Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
File: Sqk04w2mkOdRcTO30hJjJlWnS4c.cer (raw, json)
Hash identifier: VNmhgtXSY0PVz58CReP3wqZv3Rd2xKLJlagYU0omvO8=
Subject key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500FA2D1F8DA987E43CC0F84C503272
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210557
IP: 176.126.97.0/24
IP: 2a11:e740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fa:2d:1f:8d:a9:87:e4:3c:c0:f8:4c:50:32:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aa934e30da690e7517133b7d212632655a74b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:ef:9a:c9:a2:fb:fd:4c:85:bb:a2:65:8a:
f8:f7:12:6c:e4:c2:b4:03:54:94:87:6b:8f:9e:cd:
fb:82:7c:69:d8:6d:56:52:41:bd:97:0e:a7:c8:76:
84:c9:13:cf:c8:00:1f:7b:63:ec:26:4d:37:b5:56:
21:71:13:0a:33:07:19:fd:9a:18:63:4a:27:7a:83:
91:40:71:aa:f4:a1:53:d3:31:03:71:2e:f6:b2:85:
6b:4f:32:fc:2b:1d:c7:a4:bf:db:e2:63:7e:89:55:
8f:07:d4:63:e8:15:9c:76:9b:a7:94:c5:6d:d7:6c:
8b:09:06:be:75:79:f3:99:b0:ca:6e:04:65:c5:26:
54:55:a1:be:9c:ea:2d:59:fa:a8:68:cf:84:14:98:
04:c8:01:5a:fb:f2:c8:c4:56:aa:83:12:df:67:ad:
71:28:1b:c8:48:2c:8e:11:5a:f2:ec:99:8a:7b:62:
9f:d3:e6:84:59:55:65:f3:b6:b7:71:fc:ec:0d:ff:
9c:d4:88:d8:82:d6:35:c7:75:3c:28:f5:12:11:03:
e2:1c:14:c3:14:47:11:46:75:53:67:34:7e:8e:86:
21:31:c5:bd:85:bc:4b:28:78:65:54:82:e5:d6:90:
4f:74:5c:be:be:ff:24:49:0c:e5:5e:06:89:09:24:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.97.0/24
IPv6:
2a11:e740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210557
Signature Algorithm: sha256WithRSAEncryption
a0:e0:7a:12:38:dd:94:53:ec:98:9a:fd:5b:8a:4e:da:0c:46:
ba:a4:03:91:bf:3e:1e:a3:4d:48:d7:36:5b:18:b6:d4:65:73:
4a:f3:33:7b:a8:5e:5d:c3:94:89:2f:67:d3:0b:84:ae:1d:aa:
b4:4f:d0:57:bd:cd:fc:f3:fa:97:d7:57:bc:f9:4e:42:20:25:
01:df:a8:49:c2:db:7b:68:ec:af:08:cb:7e:76:54:aa:d9:24:
5c:23:65:89:30:91:92:aa:8a:2a:ed:38:ee:85:f4:15:ca:be:
43:2e:4b:f5:d9:64:9d:ee:da:32:cb:da:08:68:3d:ea:22:25:
c6:d4:e0:4d:c1:96:18:26:e2:9a:de:79:35:41:df:73:2c:89:
0b:9a:64:e5:e5:51:98:33:8e:bc:47:bf:c8:7b:4f:f0:b6:ac:
4a:18:5a:84:91:34:28:57:44:c1:85:50:33:0d:0e:d2:34:6e:
d5:0e:6d:f8:40:56:5c:bf:73:7c:22:e4:ec:a6:dc:16:0d:e7:
ee:11:18:07:4e:ea:f3:18:82:7b:b9:1c:1f:95:cf:57:c7:d7:
a1:bb:b3:bc:29:8b:58:fd:8b:11:90:74:c8:66:1c:c2:5b:a2:
20:09:b1:3c:4b:21:29:81:fa:59:0d:7b:ed:9d:a3:6a:b6:8b:
1d:b6:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:33:19 2024 by rpki-client on console-ams.rpki-client.org