Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
File: RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer (raw, json)
Hash identifier: qKQn8nwQls9bCy5fm1VIAOGScs5pEPpJbubuqu8jySc=
Subject key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D601CC1453F60C97F27E4776C9C55F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51059
IP: 5.83.192.0/19
IP: 37.1.224.0/21
IP: 37.230.48.0/20
IP: 77.75.192.0/21
IP: 109.107.32.0/19
IP: 185.2.204.0/22
IP: 2a02:1348::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jan 2025 15:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:01:cc:14:53:f6:0c:97:f2:7e:47:76:c9:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:23:68:1b:80:72:53:2b:9b:a1:ea:12:dd:
65:38:ca:af:34:17:77:3a:00:19:09:fd:5b:b2:eb:
08:2a:92:46:2e:5c:22:7c:cc:b2:16:b6:6a:65:f6:
cf:dd:ef:d1:e2:78:76:a3:93:70:1e:48:12:6f:64:
9a:28:0a:73:55:03:04:03:e4:a1:94:d6:83:0c:27:
32:6a:69:cd:b6:33:43:1d:41:8a:5a:e7:c3:4a:7d:
b9:e7:1b:73:ec:1f:a4:95:54:05:10:74:43:1d:1c:
a7:08:6c:7f:80:8e:c2:b8:49:cc:82:ec:e4:14:80:
ec:08:56:ae:b2:11:3f:67:48:62:7e:e0:20:e6:ea:
b1:5c:c4:96:1e:74:6a:4d:97:e7:35:48:4b:69:c7:
52:db:d8:c7:ae:64:7d:55:e9:7f:7d:83:bb:8a:27:
44:15:5e:ff:a2:32:d5:b2:57:a3:b9:eb:50:c2:6f:
6d:ed:46:ed:63:c5:02:11:c1:98:2d:ea:69:a8:0f:
d4:71:3e:d2:cd:9f:1b:3e:56:b6:f5:59:5d:11:49:
16:eb:2f:23:88:39:91:5b:7f:21:45:25:02:25:8d:
35:16:b7:21:12:41:cb:2e:1b:14:00:d7:b6:f2:e1:
2a:44:ba:ae:f8:28:e3:64:c4:ed:9f:96:70:cc:32:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/19
37.1.224.0/21
37.230.48.0/20
77.75.192.0/21
109.107.32.0/19
185.2.204.0/22
IPv6:
2a02:1348::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51059
Signature Algorithm: sha256WithRSAEncryption
40:76:c0:1e:e8:e6:9c:12:b1:10:dc:2d:44:5f:88:df:2d:9d:
0d:a0:d7:ae:28:73:74:e8:53:1e:a7:bd:a8:21:02:09:1c:a1:
c4:e3:05:cf:66:8a:f8:d0:26:68:50:02:85:65:d7:ae:54:68:
78:a9:5e:7c:ee:a7:48:66:6b:26:9e:b7:af:ae:8a:5d:6d:7d:
78:1d:20:a0:8d:84:02:07:74:34:e1:f2:86:ca:93:3d:9e:2a:
89:e2:a8:b0:d4:65:9e:55:86:2e:30:ce:04:77:a5:95:59:e7:
c7:99:15:97:a8:75:11:9a:48:a4:4b:37:27:fa:30:9f:56:af:
57:fe:8a:04:7d:1b:5d:43:fa:19:e2:08:91:7f:35:a8:10:d0:
ee:81:09:75:e4:b2:df:54:66:2a:ea:83:c4:58:c5:d8:ba:ba:
c8:1c:2a:48:57:d1:67:f6:90:86:17:2c:7d:ff:a7:5c:c6:55:
b3:47:01:19:12:16:de:db:20:91:49:b5:cc:cb:6f:47:66:e2:
7d:5f:65:5f:71:97:3e:40:d0:99:d4:8e:98:9b:10:dc:b9:54:
cc:8a:d2:19:d9:ea:76:90:b3:79:3a:63:fc:ee:16:4c:3c:b4:
d7:99:17:0a:1f:ff:e4:3d:a5:2a:65:33:73:8d:c1:8a:f0:d0:
95:95:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 01:08:34 2025 by rpki-client on console-fra.rpki-client.org