Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.cer (raw, json)
Hash identifier: 9lqAWXKlxlSpsbFWQak5mqZI3wmK05jdwXEtJiqfE48=
Subject key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF8872933E1027E589D192E49AC2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51270
IP: 194.149.94.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f8:87:29:33:e1:02:7e:58:9d:19:2e:49:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:87:b5:3f:4f:ca:36:0b:6f:15:8d:32:68:
cc:85:75:dc:76:92:dd:09:2f:dc:c6:f8:9d:28:1f:
db:2e:53:d6:8d:4a:d5:c1:70:94:9c:d2:76:b4:50:
43:2a:e3:d2:d7:af:ad:3c:07:1d:42:d5:7b:db:9e:
c1:c3:e4:da:cf:e5:1d:92:d0:59:8b:23:90:7c:cd:
05:83:22:a2:1a:f3:73:4d:c5:26:56:0f:6d:a5:4a:
97:d0:af:69:73:fa:61:0e:cf:8c:e9:e1:68:7d:b9:
cb:ce:d8:0d:54:1f:ea:24:ff:b7:0e:da:48:eb:5a:
77:fc:49:75:c2:46:b4:ec:29:b9:9f:f1:68:c0:49:
66:95:0e:57:f9:f4:44:d7:b2:ed:e1:b7:5d:81:97:
ec:8a:59:52:58:f6:26:02:64:2a:95:3c:b9:1e:44:
d3:da:0a:a1:98:eb:50:b7:cd:53:07:59:8c:e6:bc:
33:1f:a2:d4:94:54:eb:86:9a:37:4b:08:8d:c8:8a:
cb:0d:1a:3e:b0:d2:19:f2:d5:f7:ee:d2:6e:63:44:
6c:f9:27:ad:ad:3b:b0:82:60:7f:8b:20:3e:5d:4c:
ae:da:c7:a2:f3:f9:98:20:8a:5e:b6:f3:a3:a6:56:
ce:71:25:f3:29:6d:75:e8:a0:93:53:aa:4a:94:55:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.94.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51270
Signature Algorithm: sha256WithRSAEncryption
05:97:ed:12:ff:07:5f:24:00:52:63:7e:ba:62:fa:70:1d:8d:
54:b9:fa:9e:93:e0:68:b2:3b:c6:eb:4d:72:80:c4:14:1d:5b:
33:ca:db:47:dd:ea:22:b1:d8:a6:e0:f8:d5:72:15:fe:80:7d:
0d:b1:6d:06:bc:4b:e3:07:08:d1:02:72:b8:39:a7:0c:f4:b7:
7a:51:bf:03:8a:53:a7:fb:58:22:25:47:31:2f:ef:be:57:5f:
78:24:0e:4d:e5:5e:ae:13:65:5a:c4:84:4d:56:5c:dc:26:3e:
cf:bb:5d:bb:77:f0:0e:8f:ad:a2:95:c4:c9:b6:d1:a7:a6:f7:
e9:b6:1d:d6:81:b8:e6:9a:8d:0d:38:bd:56:86:f3:b9:1f:72:
cd:7c:4f:ba:59:4f:ab:fa:b6:33:f9:3e:7d:48:85:27:4d:af:
ea:69:17:68:7d:63:c4:e6:44:07:9b:1e:86:c2:2c:85:54:b5:
bf:0a:23:fa:c7:cc:2e:04:1a:c8:95:c5:d5:c2:35:b1:3d:17:
d0:dc:46:e4:62:60:82:8b:7a:a4:ff:28:6a:3f:73:e5:d8:9e:
67:d4:2f:72:78:1b:b5:d1:99:93:cc:8e:31:d3:40:ec:ec:7f:
0c:77:82:de:bd:73:e8:cd:e1:52:25:77:75:94:d8:b9:41:05:
30:a6:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:28 2025 by rpki-client