Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
File: qFOfk1XT63eLG7juJyMyYBGhIps.cer (raw, json)
Hash identifier: QHIKZN77gMrvLf2q5Q5ycvHeSg0gljS/yfmuaXxFuyI=
Subject key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCD384AFBB064989C35B15536CB464
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 148.187.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d3:84:af:bb:06:49:89:c3:5b:15:53:6c:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:de:2c:d8:53:16:de:5e:a6:a0:42:9e:df:
df:7f:17:41:2d:dd:b1:ab:aa:74:cf:28:b9:a8:c8:
f0:1f:95:2e:0b:6d:9c:f5:6f:44:29:d0:06:02:7a:
52:b5:83:dd:a0:46:50:d2:49:20:55:d0:77:88:87:
f6:32:2e:9a:4f:9c:2a:90:45:92:5c:12:00:ec:7b:
91:45:bd:28:69:57:e5:8b:3d:b5:33:03:a4:a8:39:
67:d6:05:5a:30:3e:da:78:23:32:e1:4e:ff:a8:e2:
c0:75:16:fb:8a:2c:1f:6f:5c:b8:a2:55:bf:73:06:
d1:f1:bb:5c:bb:9c:ef:89:3d:c1:84:58:a7:57:0f:
33:19:39:5d:9a:ea:76:fc:d4:07:98:f8:63:9e:99:
b3:c2:7b:5b:2c:d2:fc:e8:ec:06:77:9e:46:46:06:
33:19:a9:3e:d3:75:50:5e:c8:21:fd:92:f6:28:21:
d3:b3:95:bb:5a:f9:c0:90:a4:6e:16:2e:6f:89:d6:
22:61:ca:4b:49:9b:c9:1a:f4:0c:39:e0:dc:36:61:
7f:e9:3c:9c:7b:e6:f5:99:fb:8a:8e:47:49:84:38:
24:fd:08:08:94:86:c6:d8:f6:06:60:a1:7d:07:2f:
06:7c:74:55:95:a7:ec:f9:54:e1:a9:1a:a8:33:69:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:db:25:df:e4:68:17:6c:c5:74:d7:91:99:32:19:88:9b:ca:
62:c4:36:69:dc:46:e6:e7:e7:1b:5d:6b:a0:6f:c1:91:56:b3:
e6:c5:c5:b9:02:8a:2b:1d:5a:74:88:09:25:f3:c3:f5:a7:b1:
e4:c9:cd:7b:6d:ad:90:df:62:85:84:50:f7:9f:f0:37:e9:16:
4b:79:af:8c:9f:fa:93:52:4e:03:68:5e:cd:d7:1a:49:5e:ba:
fa:5b:0a:08:ab:44:54:96:9c:70:ba:42:05:d3:0f:7e:b1:66:
89:37:12:fc:56:a4:9a:8c:e0:27:27:fa:5f:16:48:27:58:3a:
c1:80:0c:21:3e:a7:13:bc:ef:fc:5d:d5:92:29:6c:95:71:d1:
70:1b:1b:6b:bc:6f:8d:7e:8d:8f:b8:d2:c6:8e:52:2c:3f:4a:
fb:c3:58:7c:06:bc:5b:e1:ef:fb:cb:30:56:64:38:b8:80:04:
e0:b6:b6:97:32:d1:a5:d2:a3:ce:90:60:6d:a9:ab:c9:46:fb:
9a:ef:c6:e6:39:db:24:66:42:77:d5:77:42:99:c2:c2:60:f2:
d1:85:36:3d:c0:56:4d:f7:04:82:c6:c9:92:06:ec:ab:24:8a:
7a:ea:3b:b4:a3:e3:a5:29:3f:1d:7b:90:4d:37:89:7e:83:1c:
21:f0:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:33 2024 by rpki-client on console-fra.rpki-client.org