Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer (raw, json)
Hash identifier: tCd/GVQtM9Qk0qVENkDAn2CXrRBderErgBKTZ6pZ7yo=
Subject key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FEC716C67D79959A765F8922D71CE8AF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Jun 2024 07:26:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.82.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:71:6c:67:d7:99:59:a7:65:f8:92:2d:71:ce:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 07:26:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:c2:1a:49:98:79:9b:82:a6:8e:70:97:ad:
c2:29:d0:52:80:d1:a4:13:8e:67:11:1e:54:bd:f6:
24:6d:f3:a4:13:62:36:8e:ae:57:82:fb:07:1b:54:
52:e2:3a:5f:52:b8:fb:dd:bd:ea:12:9b:10:56:a2:
67:14:7e:63:51:48:1c:87:14:4c:8f:49:1f:c8:63:
6f:00:42:14:7a:86:51:db:3b:df:b7:f7:a7:41:b9:
15:70:b2:a4:d9:8d:c3:69:94:fa:91:81:ee:1e:11:
48:0f:a5:f6:05:29:e8:f3:e6:87:0f:54:4c:57:c3:
e8:c9:af:d9:ec:65:63:c6:2e:04:2a:76:7a:99:24:
34:5d:2b:18:82:2e:21:b9:0d:46:94:12:9b:59:54:
9e:39:5d:38:31:14:e5:3a:5e:cf:9a:3c:eb:51:54:
44:12:6c:f1:f2:04:75:ef:6d:4a:23:85:61:33:c6:
83:52:48:31:37:3c:cb:29:0b:69:7f:9b:7e:2a:44:
97:b9:5b:1a:fb:ae:7b:09:28:7e:45:c0:a7:b6:48:
df:20:ac:44:6b:7b:e2:44:a0:fb:18:2d:44:08:37:
f1:51:c5:b5:c0:1e:72:3c:a1:70:5b:13:f5:63:0f:
5f:65:ec:7a:97:40:13:1a:03:37:ff:10:c5:76:48:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b5:05:5d:20:7d:a3:70:85:f0:83:d5:5b:dc:b5:b8:47:e8:
7c:f7:75:f3:b4:1c:c5:fc:d1:56:5a:cb:f5:c7:ed:91:c4:db:
e0:7e:65:b7:47:a7:1c:b0:d9:ab:6a:e9:a8:c0:6e:7f:03:41:
ff:43:75:3d:7c:4a:52:55:8d:7a:c9:1a:59:89:f6:45:e9:a8:
69:a4:54:ad:09:f5:a7:dd:f0:41:b8:49:ae:cf:0c:0c:f9:a8:
59:5c:50:ca:7f:40:9e:70:79:47:a1:b8:ab:26:d0:be:31:a0:
24:56:05:38:3e:37:aa:fc:34:46:74:08:34:83:b3:7c:66:82:
12:b6:7d:82:db:93:a1:43:3c:9f:17:10:40:18:0a:5a:a8:6c:
2c:ac:c1:64:75:88:80:98:43:f2:b5:a2:f5:f7:3f:05:9f:b8:
f6:66:e0:a6:ce:6f:69:b4:f9:e9:dd:6d:71:a6:64:dd:da:b8:
1f:4c:c3:3d:c2:34:6f:7f:eb:2a:8a:22:6e:f7:d5:7e:1c:fe:
4c:66:16:19:a1:97:76:a6:1f:0c:9f:43:7b:d0:0b:d1:09:18:
73:bb:44:d9:4c:c9:d8:8f:80:0f:4a:41:9f:d6:e8:f2:e5:ef:
1c:a0:a3:73:c6:de:40:be:12:81:43:4f:f6:1e:a7:f8:42:4c:
39:8a:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:22:29 2024 by rpki-client on console-ams.rpki-client.org