Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
File: qiEQS093IiTRGFaiTt-UZqhE0mw.cer (raw, json)
Hash identifier: gbJWnS518FPABt9xxUJ0ecPzI7fgyKcax/rTwqQmvgQ=
Subject key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D78B9D2B57A1E9FBE24DE8CF72735
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.62.108.0/22
IP: 2a0c:fd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:78:b9:d2:b5:7a:1e:9f:be:24:de:8c:f7:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa21104b4f772224d11856a24edf9466a844d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:b5:b6:9e:54:72:c4:38:a8:97:18:9f:2b:
b7:ec:70:25:c5:9b:95:be:7b:05:4e:7c:ec:1e:40:
5f:54:d9:66:05:91:06:c9:02:37:02:b0:ab:75:b3:
17:ee:90:e2:89:a1:0d:cc:07:1c:45:c3:7e:d6:0b:
99:d6:90:48:f5:c8:2b:08:0d:d7:2c:2b:ef:81:e4:
4d:6a:eb:08:b8:02:4b:4a:6c:8a:64:fd:08:ac:61:
dc:a0:45:fa:d2:36:3c:ad:d2:f9:4f:96:c0:4f:9e:
54:10:45:6a:77:3c:1b:d3:a7:53:a3:24:ad:61:da:
0a:1d:5e:83:32:09:32:40:9e:2b:95:85:39:16:52:
1b:cf:09:2e:d4:f6:83:3c:91:8b:33:8d:fd:cc:8b:
71:1d:9d:ce:ad:09:6b:98:09:c1:3c:86:be:7b:ae:
ac:b7:3b:f0:9e:14:db:73:81:93:54:08:b1:b6:5d:
c7:58:bf:14:b0:4e:48:ef:3a:36:3d:e3:f0:61:ea:
43:60:0c:f6:ed:d0:74:cf:2e:15:8a:d5:8a:ee:52:
49:d5:45:18:18:7c:c8:d6:e2:9a:51:59:7f:11:49:
2a:b6:d0:67:c5:e2:03:7f:9b:c2:42:3c:55:66:4c:
dc:83:79:a7:29:18:63:9d:d1:6d:b7:77:68:6b:82:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.108.0/22
IPv6:
2a0c:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
65:70:36:9f:b1:28:2a:53:38:21:f9:fc:7c:e0:68:23:3b:5b:
1b:6f:02:3b:d5:5c:17:2c:e3:1d:5f:41:95:5c:e1:26:42:8b:
08:63:88:ac:79:e3:eb:f6:4a:8b:35:64:66:4e:19:67:0c:f8:
0c:4c:66:52:4e:6c:5a:39:5b:c7:e7:10:ef:42:45:7e:28:51:
37:f7:18:75:40:a3:b2:74:8c:43:5f:9c:8c:52:3b:68:1c:55:
47:e5:e7:72:5f:70:fd:5b:81:94:8e:04:0f:ce:fc:94:2b:fd:
d8:a2:19:61:1b:62:21:61:e6:79:05:f1:44:5f:3b:01:49:7c:
30:e1:5e:50:8e:2e:5f:56:a8:dd:ee:c5:5c:5d:f4:a1:3b:ed:
d3:87:ed:78:eb:64:bf:3b:58:a7:56:f1:d7:43:26:84:d6:81:
f9:66:9e:d6:02:0a:f7:43:c4:df:97:e9:a8:80:8d:1f:71:91:
5a:0e:b7:2b:35:d3:83:ee:a0:b7:46:aa:c2:8e:12:bc:e5:ad:
d3:c5:7a:55:0c:04:b5:17:28:c3:0c:b7:fd:d1:fb:e8:43:dc:
c9:a7:e7:8c:30:d5:a5:5e:ca:72:90:b7:cd:5b:15:b6:d5:51:
6e:25:6b:4b:4c:0f:70:24:1c:13:14:0e:14:29:2b:59:0b:85:
77:20:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:03:54 2024 by rpki-client on console-ams.rpki-client.org