Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
File: QxfdFbYr3XESWZuBQjNg7uegEpY.cer (raw, json)
Hash identifier: 5gI6W9Ao67kch8WaRrd+dP/HIYwoXkBTTn6IvB/IWGw=
Subject key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B89E07A1D2423F1BDFE4CD0614D115
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.29.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9e:07:a1:d2:42:3f:1b:df:e4:cd:06:14:d1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4317dd15b62bdd7112599b81423360eee7a01296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:9c:96:e2:46:c4:97:eb:36:7e:25:d8:f9:
25:fd:c1:b0:45:17:8a:f3:61:86:b0:a0:cc:bc:4e:
91:ba:c6:1f:52:98:65:5c:89:74:c1:42:b0:7b:b6:
97:cb:2c:8c:02:27:bf:b3:f9:94:0c:2e:4c:54:ca:
fc:22:36:0f:1b:90:80:75:ca:23:93:a9:03:9b:0a:
9b:8a:91:31:58:02:36:0b:e0:34:7d:3d:ed:a4:2f:
d0:82:56:a7:07:61:46:88:6c:8b:27:78:61:5e:f8:
48:76:c0:70:4f:f9:6e:9c:43:0e:dc:e2:71:16:29:
30:1a:f3:fd:bd:1d:90:27:b3:70:5b:50:47:ab:46:
5e:25:bf:13:16:c6:b3:d2:e1:bf:04:36:7c:c6:9f:
07:bf:5c:24:be:42:19:fb:56:bf:b0:e6:c4:23:92:
f0:32:88:2a:f6:e3:dd:d4:37:fb:d7:50:d6:72:42:
5d:43:64:24:8a:bd:5b:9e:95:df:91:76:2e:45:7e:
92:80:b8:f3:d2:ad:ca:9d:c5:61:0f:c1:a8:f1:5e:
19:d8:f1:c9:32:63:27:e2:62:fa:97:9a:f9:8d:ae:
84:83:75:6f:90:86:ad:db:34:3f:f7:94:5b:0f:53:
db:b1:4a:ca:28:f0:61:7e:e6:4c:84:5c:b2:f1:82:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:93:78:87:c4:dd:14:08:65:9d:e8:50:c7:be:ad:b7:5d:f4:
4d:1e:80:96:b7:48:76:fa:f2:44:0b:b5:91:c7:bd:01:49:34:
25:eb:90:c1:cc:e8:8a:95:af:cb:23:5b:5e:ac:25:2e:42:4e:
2b:56:e0:ba:90:e0:52:ce:12:5c:c2:77:04:8d:06:a7:74:04:
a8:d1:04:98:92:32:9f:db:d3:ca:3f:bf:01:2e:2b:9e:aa:b5:
bd:cd:d8:b5:a0:dc:81:f9:76:7b:06:ab:b2:3e:cd:06:54:90:
0d:ed:02:27:08:32:54:d3:fe:e9:94:0a:de:79:81:9d:cc:4a:
65:cb:3d:54:15:83:ce:9d:b5:98:84:75:53:b5:b4:d8:5a:bb:
23:63:72:4c:69:c1:c2:3f:60:b6:5e:2a:e9:b0:16:13:bc:2a:
be:1a:71:cd:69:43:44:a9:8a:5d:bc:74:29:08:7a:6c:9a:fc:
5a:3f:2e:96:4a:fd:5b:9d:8e:79:5c:53:df:4f:8b:34:a5:88:
cf:c5:be:8a:5b:62:c8:b3:87:c2:c1:16:01:18:51:1f:ff:55:
84:89:e5:2b:78:bf:f6:dc:48:03:03:bf:a3:ec:f4:6a:28:5e:
ae:c6:8c:eb:ab:59:46:c9:07:85:9a:e5:e5:24:2e:50:db:79:
20:25:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:14:25 2024 by rpki-client on console-fra.rpki-client.org