Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qb_nSLXqchvbJsNLdc9T8Q3abr4.cer
File: qb_nSLXqchvbJsNLdc9T8Q3abr4.cer (raw, json)
Hash identifier: J1QUcto86BxVzUFwn7gzXf5BvonjbCvgBHSs9vxjC7o=
Subject key identifier: A9:BF:E7:48:B5:EA:72:1B:DB:26:C3:4B:75:CF:53:F1:0D:DA:6E:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D8495B2AC14613743F42F2936DDAA205B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/qb_nSLXqchvbJsNLdc9T8Q3abr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Feb 2024 17:20:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.11.224.0/22
IP: 2a0e:8700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:95:b2:ac:14:61:37:43:f4:2f:29:36:dd:aa:20:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 17:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9bfe748b5ea721bdb26c34b75cf53f10dda6ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:ba:bc:21:a5:ff:5d:4e:2b:a7:c7:ca:8b:
45:b4:86:bb:4f:66:03:79:db:ac:7a:86:be:c8:56:
bd:37:a6:b2:78:4b:fb:91:96:ce:03:3d:eb:97:53:
dd:7a:26:77:7f:82:7c:0d:50:c1:f9:ed:0d:d3:b0:
0c:bd:91:94:4b:a7:28:5d:da:9a:01:b1:1a:fb:2b:
d1:4c:69:1f:1f:bb:4a:77:b5:2d:d8:34:77:c7:4a:
29:3a:57:ad:9c:2c:b6:87:1c:d8:f9:a7:f1:4b:ec:
cc:52:21:0c:db:09:a7:30:f0:35:f2:11:71:29:5d:
55:e9:87:08:41:79:80:8a:df:f9:77:8e:0f:07:8a:
72:49:ff:14:2c:c7:46:f5:1e:aa:64:ab:76:e1:98:
d9:7e:c5:18:e7:fd:8e:9f:68:31:75:f8:3e:9b:09:
bc:04:c5:d2:42:24:26:14:e4:ea:7c:ae:83:46:c0:
52:7c:cd:32:89:fc:8f:08:96:1a:8b:3c:69:ba:a5:
03:8d:c3:f2:f6:75:1f:ba:6b:b2:8e:2f:6a:8c:f3:
19:be:ad:09:7b:6c:75:78:fd:bb:a1:5d:52:85:a0:
23:25:2a:e0:68:36:d3:a0:dd:e6:5d:32:34:4c:0c:
f8:1f:1b:64:9e:7f:77:5f:34:99:ef:e6:be:19:d6:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BF:E7:48:B5:EA:72:1B:DB:26:C3:4B:75:CF:53:F1:0D:DA:6E:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a11386-fbed-4e2a-a8a6-bbdb77250f7a/1/qb_nSLXqchvbJsNLdc9T8Q3abr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.224.0/22
IPv6:
2a0e:8700::/29
Signature Algorithm: sha256WithRSAEncryption
92:88:2e:ce:7e:dd:cf:90:dc:3d:15:b5:3a:a3:e3:8f:4f:52:
9a:2b:88:11:2b:45:84:fa:29:a6:bb:e2:4f:be:2c:4c:8e:6c:
a8:28:df:58:64:6f:24:d0:40:8d:d9:1e:33:f8:d8:51:94:db:
c0:fc:c5:1d:03:f3:17:db:1f:bd:bd:43:5e:96:59:d5:01:95:
eb:b8:79:73:8f:04:b1:d3:bf:b5:c8:51:03:f4:e0:58:b3:76:
f3:a2:22:61:ef:ae:b3:9f:ae:3b:e7:2c:de:02:a3:89:cb:60:
d7:99:b1:93:f1:d7:0c:b0:2f:48:05:84:0e:bf:94:ed:45:81:
30:12:ee:23:d1:4b:f1:3e:8d:36:86:c8:4f:05:2f:9e:27:2a:
c6:c4:e8:c2:e0:44:d7:b7:ac:44:36:ea:9a:df:f9:86:23:47:
4a:02:37:13:d9:48:1d:35:4f:5e:6f:fa:a2:ac:72:71:6a:6b:
9c:35:3c:cf:f8:f2:56:60:a1:b9:c6:b2:85:aa:78:4a:47:b6:
d1:13:d0:e2:15:28:a0:0f:53:82:60:56:a8:f9:a1:02:c3:4b:
ea:93:b6:9c:78:90:1a:8e:a7:c9:34:6b:9b:4c:e3:59:2d:43:
d6:7e:5d:da:f7:b8:81:fc:f0:06:6f:a3:8d:58:85:4a:4d:18:
80:00:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:01 2024 by rpki-client on console-ams.rpki-client.org