Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer (raw, json)
Hash identifier: 7qoOz0bkScNWBnLMbvbRBanCJviWsNX0iujfL3m43eM=
Subject key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CB27C3DB9DD180EA7FEE3FBB3E20C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.113.138.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b2:7c:3d:b9:dd:18:0e:a7:fe:e3:fb:b3:e2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:f5:85:38:4b:c7:d8:2a:d2:e2:cd:11:11:
77:ec:eb:8e:00:4a:71:f1:f3:c1:80:f7:82:05:90:
33:a4:b3:3a:37:d8:9b:d7:05:bc:5e:b2:00:42:f9:
a4:5e:2a:e5:ed:c3:f8:d0:14:50:cb:e2:10:71:f7:
96:13:c7:b7:a1:12:6b:39:2d:20:54:42:ba:09:81:
18:3b:98:3a:7c:6f:d5:0d:1c:db:3e:7d:f4:3f:74:
e9:3d:07:b6:da:cb:40:2d:19:1d:25:78:59:aa:1d:
e6:11:11:91:3d:58:00:8f:76:c7:dc:bd:e2:3e:3a:
7c:93:df:b9:38:66:ba:a1:44:51:22:0d:d2:78:25:
28:48:11:d5:67:4d:7b:a6:b8:10:f9:0f:ae:81:b3:
94:3c:f0:c6:2c:cc:06:0b:91:18:8c:b8:c2:11:4a:
83:c4:5d:f5:7a:93:06:68:df:fb:b7:2e:06:04:1c:
f4:0a:01:c2:61:f7:5f:fc:b3:c2:cd:aa:2a:e4:25:
46:e4:72:cd:06:c3:5d:b8:a7:2d:c7:25:56:83:d1:
d0:92:17:7f:f1:a8:23:7f:3c:19:f6:d8:25:a8:57:
b0:b6:7c:c8:11:6d:27:ad:d6:c1:71:eb:33:f2:51:
94:f3:55:aa:ff:fa:f4:10:f9:22:c4:87:e2:e1:74:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9b:d8:f4:40:1d:6e:88:8f:3e:61:03:b0:58:78:3d:f4:09:
17:c1:44:23:6a:5b:ae:8f:c9:23:94:fd:92:52:04:ff:e4:9e:
2b:5e:27:79:56:41:d7:5b:f2:40:48:38:03:5f:1d:55:49:8b:
98:8c:1d:68:b9:36:0b:5d:36:d8:96:31:f4:90:e4:e0:5b:2b:
71:99:7d:9e:f2:e9:2e:7c:a3:fd:56:3d:4a:36:f1:ce:36:a5:
39:1c:48:02:e9:8a:14:a9:76:c8:66:9a:45:f7:db:a4:40:15:
76:5a:87:0a:33:8b:b7:67:c0:8f:82:91:d6:8d:a0:36:1e:e2:
9e:9f:4c:ab:22:96:28:39:54:bd:f1:1f:cd:ab:ab:81:7d:c1:
57:f7:be:07:00:48:fa:62:aa:6b:ce:12:9d:8c:43:42:50:3e:
fb:ac:8a:af:31:b3:c4:bd:55:82:b6:ff:70:01:f9:84:75:ea:
2e:27:fe:09:9d:73:4d:92:cd:64:29:ed:36:b4:79:5a:ba:80:
ff:82:aa:96:d1:3a:a2:15:9f:16:02:6d:9e:63:9b:99:4d:95:
29:cc:e5:47:01:0d:49:6a:1a:47:ab:6a:49:90:bf:02:19:06:
91:36:24:0a:10:e7:12:f8:76:82:3e:22:9e:b4:41:d1:f6:49:
ba:cb:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:49 2024 by rpki-client on console-ams.rpki-client.org