Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
File: qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer (raw, json)
Hash identifier: Ar+I+jyUjCr91HjyHBvdPUtT/eqCotMQOtr+hB1h6Q4=
Subject key identifier: A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7258F2639EC461D2521C7252B794094
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.59.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:8f:26:39:ec:46:1d:25:21:c7:25:2b:79:40:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:77:28:e3:61:d6:9e:38:40:cc:ab:9a:e8:
8d:dc:ca:f1:ee:c3:57:30:47:5d:13:50:c8:13:c4:
b4:79:01:38:0e:8b:58:e2:60:d8:84:92:1c:e0:34:
10:8c:06:de:f4:56:f0:ad:5f:ff:33:f8:92:10:b7:
b7:71:1d:e2:ce:02:c0:bf:19:e1:8e:9c:91:78:4a:
d7:66:51:6b:e5:19:91:9d:e8:00:29:8e:a7:d8:ca:
18:a0:9a:77:f7:3c:6b:6c:3e:05:54:2b:b3:f7:89:
75:f3:8a:b3:00:17:83:29:02:fe:97:53:7b:12:e0:
7a:12:b1:9d:9c:11:56:ef:ac:ef:1a:35:ff:70:57:
d3:df:7c:43:7a:e3:49:b9:c6:75:f0:e7:b0:4a:0c:
bc:5f:36:4c:46:ff:00:e3:95:85:44:b3:b4:1c:a6:
aa:fa:0b:0d:03:ef:88:1c:29:d6:8a:93:03:e0:45:
09:05:92:71:85:fd:7b:3e:d2:ad:9e:26:0d:b1:91:
38:8f:99:a1:b1:9d:56:50:79:47:6f:b6:ab:5f:28:
2b:5f:1e:d0:88:2a:f2:1b:55:3d:e1:2e:84:f8:1c:
38:ca:e1:5b:88:08:4f:d8:ed:cf:0f:d6:02:55:de:
01:a2:bf:88:ac:e9:aa:7c:4f:bb:1e:54:ce:c5:19:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
95:5e:ed:99:fb:08:3e:14:42:13:5b:fc:b7:7f:94:3a:84:04:
c7:fb:f3:0a:3f:d4:cf:01:d4:70:a7:3b:69:87:00:96:79:e8:
48:78:7b:2b:90:94:c3:29:c4:7a:a8:fd:e8:33:5d:64:f9:27:
ee:89:47:85:03:ee:c9:6d:f6:1f:20:5e:4a:b7:49:46:aa:f7:
e2:c8:13:e8:aa:c7:0e:da:42:9f:f6:3e:7b:63:f0:7f:1c:32:
69:4e:5c:26:7a:77:63:0f:8a:a9:5b:a7:e9:63:2f:1e:5f:c2:
59:4e:50:9d:9d:76:d0:29:9b:b7:40:14:6c:c8:f5:3e:82:64:
87:01:3f:cf:4f:dc:17:3f:4e:12:7c:05:4e:8e:00:9b:65:76:
08:86:5f:29:a7:6b:85:f5:45:45:87:02:e3:02:8a:93:78:69:
0e:7c:9e:5a:9e:26:79:a2:9d:a0:3d:9b:bf:16:01:d6:72:c8:
73:fe:54:a5:67:e8:b9:14:1a:c9:fb:4b:40:d3:06:eb:89:c0:
b0:95:4d:25:e0:bd:ac:6a:70:08:e8:4d:ba:41:80:4a:2d:be:
d9:8d:ea:2c:76:15:76:94:44:59:db:14:67:66:0d:2f:3f:87:
7a:48:5d:54:cf:f5:f8:80:6c:2d:79:dc:ef:68:9b:5d:36:e3:
97:d6:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:13 2024 by rpki-client on console-fra.rpki-client.org