Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.cer (raw, json)
Hash identifier: JP7ZDUVF2KXt5+70SDtU0Fnu3gl/N+j+xVooFig5SLM=
Subject key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49225CFE29DC70F51B4E88626062CF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56623
IP: 31.133.112.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:25:cf:e2:9d:c7:0f:51:b4:e8:86:26:06:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:68:57:e3:60:cd:ee:8a:cc:8b:d6:67:cb:
2f:3e:c1:95:b0:ca:1e:60:e8:df:21:d2:2c:fb:16:
59:45:17:b5:72:65:e4:54:fe:0e:1a:02:f9:57:fc:
e9:20:d8:29:a2:d2:68:4a:14:b8:90:99:de:80:4f:
6c:aa:f9:90:da:58:1a:be:98:65:84:56:aa:e2:e1:
23:1d:9b:13:5f:df:a7:59:24:ca:0f:61:3b:05:3f:
ac:8a:96:51:99:b7:9d:93:79:88:01:95:8f:99:3a:
48:0e:85:f8:f4:8b:3f:19:57:69:09:51:18:64:d4:
f2:7b:40:38:1b:2a:0c:96:86:6b:b7:2c:87:3e:35:
4c:6b:76:28:b2:6c:b7:4e:d4:51:74:19:4f:03:24:
70:3c:02:3c:f5:05:4b:21:0d:80:64:d5:04:07:42:
63:ae:50:1c:f8:2a:0b:68:13:e3:04:32:8c:27:be:
37:97:dc:23:89:f0:f3:fd:19:27:2a:27:5f:12:56:
50:24:f6:d9:dd:00:30:1c:1f:da:bb:8e:45:de:e2:
d3:68:35:56:77:fc:15:be:22:12:33:6d:ae:98:54:
23:88:98:9f:38:8f:0a:6c:26:26:86:2e:cc:11:f2:
7b:b0:5d:b2:b8:02:5b:34:89:b0:8e:42:7a:23:d8:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56623
Signature Algorithm: sha256WithRSAEncryption
03:02:4b:ee:18:79:a6:ce:7f:f0:1f:a4:2d:d5:79:5c:74:b0:
4e:f2:ad:38:21:a0:d3:67:d1:98:81:c0:14:89:f7:4c:5d:73:
be:e4:31:9f:2d:84:d5:e6:80:42:cb:ac:db:83:6c:9c:11:c8:
4a:34:1b:76:31:c8:0f:c2:8b:9e:b2:75:56:81:ab:e1:fe:b5:
70:cb:67:80:92:9e:b8:dd:d1:81:2b:23:2a:a9:89:c5:0e:01:
1d:db:c8:e7:41:a3:82:fb:76:50:d8:e4:e7:b6:0c:5f:cc:77:
ac:9b:bc:dc:0e:61:37:a6:c4:03:51:bb:ea:ba:89:b4:29:93:
83:eb:4d:32:e3:61:fa:d9:90:41:73:5f:26:31:8a:bb:fd:24:
41:f3:95:82:3e:c1:e6:1b:a6:b8:78:b3:60:a1:be:8b:44:78:
6f:23:93:7b:10:1d:0a:b8:44:6d:3b:fd:e6:3a:ec:91:b8:ea:
46:b4:6e:d5:6e:c9:48:51:cd:85:df:16:be:1a:f0:1e:0b:3b:
d2:ae:c3:31:63:57:ab:8e:d8:86:f8:1b:64:4a:a3:8d:75:28:
1f:89:0e:4f:4f:de:da:f2:36:3f:e6:23:4e:cf:e3:37:2c:1a:
58:a0:f6:64:99:c6:4b:b7:fa:0b:2d:9a:2c:6c:10:f4:01:44:
7a:36:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:15:15 2024 by rpki-client on console-ams.rpki-client.org