Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
File: RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer (raw, json)
Hash identifier: 4rbYLqayK+FZqp4XKEHQnIbXHOYuarRK7KPT1wb/Q6E=
Subject key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DAEA950AE90D8730E4F4893DD1A621
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:28:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51059
IP: 5.83.192.0/19
IP: 37.1.224.0/21
IP: 37.230.48.0/20
IP: 77.75.192.0/21
IP: 109.107.32.0/19
IP: 185.2.204.0/22
IP: 2a02:1348::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:da:ea:95:0a:e9:0d:87:30:e4:f4:89:3d:d1:a6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:28:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:23:68:1b:80:72:53:2b:9b:a1:ea:12:dd:
65:38:ca:af:34:17:77:3a:00:19:09:fd:5b:b2:eb:
08:2a:92:46:2e:5c:22:7c:cc:b2:16:b6:6a:65:f6:
cf:dd:ef:d1:e2:78:76:a3:93:70:1e:48:12:6f:64:
9a:28:0a:73:55:03:04:03:e4:a1:94:d6:83:0c:27:
32:6a:69:cd:b6:33:43:1d:41:8a:5a:e7:c3:4a:7d:
b9:e7:1b:73:ec:1f:a4:95:54:05:10:74:43:1d:1c:
a7:08:6c:7f:80:8e:c2:b8:49:cc:82:ec:e4:14:80:
ec:08:56:ae:b2:11:3f:67:48:62:7e:e0:20:e6:ea:
b1:5c:c4:96:1e:74:6a:4d:97:e7:35:48:4b:69:c7:
52:db:d8:c7:ae:64:7d:55:e9:7f:7d:83:bb:8a:27:
44:15:5e:ff:a2:32:d5:b2:57:a3:b9:eb:50:c2:6f:
6d:ed:46:ed:63:c5:02:11:c1:98:2d:ea:69:a8:0f:
d4:71:3e:d2:cd:9f:1b:3e:56:b6:f5:59:5d:11:49:
16:eb:2f:23:88:39:91:5b:7f:21:45:25:02:25:8d:
35:16:b7:21:12:41:cb:2e:1b:14:00:d7:b6:f2:e1:
2a:44:ba:ae:f8:28:e3:64:c4:ed:9f:96:70:cc:32:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/19
37.1.224.0/21
37.230.48.0/20
77.75.192.0/21
109.107.32.0/19
185.2.204.0/22
IPv6:
2a02:1348::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51059
Signature Algorithm: sha256WithRSAEncryption
6b:8a:16:a9:5d:97:21:7f:29:17:5f:60:85:1f:6e:16:b4:05:
98:f6:15:10:a9:7d:9a:b8:e5:33:44:9f:26:78:38:e3:d4:1f:
08:ae:f6:7d:da:27:5b:72:e5:d7:c9:41:22:a9:f5:2a:d4:a7:
e8:63:3e:50:3d:81:a1:49:ea:81:83:74:15:1c:34:c6:69:ed:
36:56:1b:1b:16:09:eb:43:03:b5:b5:07:17:5e:c9:c7:e3:9d:
46:b9:bf:fc:6a:18:35:bb:1a:1e:bc:3e:67:02:d7:98:ea:04:
8c:11:7a:37:11:f5:2d:33:b8:4c:eb:54:c4:e7:d2:52:49:e1:
f2:3f:c8:8a:41:1e:f2:84:41:05:12:a5:2f:a1:5a:6c:d9:9d:
70:2b:b2:a2:2e:43:54:0a:30:3f:65:78:6e:1a:b2:46:96:4d:
29:1b:71:71:f2:11:63:59:f6:f5:85:0a:ab:f2:dc:9c:5f:40:
41:1b:74:27:5d:d8:88:20:85:82:dd:57:a4:89:9c:ec:8a:6e:
9d:0d:b3:8d:d2:7c:1b:7f:46:f5:16:e9:bc:5f:5c:ae:38:f9:
ae:e0:0b:66:6e:1a:f3:fa:29:96:c7:68:f5:bc:87:00:d9:b0:
b5:c0:67:e3:52:21:57:d5:76:cf:fa:ea:54:c8:7f:cd:12:ec:
90:22:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:02 2024 by rpki-client on console-ams.rpki-client.org