Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.cer (raw, json)
Hash identifier: kWwCnuTUkxZph3pLB1K2I2l2OoZBWQIX9yHrTvApmyk=
Subject key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500F4B53170B292452E22601DF18885
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6663
IP: 5.154.236.0/24
IP: 5.154.239.0/24
IP: 81.24.16.0/20
IP: 85.204.32.0/22
IP: 85.204.100.0/22
IP: 89.238.192.0/18
IP: 93.113.104.0/22
IP: 93.114.100.0/22
IP: 185.63.4.0/22
IP: 2a02:2720::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f4:b5:31:70:b2:92:45:2e:22:60:1d:f1:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:7c:5e:da:45:a6:dd:75:f4:cf:05:ff:79:
4d:89:9a:4c:0a:1d:f2:dc:60:35:58:68:d3:8a:d9:
b4:d4:62:d5:c2:c7:4a:a2:f7:4e:5f:f0:69:8e:4f:
a7:6b:3d:03:58:18:98:4d:23:0f:03:05:61:b0:e1:
23:56:e1:e9:68:a7:ac:7e:44:c5:9e:68:21:ff:ba:
8a:3e:01:cb:fc:a0:64:2b:60:31:87:ca:73:74:9e:
62:66:89:13:1e:68:81:58:2f:dd:48:67:5f:84:1d:
dc:dd:6f:ad:d7:07:78:3f:3a:46:ae:85:74:54:51:
41:df:57:87:4e:2e:da:d6:e8:1d:71:cd:2c:a5:3e:
92:8a:52:10:33:18:d6:9f:1d:bf:b5:83:83:00:18:
56:b1:27:48:00:f0:0a:78:02:1b:04:bc:02:64:2d:
c9:24:02:47:06:6f:31:ac:e5:47:8b:94:65:88:0d:
1e:c7:67:c9:e8:bc:c9:5e:a6:a3:d7:f4:77:62:95:
80:9f:1a:54:d2:95:43:b8:b3:a9:5f:50:e6:99:fe:
38:39:8e:13:33:5d:15:db:54:8d:4a:d4:0d:c3:03:
5c:d6:09:bb:e1:a3:84:fc:34:d7:5d:d7:31:6a:e5:
c8:75:8f:30:70:1a:d4:c3:c1:a5:80:d2:e3:1c:41:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.236.0/24
5.154.239.0/24
81.24.16.0/20
85.204.32.0/22
85.204.100.0/22
89.238.192.0/18
93.113.104.0/22
93.114.100.0/22
185.63.4.0/22
IPv6:
2a02:2720::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6663
Signature Algorithm: sha256WithRSAEncryption
44:8f:97:cb:13:c8:7d:03:75:b2:64:32:25:3b:fc:50:21:a0:
51:7b:da:ee:07:c7:55:c2:36:85:81:ea:6f:18:45:0b:ad:34:
ae:99:e1:7e:96:9d:ba:d0:4a:98:a4:98:41:ed:b5:ea:b8:6c:
64:b4:1f:c6:6b:e6:71:62:97:e3:1a:b9:ca:1e:d3:d0:79:62:
cb:62:23:69:9a:7c:19:3f:f6:f8:00:4e:30:69:6b:0a:c4:62:
cc:a2:67:08:96:5f:29:6a:60:d5:bf:91:8e:4e:d8:48:bc:89:
bb:71:6a:94:69:23:15:49:bf:7a:8f:9d:33:91:6f:68:93:33:
96:96:26:52:1d:0c:08:03:e7:c1:c5:1f:d6:1e:74:94:19:42:
6a:6e:bf:19:b8:5d:cc:91:1b:a6:fc:49:dd:0c:2c:72:62:e7:
fe:da:c9:20:a8:c0:92:a4:79:72:9d:61:1d:fc:31:2a:ce:c0:
7b:a3:3c:92:0f:83:fe:fb:a0:2d:17:51:b5:76:3f:f6:5e:a1:
b3:a1:37:78:56:c4:e9:3a:1e:b0:59:71:f7:51:bc:58:01:2d:
08:f4:57:e2:6d:cd:4d:44:6b:e3:48:c1:e3:29:2b:f1:86:b2:
72:dd:ca:a5:68:34:06:94:6c:e8:cc:31:3d:81:bb:1d:4a:e6:
04:b2:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:25 2024 by rpki-client on console-fra.rpki-client.org