Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer (raw, json)
Hash identifier: gWDK+FGKF3l7lS2suCmh9rX4+O/JipoI94xqYT2pN7I=
Subject key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EF765C24D9FCB0BC8A6EAB57004DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34666
IP: 81.16.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f7:65:c2:4d:9f:cb:0b:c8:a6:ea:b5:70:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=490db999ca4ce287c5c92ab167a500902259bb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:2d:c4:a4:b3:3d:d9:4d:6e:ef:f7:c3:e3:
53:30:44:f5:27:08:50:20:89:07:1c:30:55:80:b5:
1f:4d:9f:04:bc:2b:4b:61:cd:e9:e6:71:72:21:37:
62:66:2d:62:ad:e3:f6:f7:92:b3:63:2c:67:c7:00:
11:b6:19:c6:75:ad:83:b9:42:30:06:73:ad:b7:71:
ef:92:69:d2:47:50:28:cc:a1:67:78:7b:97:4a:6c:
63:a2:e8:49:b4:db:4d:ee:4a:70:ed:96:a8:fe:19:
d7:89:66:17:53:73:05:f0:0d:97:fc:31:09:0d:f3:
28:d2:1a:f2:46:6e:93:1a:fb:0c:8c:67:1f:35:ff:
2c:22:b6:7f:9a:ce:b0:dd:c9:55:ec:c1:70:af:12:
8b:03:0f:3c:be:5c:77:e6:f5:24:13:e0:41:9b:7c:
81:03:ca:a0:96:49:b5:ac:a3:66:3d:39:59:0c:0c:
cb:f4:c9:55:ad:01:c9:33:9f:50:be:91:ef:15:eb:
22:35:57:d8:21:83:ac:44:46:7b:44:da:0e:50:bd:
98:fd:e4:d0:e4:28:37:37:55:fb:5b:18:e8:92:4f:
e9:d3:eb:b4:f1:34:b9:9d:9e:c3:e7:8d:13:d3:3a:
5a:ff:f8:14:87:bf:f1:cb:24:5e:d1:bb:d9:57:51:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34666
Signature Algorithm: sha256WithRSAEncryption
8d:41:27:13:8e:46:c3:f4:2f:c3:b3:b5:0a:3c:cd:09:52:e7:
b9:51:b0:57:b2:d0:26:d4:a1:63:4e:fc:d4:67:cf:0e:25:2c:
be:0b:77:06:15:bc:cb:5e:f9:5f:9f:e9:3d:d0:06:3b:2f:df:
5c:28:58:af:9f:dc:85:06:87:6d:d0:1f:a6:c9:dd:87:cf:b7:
52:37:37:3f:96:e5:5d:32:d5:4f:3c:be:80:a4:49:74:ab:1e:
d6:a7:51:26:a8:86:2b:10:7c:05:bc:2c:e3:b4:a1:38:d9:0e:
dd:b7:fb:b4:d8:83:be:4c:f3:72:b9:38:5c:e2:75:db:57:ee:
88:4c:6e:2f:99:d6:1f:fb:5f:95:b9:ca:3f:bf:60:9d:7e:3f:
45:66:4f:b1:cb:d1:78:6b:9b:fe:f3:53:2e:5b:98:38:26:f5:
08:a2:0c:4c:05:80:4a:fb:f6:26:c0:68:db:5d:8c:ce:8f:66:
e3:5d:b4:99:61:45:bd:c8:a7:d5:32:d5:cf:66:8d:3d:93:78:
93:55:08:a6:2c:3c:53:ea:8c:20:ee:43:e4:fb:77:9e:74:a8:
82:fe:af:cb:82:f0:3e:99:f8:79:d0:a4:13:60:5d:a6:67:d0:
25:3c:79:a0:dd:9e:94:da:f0:50:e5:ce:c9:ec:0a:4e:66:10:
5d:3b:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:59:47 2024 by rpki-client on console-fra.rpki-client.org