Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
File: qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer (raw, json)
Hash identifier: WQnyXdVMlkKWJMsKIfJx3Vby99mjpFktHzRVkyVqcuc=
Subject key identifier: A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EB68FFA2A694D27C8ACEFFC492A3143C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 07 Apr 2024 03:17:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 146.19.236.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b6:8f:fa:2a:69:4d:27:c8:ac:ef:fc:49:2a:31:43:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 03:17:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:70:4d:bd:12:78:57:d4:b5:7a:b5:7d:13:
68:e5:bc:e2:d2:f1:52:49:90:a2:94:3e:40:ed:f8:
83:c5:0e:14:54:d2:8f:4b:da:ab:9f:2a:36:80:54:
4a:d0:73:c2:8e:a3:73:e7:64:ed:c0:45:24:98:e6:
a6:fe:67:0f:bd:6a:b3:f5:43:0f:6d:f5:16:b7:4e:
2b:5a:f0:1a:a8:7d:c1:73:e1:ac:a6:43:64:fa:55:
3d:24:02:63:74:e9:c6:f7:72:38:03:6b:44:73:2a:
2f:85:19:11:d7:f4:fa:1b:c4:1a:7f:84:1d:85:41:
36:f7:9c:f2:36:eb:a0:18:c5:7f:6e:c9:b3:f5:fc:
f2:7f:35:50:9e:e1:4b:5d:04:54:0b:77:0e:68:a2:
75:7c:3b:a6:48:42:2e:24:6b:c7:a3:77:6e:35:ad:
24:22:4c:d0:b7:a4:21:7f:b1:6b:c1:7c:d8:97:54:
f9:ca:2d:eb:f4:5e:f6:68:69:2b:52:6f:4c:a9:52:
67:08:4e:c3:c7:62:35:5b:32:c3:92:12:81:0b:b6:
25:ea:0d:e7:05:e8:9d:3e:39:41:25:d3:48:1d:88:
d2:ea:75:cb:5d:b2:02:a2:e4:d7:d5:2f:99:34:33:
66:96:0e:6e:05:e6:8b:52:30:d7:c0:a5:29:2f:50:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.236.0/24
Signature Algorithm: sha256WithRSAEncryption
96:83:40:db:df:6d:d4:e0:46:d3:75:9c:3c:4b:96:af:42:b8:
b8:13:d4:8e:d5:d1:2a:00:82:b4:5b:41:ab:6b:e6:9c:d5:1d:
2e:cf:49:ec:e1:f2:3d:d3:3f:8d:e8:f9:6c:ef:4b:57:95:1c:
24:c4:6e:37:b3:ee:2a:6d:e1:4a:30:3a:44:08:70:c7:79:8b:
5e:d9:a0:30:03:98:8c:11:64:ed:a3:13:51:a9:6e:ec:73:83:
78:74:2c:fd:98:ce:51:a2:12:3a:58:32:d0:08:0d:b9:47:ed:
ab:d0:dc:20:79:6b:96:0d:5c:da:e0:71:54:a7:4e:d0:03:54:
ad:a2:35:0f:43:d1:08:18:6a:2c:19:e7:50:c3:54:c8:4f:74:
7a:79:83:8f:ea:c4:4d:55:67:5e:5f:dd:61:7c:5d:9a:d0:5b:
e1:b9:1f:be:ea:6e:f4:bc:35:37:3e:0d:9c:19:a8:29:c5:00:
6e:90:f9:d7:1b:1f:ee:76:ef:8e:4d:fd:7a:8c:51:11:0c:73:
b1:54:25:72:3d:7f:4f:ce:2f:a5:71:ef:0d:c5:99:08:dc:3d:
2b:94:9b:f4:29:2c:aa:4f:10:f8:46:42:6f:dc:f5:dd:d7:88:
85:9f:05:7f:a0:5e:ef:71:36:f5:c2:1b:85:18:b3:2d:2e:4e:
4c:50:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:37 2024 by rpki-client on console-fra.rpki-client.org