b:81:49:a3:fa:34:7a:84:d5:90:fc:
77:39:f3:34:1f:37:91:51:e6:c1:67:b0:02:73:1f:
86:6f:4a:65:a6:2f:6d:61:50:63:5d:6e:f7:1a:58:
a2:d3:fc:b0:f2:f1:aa:48:1e:29:c2:86:ab:e9:ed:
11:f1:57:50:07:2d:b1:f6:2a:3e:8c:43:fa:d0:c5:
1e:95:8a:07:13:e7:d2:41:24:92:29:7e:69:a6:c8:
53:ee:5c:6c:46:83:fb:df:c0:95:22:e0:f9:c1:88:
7c:45:ba:38:31:f4:d7:5e:3a:d3:0a:81:2d:75:ed:
e3:6e:6a:42:40:0a:ce:9e:57:5c:d6:60:fb:c1:b6:
3b:93:80:2d:aa:c6:27:70:d8:86:af:ff:ba:9d:09:
ff:03:10:fc:66:dd:85:72:48:bb:3c:dc:d1:e4:ce:
a1:a1:ce:e8:a6:16:c6:f8:fd:f7:59:7a:5f:72:5b:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.12.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49020
Signature Algorithm: sha256WithRSAEncryption
4b:6e:d6:b9:f0:53:79:cd:b3:4e:50:bd:7a:ac:9e:38:16:4f:
ae:2a:4d:0a:f5:41:f2:d0:df:d3:7b:49:09:fb:ba:e1:92:0d:
ae:a0:54:8d:26:79:be:f9:7b:1f:60:0e:16:e0:73:fd:66:24:
b5:31:7d:57:6e:3a:ab:46:f0:f6:52:11:b8:16:dd:31:c1:17:
e6:45:75:28:4c:12:cd:1c:00:4b:17:6a:a0:bd:d0:4d:bf:2a:
8c:1b:fc:1f:ac:01:b4:fb:b8:22:c0:04:5d:57:ab:3e:ab:9d:
d5:44:fe:52:a2:32:4b:71:02:ca:93:d4:c1:c2:d3:2d:0f:df:
d3:93:02:4f:8b:d7:31:4a:58:bd:fb:ca:89:30:15:d0:95:06:
64:cf:5a:ed:28:1c:74:84:d4:03:b6:35:d0:d3:41:6f:8a:b8:
9b:21:6a:af:ac:92:4d:6a:0f:69:e8:e6:5d:ff:aa:b9:a7:02:
9d:e9:3e:54:ec:88:1c:a8:a6:cf:dd:60:5d:72:24:8f:18:e9:
3f:dc:01:53:93:c7:e1:e7:00:4d:9d:33:d3:70:9b:e1:6c:04:
d2:78:7e:b1:30:0d:e6:a9:a8:da:7d:8d:9b:8b:af:36:db:05:
9d:9b:1f:a5:b1:87:95:fc:8d:dc:96:f0:7d:60:be:69:3b:b0:
dd:ce:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:06:47 2024 by rpki-client on console-ams.rpki-client.org