Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer (raw, json)
Hash identifier: FYpZu21LNgcy+FE8g1G/eK48vIDxiVpEuRdcaHhp0jU=
Subject key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E5FACFE258FB27472120F7E0D6936
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51979
IP: 91.222.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5f:ac:fe:25:8f:b2:74:72:12:0f:7e:0d:69:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:19:11:90:0b:7b:bd:5a:ba:77:ef:39:ad:
c3:b9:57:be:ee:18:f2:51:61:54:f6:ac:67:c3:e5:
31:69:c9:7d:00:98:a0:81:af:2f:3e:1c:4a:2e:58:
f0:3c:ce:05:31:2c:44:64:f3:f6:ef:48:2b:6f:91:
1c:fe:ac:c9:fe:ad:b8:47:f3:c1:56:6a:f5:ba:20:
48:8c:c9:f7:b3:a9:56:17:13:d6:8f:ea:5b:9b:2a:
31:ae:6d:12:91:9b:80:48:b8:68:22:74:50:85:10:
64:70:2c:ba:bc:75:ac:f6:8e:0f:bc:24:ca:09:cc:
2a:16:ef:c7:61:33:49:83:48:21:9a:5a:4f:7e:3d:
61:6e:15:22:54:b5:1f:b5:6c:48:86:42:d1:6c:a6:
f7:eb:0e:1d:e6:ca:04:27:67:e1:9b:cb:76:26:3f:
71:28:31:b1:58:eb:aa:19:fe:8d:29:7b:e3:43:49:
69:05:96:23:dc:ee:c0:29:f8:e6:b9:12:aa:02:3a:
43:55:54:7d:93:9b:cb:a6:62:45:9e:66:35:ec:4b:
db:84:6a:4e:a1:06:3f:ef:70:7c:6c:8c:29:90:67:
b0:f3:a5:ce:b4:0e:9d:e8:2e:92:3f:4d:b3:98:a4:
e8:7a:5f:15:be:9c:33:94:76:38:e5:c2:47:6d:42:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51979
Signature Algorithm: sha256WithRSAEncryption
8f:4c:03:e9:b1:c2:7a:30:af:7d:64:16:9e:61:bc:3a:23:d7:
d8:31:fc:38:d1:e6:45:3b:e2:1e:ee:4c:f4:c2:6f:a4:68:d5:
5b:ff:8f:d9:98:18:d6:82:84:97:0e:72:7a:e1:ac:b1:d5:48:
82:1a:75:12:d4:d3:09:e0:2e:8d:96:b3:ec:5c:83:f0:93:48:
47:9c:77:fe:95:44:cc:73:06:8c:70:ab:c6:36:99:54:10:b8:
ba:e9:38:60:9d:f0:8e:fc:ca:17:45:43:ce:4e:3f:29:cc:c8:
50:ba:55:b4:7e:8e:0d:46:ec:d0:86:f9:1d:91:76:e5:51:9f:
8e:12:12:1c:0b:b5:7a:5f:c3:f3:12:5a:3e:c6:70:90:f8:58:
0b:fb:99:66:3e:e9:50:23:c8:a8:e4:23:df:46:e3:4b:f9:73:
17:ca:f2:ee:77:a4:9a:78:70:65:f5:72:ad:62:47:60:72:c8:
87:3d:28:bd:c7:a0:bc:6d:dd:e5:49:02:fe:a6:ec:0f:9b:2e:
c9:41:53:54:cf:3a:c1:ae:b9:9b:2b:ea:7d:bc:b8:c6:00:70:
78:7e:d4:00:5b:81:01:3c:c4:63:07:68:97:aa:cb:7c:f3:72:
54:3a:15:ba:85:b8:8c:7e:f5:4c:d6:8c:1a:ff:79:11:6f:25:
49:8e:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:16 2024 by rpki-client on console-ams.rpki-client.org