Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer (raw, json)
Hash identifier: V/uXQZ3k8IDI9SAHRHvh36gkYGNHv1hG0u54U/ldhOY=
Subject key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFA8F741ED29083B99D1A0B3DB7771
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51956
AS: 198549
IP: 92.53.232.0/21
IP: 185.201.172.0/22
IP: 2a00:b8c0::/32
IP: 2a0c:5b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a8:f7:41:ed:29:08:3b:99:d1:a0:b3:db:77:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:61:55:87:80:63:78:12:be:a3:59:bf:37:
9c:65:b3:f3:c0:22:cf:45:d1:92:9d:3e:95:b8:85:
61:b2:8e:66:2a:a1:52:46:64:38:77:e9:56:29:76:
f4:f8:58:7a:1e:3e:91:68:7a:8c:f5:f5:aa:6e:59:
b7:fa:03:24:4d:67:bf:de:69:a1:f8:d9:d4:36:10:
f9:47:b1:94:84:86:d6:24:15:00:fc:d1:91:5e:27:
cd:18:6c:4a:c0:ee:dc:d1:88:a7:d6:ba:3d:4e:77:
17:c5:32:c8:37:4b:9f:99:d5:71:f0:7b:ef:47:5f:
d3:61:69:fc:26:72:b4:dd:e4:7e:9d:58:03:01:03:
87:b7:79:eb:2f:31:46:c7:5c:86:cb:88:0b:fe:15:
5d:55:56:08:6e:53:02:3b:80:93:41:a7:b2:f8:24:
0a:f9:7e:6b:1b:08:d8:67:0f:a8:a2:60:57:e6:e0:
62:99:8e:31:65:aa:2b:13:38:32:5e:f8:ef:a1:3e:
ce:b3:2a:85:76:fe:66:79:0d:45:b3:00:f9:7e:0c:
cb:22:42:7b:d0:87:fa:d7:ca:3c:88:7b:39:8f:a3:
9d:7b:ef:27:4d:95:2b:b8:17:b1:0e:26:b7:fa:ba:
36:60:ca:44:78:63:47:2f:a0:34:ff:76:eb:e5:c8:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.232.0/21
185.201.172.0/22
IPv6:
2a00:b8c0::/32
2a0c:5b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51956
198549
Signature Algorithm: sha256WithRSAEncryption
2a:ee:8f:4e:44:73:c7:c5:7a:98:4b:b1:f1:eb:92:54:25:74:
f1:df:3d:11:e0:5e:7d:ec:11:b0:38:af:5b:23:1c:9d:1b:47:
60:56:39:a8:93:2c:70:f0:01:f8:99:02:c7:6a:13:70:9c:19:
98:a7:1e:34:a0:51:5d:66:24:58:cf:48:ca:af:d4:a8:17:54:
81:c7:00:64:bd:94:06:24:91:60:6f:b8:49:52:8f:62:b5:bd:
c6:38:7b:3b:73:9d:b9:0f:05:ec:5b:ee:ae:51:30:96:37:f6:
9b:2c:8a:3e:2f:5e:e2:c5:15:b6:66:5f:5f:f0:c9:19:48:33:
44:1f:45:4e:6f:43:89:49:9f:79:c0:53:0e:ac:fd:0d:53:10:
c4:39:c8:c4:26:41:fb:a0:fe:7b:c6:5b:ce:fa:37:fa:d4:d4:
72:62:3f:9c:dc:0e:bb:c8:3d:11:c5:1a:26:fe:6a:f2:a5:c4:
ee:de:4e:a7:5b:26:0d:24:c4:37:aa:cf:c5:74:e3:1a:19:16:
73:77:cf:77:68:55:fa:b0:77:f6:83:0c:fb:3c:0d:1e:e5:af:
c8:fe:66:2f:40:bf:0e:d6:c0:c3:a4:a0:1a:6a:61:ac:4d:a2:
59:24:c2:b5:6e:05:bb:03:38:88:7a:7d:97:c4:81:27:00:f7:
ef:c2:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:14 2024 by rpki-client on console-fra.rpki-client.org