Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
File: q5udbmrCgujBAADMPbxK3z_gH-I.cer (raw, json)
Hash identifier: iT1IgwHDP0Zz++j3UyeD/D0AJNTgcRwQHtdojVYjRvw=
Subject key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493798B7D62B4F3E64DB2830D7FD1E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207278
IP: 2001:678:cd0::/48
IP: 2001:678:cd4::/48
IP: 2001:678:cd8::/48
IP: 2001:67c:15c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:79:8b:7d:62:b4:f3:e6:4d:b2:83:0d:7f:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:5a:3a:ea:c0:e9:03:22:7d:c4:03:99:65:
ea:27:fd:c3:fc:40:c6:fc:ef:a0:aa:43:57:f4:f3:
81:4c:5f:13:f0:ca:e9:9f:19:a2:05:60:d0:75:c9:
c2:8f:1a:a1:ea:ec:47:26:12:3e:5d:e3:e1:c9:4f:
27:e9:dc:3f:70:e0:2d:92:0d:ce:fe:24:04:1e:88:
a1:42:21:ba:86:f1:e5:d1:69:13:de:a8:5d:c2:1e:
ff:f5:f0:4c:a0:7b:0f:4b:55:b3:f4:32:10:3d:8d:
fe:a9:d9:d2:77:a3:b8:d7:e0:25:9a:69:43:b2:07:
9f:f5:34:cf:d3:32:87:ef:c4:f4:76:db:9c:4d:79:
32:0b:e7:bd:ec:64:4b:39:40:86:f6:6d:fa:4e:e7:
b3:b5:28:24:55:bf:d7:99:40:21:47:2e:bc:46:54:
c8:3d:9d:18:e9:65:d6:30:1c:de:71:f5:e3:a0:fb:
d0:0b:d0:09:95:a0:16:10:07:f0:36:6e:b2:c9:87:
31:55:41:69:a7:f7:f3:13:99:e4:67:7c:6c:a5:df:
21:a3:af:21:88:6a:82:00:0b:67:d4:91:16:34:0d:
de:84:87:41:53:f1:d5:7b:97:b5:94:84:77:c2:05:
b5:1a:a8:1e:19:ab:51:d3:f0:7c:28:5a:37:e0:86:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cd0::/48
2001:678:cd4::/48
2001:678:cd8::/48
2001:67c:15c0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207278
Signature Algorithm: sha256WithRSAEncryption
22:cd:86:cd:fe:bb:33:53:60:e5:2d:91:07:1b:4a:02:f8:c6:
2a:12:e0:c8:44:d9:6f:ca:de:2d:d9:7a:d9:15:a9:76:82:e2:
c4:1b:ae:f4:2d:5e:50:1d:c7:60:5e:65:02:b6:e8:ec:ec:53:
9b:d5:c1:57:fe:58:b4:6d:4b:11:21:02:80:7b:66:8e:8e:ba:
38:71:54:cd:c2:0e:34:70:2a:da:e9:c5:89:cb:0b:af:f9:5f:
ad:11:42:5e:5b:f9:6f:44:a1:d1:25:a9:0a:49:42:70:b3:25:
cf:04:81:0a:bf:54:14:c5:76:1c:3c:d3:0b:92:49:ec:24:a6:
52:9d:e8:8c:fa:52:89:08:c0:d3:50:21:d7:9f:bd:6f:4e:4c:
0d:37:bc:03:70:c1:c2:4b:66:93:33:8e:8f:d5:95:94:e9:13:
62:a2:ea:4e:6e:e6:23:28:08:86:ad:10:dd:bb:3f:e1:65:77:
6a:93:16:83:e5:b6:e6:22:0c:8b:5d:33:97:98:79:3d:ff:52:
e9:cc:a1:10:0d:74:46:6e:49:68:7f:ae:65:0a:5a:6b:c4:58:
d3:43:0b:e7:01:fb:b8:8f:da:bc:63:c0:64:d0:f2:56:9f:23:
5a:91:11:31:34:bf:d6:60:07:ef:30:6b:ca:43:f4:23:b4:33:
44:2d:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:38 2024 by rpki-client on console-ams.rpki-client.org