Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
File: RQxYEkixGuKkb1UuXKQ8adZecqg.cer (raw, json)
Hash identifier: DupezJoHeiwqgDHgIhUS9wgrPJswDLyrLuXvdWQhTJc=
Subject key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3D9605825D319D454EB90CBD92310F4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 15:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15363
IP: 193.101.11.0/24
IP: 193.101.24.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:96:05:82:5d:31:9d:45:4e:b9:0c:bd:92:31:0f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 15:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:39:4e:97:b4:35:8f:48:60:58:78:86:92:
5f:d0:ec:37:19:28:63:c0:90:9e:f0:92:25:5d:73:
03:77:98:f0:13:97:6b:36:18:44:2b:6a:b2:4e:d3:
86:95:37:6e:fa:28:e7:b3:49:99:7c:f6:fe:52:5b:
d7:27:24:3a:77:98:b7:33:30:73:6c:9a:a8:ff:78:
56:b8:6f:8b:e2:b6:3a:bf:e4:8c:43:4e:55:ac:34:
b7:e3:26:62:66:e8:5d:57:16:8f:d0:33:c2:8e:04:
36:b1:1a:bf:b3:cf:57:fc:f9:fd:a7:76:89:09:c4:
9a:e3:08:e7:bd:5d:7c:a8:a5:70:8f:41:e2:94:d3:
e4:a5:0b:69:69:5d:b6:14:50:d9:c0:83:36:63:33:
2a:a7:48:40:3e:98:68:dc:95:f0:34:56:5d:a1:26:
3e:5d:e7:e6:9a:0e:00:1a:25:da:1d:ad:85:dc:05:
b2:47:d1:f8:56:b0:1b:ab:08:2f:95:2f:93:14:2d:
13:f0:45:1e:0e:ae:d5:e1:1e:6a:32:69:57:14:c4:
12:ad:fd:5b:21:92:d8:e1:42:2d:07:4a:69:c9:a1:
ae:61:58:5f:dc:74:bf:ff:1a:d6:3a:70:a4:9a:cd:
32:fd:d5:d0:11:08:ea:55:2d:a1:2c:1e:55:d1:e6:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.11.0/24
193.101.24.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15363
Signature Algorithm: sha256WithRSAEncryption
3d:88:97:3d:33:95:ca:15:23:a8:7e:01:44:3b:b5:37:78:97:
ac:fd:da:a5:68:f0:d9:7f:70:ea:8f:9e:4b:70:17:21:c7:0e:
e7:01:e7:02:7a:c3:55:a0:7a:da:f4:fe:9f:55:5c:61:06:1d:
a9:80:91:e5:28:73:4f:2a:16:5e:09:c5:27:9e:23:b2:4d:c7:
f2:a1:70:7f:d2:67:5a:ed:60:b0:95:db:a1:41:23:30:c5:16:
01:f5:05:03:1e:0f:16:19:84:93:f9:97:6a:76:3f:41:f8:e2:
73:73:1b:15:32:63:5a:52:ab:72:78:9a:dd:25:43:39:6f:fe:
d1:2c:94:61:49:e5:c5:99:11:f7:fe:cd:fe:78:c2:10:f1:f0:
dd:3e:8d:20:b8:3b:0a:e8:36:d7:6c:a4:e4:ee:9b:e3:cb:e7:
15:a7:3a:9c:4d:4f:ff:2e:2b:2c:de:a1:ee:41:8d:3d:a0:35:
3e:ad:2d:1c:04:53:cc:59:72:83:cf:19:08:41:11:7e:1d:6e:
dd:90:2e:e4:3e:a6:5e:46:d8:fe:e1:f6:3a:45:20:5f:6a:4f:
ed:39:e6:44:7b:97:28:77:49:e5:be:f7:fc:e3:46:95:cb:55:
93:a9:63:2b:f4:63:85:dd:fe:34:0e:2d:67:fa:a8:03:52:46:
70:2d:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:14:50 2024 by rpki-client on console-fra.rpki-client.org