Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer (raw, json)
Hash identifier: eeAJGz4Ow4DSX13E8i6nk7FZtM0HkCBWAvVDwC3IGg8=
Subject key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2FD912A1910A9570DAEE915F12AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39433
IP: 185.151.40.0/22
IP: 193.93.56.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2f:d9:12:a1:91:0a:95:70:da:ee:91:5f:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:fe:3f:74:38:aa:a6:e6:2a:e0:87:47:5d:
01:94:b0:12:dd:9f:68:2f:b2:5b:70:f0:5c:78:a4:
d6:5b:d2:c1:e0:23:4e:90:c4:52:a1:ee:29:e0:2e:
5b:cf:b4:91:fe:24:38:49:57:1f:d1:48:0e:aa:87:
60:a1:7f:1f:1c:32:bf:04:1b:0e:8d:ec:4f:7f:2b:
87:1f:c6:b0:57:49:58:cf:e4:b9:ae:a8:85:ef:90:
6c:ca:a5:6f:20:7b:ed:94:08:8f:93:74:00:80:16:
b1:dc:11:de:1b:76:35:07:e2:17:06:e0:ed:f3:e9:
20:4f:49:08:20:d0:5e:e9:3e:60:6f:4b:e0:7a:40:
a6:a0:ac:96:f0:c7:c9:c6:d3:0a:97:68:4c:20:45:
09:a9:a8:09:3e:cf:25:b8:2a:a7:c7:1d:a9:4a:83:
a8:3e:79:53:74:78:ff:1b:8c:fd:3a:a1:f6:14:d2:
ec:b7:90:04:24:87:c2:e6:6a:2f:47:a8:1b:e5:42:
19:e9:30:67:bc:fa:ab:49:c6:46:9c:6e:0d:8f:62:
ac:f0:68:ad:4d:f4:93:e8:73:0f:1c:7f:b9:e5:7b:
16:a6:85:2a:6e:5f:ea:af:37:79:3a:54:3a:7d:f7:
ce:0d:b5:e7:88:f7:d5:6f:b2:bf:e9:ca:72:e6:26:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.40.0/22
193.93.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39433
Signature Algorithm: sha256WithRSAEncryption
16:83:e5:58:00:24:62:b8:bb:9c:26:7b:9d:56:ec:06:b1:9f:
15:3e:a0:c8:90:91:8a:7c:00:25:c6:cd:88:2c:c1:ae:b1:39:
f9:9c:a0:c4:05:f6:a7:c2:ea:f2:0d:da:ad:2b:84:a1:0c:cf:
91:9b:18:1f:4e:c3:3e:bd:10:90:6b:61:6a:bc:25:ca:76:52:
2f:01:3b:6d:7e:da:90:90:94:6d:04:40:6b:59:08:0d:5f:bc:
00:54:41:9f:70:58:2e:54:00:59:30:45:55:e7:fb:49:8e:13:
ef:dc:ac:97:17:07:a0:8c:1e:0f:86:d7:15:2d:51:49:35:e1:
a4:35:cc:ae:65:6f:39:e8:1c:63:fa:10:70:5f:83:8a:f3:cc:
24:2c:04:89:56:4e:13:41:90:4a:87:b7:64:f9:f8:ec:84:01:
b8:38:f2:eb:da:42:3e:9d:f0:2c:08:f7:df:ea:2d:af:b9:39:
da:b2:ce:c9:98:f3:fc:14:0f:e2:59:f0:25:51:a7:da:05:d8:
ac:f3:2b:a8:dc:e0:06:22:50:d1:96:71:51:81:e0:64:0b:64:
95:40:a7:56:e6:57:70:00:be:90:59:51:a9:93:66:6e:61:1b:
a9:5a:d3:05:54:f8:14:6b:06:30:ac:d3:1c:05:f5:2b:ec:13:
b2:49:4c:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 11:00:17 2024 by rpki-client on console-fra.rpki-client.org