Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
File: qg8kkqGEfbRaOjQPG22NMP-qvoo.cer (raw, json)
Hash identifier: LuOnWaJPDoMSztCjDrRYXFEOx7O0jtUZrqjyvfi3yco=
Subject key identifier: AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493036864C0CBAECC76B797CF27E6FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211026
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:03:68:64:c0:cb:ae:cc:76:b7:97:cf:27:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0f2492a1847db45a3a340f1b6d8d30ffaabe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:f4:37:69:ba:0b:aa:0c:1f:a8:0c:ae:e5:
55:ce:fb:ed:1c:82:33:86:7f:38:2c:1a:6c:64:da:
14:9c:74:dc:f5:1a:be:a3:0a:35:50:f0:26:62:74:
55:62:82:6e:99:c2:7a:33:88:4a:28:6c:42:03:2c:
8a:8b:5c:03:fc:81:a6:f5:f5:7f:d2:54:be:aa:9d:
aa:8f:50:1c:61:90:64:6a:4c:76:9c:46:6f:c7:6d:
5b:4c:a6:a6:01:ad:e3:3f:d8:ac:8d:47:57:e1:45:
e5:96:07:e2:f5:2b:fd:39:aa:9a:22:cc:06:ce:6f:
ae:1d:dc:ed:73:d0:fa:e7:85:23:de:ed:2b:53:33:
d4:15:90:ae:fd:3f:8c:48:ec:6a:3a:11:be:ba:d6:
bd:2e:c2:c0:8f:e1:4e:d9:6e:7a:d8:2b:58:da:63:
c9:f4:c6:c2:48:6a:9e:db:f4:05:04:f5:22:8f:08:
89:68:35:7d:79:b9:32:ef:fe:f4:49:15:70:58:be:
7a:41:43:9b:33:b7:7e:ff:ce:fb:80:f9:ac:19:ac:
bd:cf:4f:32:8c:44:75:15:c4:e5:ab:d2:24:9a:4b:
18:d3:6d:a2:5e:00:49:3b:98:cb:71:28:fd:c2:1f:
5b:0e:b0:66:30:a5:18:c0:8d:fd:9d:b0:43:87:8d:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211026
Signature Algorithm: sha256WithRSAEncryption
46:7d:be:84:8a:af:60:99:eb:83:cd:51:07:a2:27:f0:e5:95:
f7:b1:64:fe:e5:32:e5:fd:18:02:fd:ec:ef:12:31:b2:95:e7:
53:86:4c:2b:ea:1b:33:0d:b5:d5:6e:a8:91:d3:7f:5c:61:32:
aa:4c:df:87:f1:ff:c6:c2:1c:b8:6b:66:fc:55:ba:be:6a:34:
f8:94:f9:74:81:0a:19:31:90:22:d3:13:aa:f5:e3:bb:60:47:
01:43:31:7d:4f:e1:8d:4e:d5:11:f1:2b:d6:a2:db:3d:03:40:
30:96:14:1c:68:03:0c:80:d1:fc:e0:44:c0:3a:5c:84:ed:72:
35:c3:a4:bc:0d:13:5e:a2:c9:0b:96:f3:e7:5a:2d:ff:be:87:
3c:6b:58:e2:29:66:75:ea:8e:f1:61:bd:83:7e:51:fa:83:db:
b7:41:4f:29:7b:77:73:1a:e9:df:a4:de:92:b9:c3:16:03:22:
75:1f:e2:f8:28:1a:9e:92:e7:42:7c:28:c5:f6:94:4d:0c:18:
26:1c:fa:54:fe:81:30:07:3f:03:30:df:9d:91:5e:b4:a0:4d:
52:c8:36:c7:31:43:21:6c:92:38:e3:ef:f8:fc:80:61:3d:1f:
6b:34:3c:37:02:d3:2c:99:02:6a:e9:cb:c4:33:53:0a:4e:89:
a7:81:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:28 2024 by rpki-client on console-fra.rpki-client.org