Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
File: qafBolN_0DVAh1mXh8qoQv7WC38.cer (raw, json)
Hash identifier: n27KDNjrr7a4F5xU0izo/dITElRykhQHlSXXXcyEmCQ=
Subject key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D60E2C0868895BE3717D34C1F74CD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196749
IP: 46.18.136.0/21
IP: 185.125.68.0/22
IP: 2a06:3dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0e:2c:08:68:89:5b:e3:71:7d:34:c1:f7:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:e9:68:bb:01:52:4b:53:db:c7:ee:85:5a:
3f:07:15:cd:2a:1b:bb:51:9f:03:fd:ab:fa:58:82:
7b:8c:19:3d:78:52:16:3b:3c:d6:2d:4e:41:6a:9a:
cf:09:be:9a:69:ed:86:12:59:f4:09:96:fa:4f:99:
44:d7:1e:23:22:9c:f1:8e:84:fb:7a:1e:f4:e6:02:
ba:80:35:e8:b1:aa:38:14:07:5f:6f:25:8a:0e:1f:
59:d6:3e:5b:6c:cc:9c:26:c0:8c:8b:84:76:41:0b:
c1:11:c1:29:f4:6d:0f:53:21:79:d6:de:53:7e:9c:
e6:0f:0d:e6:b8:85:e9:73:46:29:8a:63:8f:3c:4f:
fd:07:2a:b9:d0:f8:4e:6a:57:9a:d6:47:65:e5:21:
9b:a9:20:f3:c2:ce:08:ae:d5:71:d9:4c:e2:01:86:
53:c6:fe:f4:78:4c:fb:1e:16:11:0a:e4:c1:29:67:
0b:05:28:5e:ef:32:7f:61:76:79:a5:94:95:d0:b0:
c0:8c:7c:55:94:c5:9e:ca:3f:bd:d4:f5:c7:3c:2f:
4d:9e:3a:a4:79:58:ce:91:ae:40:e8:52:4f:b0:f2:
2f:07:97:ff:7a:83:c4:9b:43:60:b6:07:e5:ae:44:
b9:ff:9a:3f:72:b8:2e:78:b0:b3:56:77:72:85:36:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.136.0/21
185.125.68.0/22
IPv6:
2a06:3dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196749
Signature Algorithm: sha256WithRSAEncryption
15:af:c8:0b:8d:8d:54:aa:ee:70:6b:5e:b0:3e:9b:63:57:aa:
45:f4:bc:60:1a:58:c6:7e:28:be:1f:6c:ba:fe:b5:5a:91:af:
bd:1e:10:12:7a:38:d4:c8:4d:43:b3:bf:f1:f6:94:c2:32:f1:
73:c8:e6:a4:74:48:19:cc:43:54:5d:78:b5:92:52:f5:9d:78:
5b:c5:13:f9:bb:d1:c7:be:69:b3:a3:30:b8:ca:16:3b:e3:06:
b4:89:44:20:91:5d:84:f0:18:49:27:58:dd:8c:fd:44:81:8a:
de:4d:24:ad:fa:ff:fb:39:72:6b:13:d9:f3:33:4e:c6:63:09:
e9:a9:83:3c:7e:2f:13:50:21:24:14:8f:5d:1e:fe:2e:96:01:
56:3f:e8:6a:38:4e:af:de:77:4a:28:41:d0:bf:8f:c4:3c:ed:
9a:6e:9a:a2:89:45:9d:17:b9:71:76:08:96:aa:8f:e2:b9:29:
40:17:13:dc:7d:b5:a9:1f:e9:00:ff:1d:59:e2:b3:41:77:b1:
cc:54:15:4d:6e:52:e4:f7:16:bd:6a:a1:78:40:e3:86:7e:f7:
55:13:a1:c1:cb:8c:9b:d2:3e:ec:2a:85:0c:85:5d:f1:9a:32:
fb:2f:a0:ef:11:1d:41:0a:ed:80:c8:d9:03:71:a5:4f:8d:50:
10:cc:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:26 2025 by rpki-client