Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.cer (raw, json)
Hash identifier: RK3ViN82wVDOlO41F5inRTJ/Fq2L9QA/KbeH/JQjm4U=
Subject key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EEAA253FD18901517BC5E4539778B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.242.123.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ea:a2:53:fd:18:90:15:17:bc:5e:45:39:77:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:8e:59:49:95:65:10:a7:a5:f1:d7:1c:a1:
53:74:da:79:7b:c7:e5:d5:12:f2:fe:63:2e:f5:1a:
a4:01:4e:50:54:25:1c:f1:27:2f:4e:56:45:11:ca:
54:3d:9c:bd:9b:22:93:50:6f:96:95:cc:82:f8:a2:
c3:23:68:4c:fa:88:13:d7:dd:bf:1e:2d:64:1e:f1:
e4:cd:f3:39:1f:19:bc:64:9a:be:e0:ed:ad:1e:ef:
26:34:90:6c:11:a6:41:40:4a:04:ef:10:de:4e:92:
1e:a0:b9:d3:9f:75:63:3d:85:6c:d5:55:7a:d7:36:
85:04:d1:59:f5:1f:25:4a:e3:e6:e2:84:e6:a7:f6:
05:36:bb:3a:1c:bc:6a:e5:35:db:de:4b:c3:ac:22:
1e:40:5f:19:a0:7b:43:df:cb:22:ce:09:25:03:73:
32:f1:7d:3d:5e:4a:dc:b2:0e:32:29:7e:a2:7f:2b:
32:f6:21:f3:2b:69:38:d1:1a:1a:90:c5:e7:16:cf:
5e:bd:c3:73:17:fd:4c:b2:c0:60:76:13:31:d7:61:
b1:a6:2a:9d:7b:e3:13:0f:8c:13:e7:65:80:3f:2f:
62:e8:39:96:c7:56:c9:f4:d6:e8:2c:40:fe:24:d4:
5e:e7:65:5e:76:13:99:c7:95:32:cb:1b:d8:37:bb:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
26:67:a7:7d:ff:1a:1f:bb:88:2d:56:67:82:ab:7e:65:91:24:
c4:8a:b4:88:7a:c9:aa:d2:8d:79:af:0a:9e:57:44:17:cc:34:
70:39:ba:b8:3a:ff:91:08:18:4d:76:00:ad:b3:75:c6:cf:49:
68:ad:84:4c:2a:a2:23:53:d5:b0:b2:a2:90:b1:7e:4f:bb:80:
85:43:18:32:fa:42:3b:0d:8f:28:c8:64:92:a3:c6:bc:37:06:
de:7a:81:06:a8:26:61:cf:79:ca:30:d3:0c:9d:96:52:54:45:
b1:66:5b:67:ab:2d:ea:3f:39:a6:48:b7:3f:86:bd:a6:b2:00:
d3:eb:17:e6:aa:7d:61:b2:8b:11:13:a2:2a:41:66:d0:1b:3f:
08:b3:10:86:82:82:04:88:d3:37:9a:57:c1:3b:f8:f8:be:25:
dc:16:f1:78:ef:a4:9d:ca:23:d6:de:01:54:67:2e:bc:22:7a:
e4:e3:5d:c1:6d:89:1b:4d:64:8b:d6:c8:72:0c:85:73:aa:80:
1b:fb:ef:4c:e0:7d:0b:46:6e:fb:2b:b5:6b:fd:87:25:8a:82:
8f:a1:4d:b0:27:30:f2:9b:75:a7:26:3d:de:4e:d7:ed:e7:3f:
56:5e:f1:75:f2:2c:9c:14:90:ab:98:15:72:28:e9:2b:06:24:
95:87:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:07:15 2024 by rpki-client on console-fra.rpki-client.org