Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.cer (raw, json)
Hash identifier: 2u9A8h87ckb1Ge5ZSKTmmCJrCO7B2AJmXc3Vz7DEais=
Subject key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF8159CF48930E020CAEE18D066A7A14A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 10:33:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42156
AS: 42282
AS: 50470
IP: 23.249.162.0/24
IP: 45.83.172.0/22
IP: 45.143.60.0/22
IP: 69.48.159.0/24
IP: 185.161.188.0/24
IP: 185.251.180.0/24
IP: 2a0e:8480::/29
IP: 2a0e:e2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:15:9c:f4:89:30:e0:20:ca:ee:18:d0:66:a7:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:40:7b:7a:4f:b5:16:10:bc:ca:ce:c0:00:
ac:c7:67:9a:87:6c:3d:0d:87:34:9b:3e:60:a9:e8:
7a:9e:41:89:ab:14:2f:94:c9:44:4e:bd:c3:79:6b:
47:79:8c:18:1e:9e:b7:63:c6:d8:58:ef:26:3c:2a:
1f:6e:b8:ab:a8:b6:fe:fe:1e:fe:59:87:de:d9:86:
db:35:a4:ca:09:b5:2e:30:d5:21:7d:7a:ee:a3:90:
76:40:71:c3:8d:41:66:9c:6a:37:79:6e:e9:9b:b1:
a3:de:23:a5:d7:2e:44:3b:63:fc:84:8b:fe:30:b2:
e5:6c:3a:28:f6:82:49:58:f0:29:7b:ce:41:5a:ba:
d6:fd:d7:d8:71:2e:5b:ee:fe:16:59:57:01:78:41:
5e:40:72:80:a3:6d:91:c3:b7:56:26:ac:c8:16:81:
6f:9b:c0:ba:c7:a0:75:b3:39:c4:a7:d9:a8:4d:78:
8b:73:dd:ba:1c:30:ef:c9:58:c3:72:e3:1e:26:d1:
53:70:96:22:8d:e5:a3:f7:d9:a4:5b:c3:35:cb:53:
5c:0b:5a:3d:6b:a5:29:5f:cc:af:ca:da:2b:14:47:
b7:30:b6:db:71:83:9d:3c:e1:eb:fe:f3:b2:d3:90:
71:99:46:45:1b:db:b8:c3:c6:1f:ad:af:5b:50:da:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.162.0/24
45.83.172.0/22
45.143.60.0/22
69.48.159.0/24
185.161.188.0/24
185.251.180.0/24
IPv6:
2a0e:8480::/29
2a0e:e2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42156
42282
50470
Signature Algorithm: sha256WithRSAEncryption
1e:22:85:c7:be:3e:28:ac:e6:01:67:a2:43:56:21:60:7c:ef:
29:74:61:41:2a:4c:16:53:6c:42:45:e6:7f:92:28:03:86:94:
6d:64:50:4a:4c:b5:ff:ad:30:fc:37:ed:b3:b1:ae:52:b5:bd:
2b:8e:42:3f:27:93:5e:fc:56:dd:af:23:c8:fa:dd:2b:bb:dd:
9d:9a:98:c4:16:2e:df:0e:5c:a3:dd:58:49:2d:10:86:d1:cc:
22:fb:d2:25:17:cf:de:80:a7:3e:fb:1f:b1:77:ef:69:b7:30:
54:1d:dd:0c:9e:72:97:ee:dd:dc:56:32:a4:b3:e2:50:e5:bd:
00:18:89:60:29:02:0a:f0:f4:0e:a1:4a:e4:bc:af:ce:67:27:
b5:1f:5b:81:10:d4:55:f8:4c:a5:0a:0c:68:27:93:cf:04:c6:
d8:2a:ec:a6:ca:81:e8:80:c7:c7:c8:2a:28:36:27:48:94:fe:
d0:2c:0f:9d:80:fc:d9:ae:57:86:ec:80:42:dd:e3:46:d1:c3:
23:b7:7c:68:97:73:0c:11:c6:48:84:27:c3:cc:f7:82:ec:8b:
bc:0c:92:27:dd:ef:be:62:e4:d6:f7:76:da:8c:57:9a:f0:fd:
19:f6:ac:23:99:93:4c:3b:ff:c4:46:39:14:f7:88:1e:c0:15:
25:12:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:57:28 2024 by rpki-client on console-fra.rpki-client.org