Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
File: qT4365yxmDJdZWZzKJJY0o6587g.cer (raw, json)
Hash identifier: su1oNarL64tI0H6sfdP2VrIgrxRusGkeCBtCh+94iLQ=
Subject key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CBC840BA0BAEAEA303D052C411EC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.247.66.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:bc:84:0b:a0:ba:ea:ea:30:3d:05:2c:41:1e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:40:26:77:53:e6:89:8c:97:6e:ef:d5:e9:
7a:b2:70:7a:b4:72:22:92:0b:da:4e:65:8f:e5:4a:
68:9d:d6:bc:94:52:37:49:51:5f:eb:3d:3e:50:df:
a3:6b:68:2c:89:e0:5d:c2:3b:b3:96:10:45:67:5d:
4b:a9:e4:61:08:cd:c3:0a:42:b6:b7:fc:17:f1:c2:
4c:f9:dc:94:02:0b:80:19:a9:4b:e5:47:d7:6d:fc:
9b:4c:58:aa:af:d2:82:b7:54:3b:99:ca:00:19:82:
2f:5e:b9:95:98:b1:fa:97:54:c8:a4:04:85:d8:ee:
99:33:d8:c2:83:99:87:65:8c:ab:fe:a2:0e:14:e4:
c5:17:c7:85:ac:c6:25:97:bc:00:17:7d:f7:0d:b0:
7e:60:e9:bb:49:bc:5b:ee:fa:d5:f1:0b:33:7f:c6:
be:6d:24:da:d4:0d:74:2c:68:0d:fd:57:2c:8c:37:
32:cb:c0:fa:6a:5e:bc:1e:a7:24:5d:f7:e3:23:ff:
77:35:2e:c0:e6:42:a7:a6:41:01:82:6f:aa:3a:76:
c1:7d:69:4a:94:b9:c9:3d:31:57:23:8c:8e:1d:bc:
37:a6:15:65:26:58:1a:3a:9a:1b:c0:fe:fd:28:46:
83:12:ab:94:be:89:f4:ad:b6:f8:6f:90:2b:ba:19:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:44:d3:f1:b1:fe:f0:53:5b:7d:1e:ca:31:50:86:ec:25:ea:
8c:6c:66:f8:d0:82:41:f3:10:f8:7b:9e:dc:bd:bd:78:a4:ff:
53:3c:f9:e6:d3:96:f9:74:c1:1c:37:ba:7c:b0:2e:32:e8:df:
e3:b3:25:b8:02:60:6c:ef:fc:ca:4c:21:7c:0b:cf:c2:95:ac:
84:b9:5a:c2:1a:76:e3:c1:71:55:02:62:c8:bb:35:b6:9f:03:
66:da:f6:98:0f:61:61:cc:7a:98:49:17:fb:49:9a:6c:03:fc:
01:fa:9f:d9:17:7e:74:ad:22:25:12:85:5f:74:5a:08:3f:02:
91:59:ab:29:89:36:bb:4d:94:8d:6d:8d:10:02:98:dc:46:c3:
8d:25:d8:cc:47:b6:51:f3:4b:5a:5e:aa:da:fd:e3:0c:30:43:
b1:9b:63:9c:97:3f:39:14:6e:9c:56:62:ae:e9:91:a6:bf:68:
55:bc:0a:a6:48:63:58:80:c0:4a:1e:b5:ff:9e:35:53:e5:0a:
06:f6:f4:0a:38:50:99:bf:8d:8b:a4:77:ff:72:72:a1:15:54:
a5:a2:c2:af:32:c0:65:11:ca:22:94:74:f2:3d:a0:34:88:e6:
b8:83:11:fa:8e:2e:d1:b0:49:0d:ce:d3:00:0d:db:13:09:96:
ae:e0:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:03:46 2024 by rpki-client on console-ams.rpki-client.org