Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer (raw, json)
Hash identifier: BD5KaQW25nBFBMtkjs+X1pTMwpICrsQkoefp2XQIHsA=
Subject key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F69D1C6FDD2D88B54AC9388BD3AEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48012
IP: 91.208.234.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:69:d1:c6:fd:d2:d8:8b:54:ac:93:88:bd:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:d4:05:28:d8:73:28:e3:4f:18:88:db:7c:
d1:42:3a:0f:16:3b:f1:cb:c2:fb:16:e9:6c:8c:2d:
46:11:f3:65:44:1f:93:c4:e4:3e:50:2e:c3:20:01:
5c:53:74:7f:48:26:5f:8d:b8:f5:0b:75:86:58:69:
75:42:98:48:02:6e:30:b0:5c:fd:33:0a:13:a1:37:
5a:26:12:36:b8:b6:20:69:0d:a5:0d:f3:7e:f7:dd:
81:ae:88:11:a9:37:79:f1:70:5e:0f:6a:5b:b0:21:
58:06:74:d1:85:74:18:a7:99:22:10:5c:66:43:04:
f8:b6:0d:f5:7f:d0:c7:65:c5:79:54:e4:77:f7:a6:
20:1a:41:cd:68:94:2d:c9:60:be:5e:74:96:7f:2a:
41:ab:2b:5b:0d:df:70:80:64:c7:27:5f:08:07:0d:
18:be:47:b9:43:88:3c:89:c2:90:c6:cf:43:c1:23:
13:53:1c:18:e8:b1:c2:ac:ae:3b:67:d1:ae:dd:42:
f8:8e:9a:4c:d5:6d:f2:2a:7f:69:4e:6b:f8:0a:c4:
7b:6b:99:37:ff:19:55:31:6c:1d:d8:1d:c0:ae:89:
71:24:5a:7d:43:85:b1:26:2d:de:12:6a:93:a8:1c:
8f:84:d2:32:e0:df:d6:3d:1d:7c:1b:6c:52:84:9b:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.234.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48012
Signature Algorithm: sha256WithRSAEncryption
9e:70:d3:dd:74:7d:9e:2e:7f:7b:41:fb:4c:2c:80:dd:4e:4f:
41:9d:59:eb:49:67:36:df:d4:df:ba:a2:a1:cd:3d:0e:4a:c5:
ae:82:f4:a4:92:c0:91:03:d7:64:26:fc:e5:d7:41:94:85:96:
75:c3:f8:69:07:6b:14:ed:03:aa:b6:3d:dc:8d:87:61:4f:ee:
b0:92:14:bc:58:22:0b:35:e8:ec:e3:55:47:9e:b1:cd:60:e7:
45:35:e1:e7:ff:e1:59:ce:50:21:c1:d8:81:d1:50:8f:83:1a:
6b:93:f7:18:5a:f4:d3:52:dc:9f:0d:0e:7c:06:d6:bf:4d:8f:
42:ac:71:fc:ad:8c:97:3c:31:00:6f:76:13:18:e8:25:b2:c0:
6f:87:72:b6:2e:ab:62:f2:9c:72:e1:3b:01:e0:7e:ea:08:78:
71:9d:b0:f4:fa:93:63:68:4f:d1:e2:35:16:c3:83:d1:45:26:
60:9d:76:2c:7b:0f:93:fe:f9:a7:43:9b:9e:01:93:35:6b:53:
2e:47:9c:1d:33:48:30:83:2d:97:fa:08:05:40:f6:a5:1c:74:
f0:69:dc:94:9d:5b:4f:b0:b8:1f:cb:99:0c:e7:61:86:15:9d:
55:20:48:73:fb:39:c0:04:f7:14:18:ca:c8:ca:31:5c:00:54:
ab:aa:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:28 2024 by rpki-client on console-fra.rpki-client.org