Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
File: fqQd0tUnX7allrJhoCfMjX-fNGw.cer (raw, json)
Hash identifier: mIFL+u3S8xFJHnd1dzeRn07w8mwZ1YBQ1pMwUJ8FQDw=
Subject key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349303E226D67D1EC220BC2AF86AC32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205328
IP: 217.197.96.0/24
IP: 2a0a:b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:30:3e:22:6d:67:d1:ec:22:0b:c2:af:86:ac:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:7c:9b:d5:e0:07:2e:f6:ed:77:de:a7:95:
96:49:6c:4f:7b:dc:bc:59:38:e4:7d:f8:05:d2:5e:
0a:05:7d:11:fc:af:c6:c7:d1:f5:02:82:17:05:ce:
42:f0:9d:cf:7c:dc:d9:6b:f9:41:de:5d:4a:3b:15:
66:fb:3c:24:e9:3f:0f:15:2e:9d:84:e9:9c:d0:86:
2e:67:3d:0b:84:87:07:59:04:de:9c:c3:8f:fc:3e:
39:58:e8:90:8e:0d:36:a9:5b:d8:93:1b:e9:79:ac:
88:9b:c4:d9:10:98:7f:4e:8a:46:16:32:af:9d:89:
51:79:3f:fc:2c:e6:d4:7a:89:45:83:9d:62:a4:79:
5a:9b:1d:b3:c6:1b:1d:1c:42:dc:00:c3:6f:39:20:
12:7c:cc:0e:d9:47:9c:d2:5b:ee:c7:18:02:ee:41:
28:84:0d:1f:6f:bf:cb:2f:3d:36:07:82:df:52:fb:
e0:ad:55:1b:a5:87:15:7e:37:45:c0:e9:7f:f8:dc:
b8:b2:24:27:30:c5:2e:e5:1c:22:1a:19:60:08:0c:
dc:be:7a:63:5b:28:e4:1f:d5:57:af:5f:5a:47:e9:
38:b5:b3:4b:2d:f4:66:e8:12:1a:7d:b9:f5:0c:a3:
5c:75:7b:58:6c:1d:a8:e4:98:ae:53:9b:eb:93:a9:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.96.0/24
IPv6:
2a0a:b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205328
Signature Algorithm: sha256WithRSAEncryption
a3:24:1c:66:c1:30:f7:a9:19:6d:04:bd:b3:79:12:7b:b0:f7:
f3:84:16:1c:30:57:1f:d3:4f:ae:2b:b1:89:f0:0a:5c:e3:bd:
84:39:7d:c6:05:f0:00:44:69:02:c9:cb:60:5a:cc:ce:24:dc:
02:fc:3a:d8:07:d7:4b:6c:45:ca:f1:48:b6:dc:80:ef:a2:cf:
ba:26:a7:c2:1f:08:58:5c:78:e0:6c:69:97:41:ef:e6:18:cf:
c7:ec:01:1f:7c:3f:3b:b4:69:20:6c:a6:a4:86:0c:26:4c:c7:
8c:1b:ac:be:da:93:29:aa:1d:4a:69:1d:91:ec:a7:41:70:f6:
d8:83:88:b2:55:5b:f0:78:f7:b2:6d:f6:3a:bd:ea:08:27:5d:
0b:cf:11:38:0c:e4:6c:9d:14:4f:a5:a9:fe:5e:47:89:c5:25:
d1:4e:c7:c8:ff:a9:0d:02:2e:c9:f1:8e:9e:b8:2e:a1:4b:d1:
e3:09:89:0f:37:e8:31:29:9e:a0:7a:8d:6b:eb:cb:d8:23:0d:
2b:90:6d:af:a3:8f:9b:bf:f8:2e:86:27:11:fc:a9:87:44:45:
16:0c:9d:d9:a1:99:18:22:33:f0:81:ba:33:2b:91:20:5c:31:
0b:74:91:11:90:f8:64:be:cd:a4:aa:55:76:33:dc:2f:39:4c:
64:b4:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:00 2024 by rpki-client on console-ams.rpki-client.org