Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer (raw, json)
Hash identifier: 1j7FTrrLU9IlcbjhWKMgzRFNhKoLxa5T2PEUNbSH7aE=
Subject key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC725B5DA7B1C40FF072FF17AE8484EEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208134
IP: 45.92.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:b5:da:7b:1c:40:ff:07:2f:f1:7a:e8:48:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:ea:24:02:ea:b1:61:33:31:15:04:00:3d:
17:17:d9:f9:4b:b5:a2:0e:10:aa:fc:cd:e7:56:b4:
43:22:57:19:bb:b8:25:e4:ba:1c:38:ff:2e:91:f7:
50:71:ae:d9:3f:33:34:d5:03:0f:75:41:60:66:57:
2b:3a:04:a2:94:c9:a3:58:17:93:5a:49:9f:6e:2e:
40:a2:a0:20:bc:4b:03:8e:96:b1:45:9a:65:e7:e8:
4a:53:67:45:d8:36:83:f0:bf:e5:8a:2d:96:4e:67:
c5:79:17:7c:c7:0e:c6:49:90:8f:58:bc:45:79:ca:
67:b8:5f:b0:49:ff:27:3e:2d:1a:84:e6:ec:b1:b7:
08:31:1b:e4:e6:b6:ce:7b:48:7c:1a:db:80:7b:87:
0b:a6:70:49:91:bf:e0:70:52:17:74:c3:51:31:83:
3a:75:c7:b2:3f:03:92:87:95:c3:dc:a9:90:17:82:
61:7f:45:1b:3d:0b:6b:83:8e:4e:cd:11:63:f4:e1:
a0:00:2d:e2:c3:a3:8c:85:1d:ce:b5:65:fb:ca:e6:
d5:13:32:6c:e7:01:9f:74:51:b6:86:6c:b8:60:5c:
6a:67:eb:03:56:90:8e:1c:db:fa:4b:79:69:d8:0f:
17:e8:5d:c1:e5:ab:28:7a:74:f1:07:fe:97:e7:14:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208134
Signature Algorithm: sha256WithRSAEncryption
a8:94:58:da:06:41:7e:ed:ec:bf:66:04:76:81:ac:e5:3c:12:
56:ce:72:a2:8a:f9:1e:cf:6d:ee:01:4b:3b:9c:17:a3:b7:c5:
cb:fa:e0:09:4d:10:3c:a5:34:f5:c6:51:aa:e2:df:d5:d0:7a:
43:0a:aa:63:ed:3c:e0:e8:b2:7b:d3:11:1d:9a:9c:91:0f:c0:
e2:64:30:83:0d:7d:23:e6:74:55:81:03:8a:2d:45:ce:fa:85:
b7:c1:6d:f4:5b:d6:38:1e:d6:3b:64:60:d1:e6:12:aa:45:a9:
5c:93:30:48:97:db:b1:84:96:b0:dd:82:a3:98:c2:96:e0:44:
36:15:38:1e:ae:1e:3d:6c:38:63:06:fe:c9:8b:e5:53:0f:36:
00:5f:80:18:66:03:27:b8:e4:be:6d:02:23:2e:48:0f:79:fe:
c3:b2:d6:17:10:25:fe:e6:56:31:c4:93:2f:87:63:e1:04:9c:
7b:6d:ee:01:32:8c:4f:dc:dd:5d:9e:1d:32:20:cb:8a:62:62:
b1:5d:cc:56:9c:0e:27:bf:45:80:f9:65:29:05:0e:09:bf:1c:
35:f6:b0:9f:6e:ee:f0:62:f9:28:5a:17:bf:03:a1:3d:c3:e0:
42:8a:eb:fd:08:bd:01:6e:48:1b:89:33:be:91:d6:70:3d:41:
21:df:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:30:23 2024 by rpki-client on console-ams.rpki-client.org