Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
File: qmWvaX3x9s2vTLvWbePUO-2GnpA.cer (raw, json)
Hash identifier: 1EJ4KHK9uY+lu/zAf+LK421c5XmgnRyja2D/6DPQhEk=
Subject key identifier: AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79532393C892FACF517D6758297753F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208320
IP: 45.143.108.0/22
IP: 2a14:680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:32:39:3c:89:2f:ac:f5:17:d6:75:82:97:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:11:68:bf:84:05:cc:1e:3e:36:a5:9e:20:
95:9a:c9:e8:a8:ab:34:ce:71:17:5f:51:8a:03:ac:
aa:b1:d1:5c:01:e7:e4:24:08:7b:76:27:ce:00:29:
8f:4f:47:5c:d6:0b:fd:60:1d:85:e2:0d:8c:29:89:
49:04:66:30:4e:90:0f:79:f0:bb:51:77:6b:79:a1:
2d:e3:f8:02:3f:e0:f2:59:a3:cf:50:be:69:82:5d:
94:29:de:24:54:b6:99:a9:13:71:8c:cb:a0:5f:a4:
36:cf:5f:63:54:ae:c1:8a:b0:2a:da:3c:d7:f3:6e:
a6:5e:e5:b3:4f:3c:9e:7f:39:a8:66:e4:30:2a:6c:
0f:1e:a7:25:cc:d8:0f:11:dc:b0:94:f7:9b:bd:d9:
ec:8f:dd:ed:f8:e3:a0:0f:be:83:7e:20:a2:33:ad:
3a:03:b7:d1:20:c1:42:26:3b:17:d6:1f:39:3f:3c:
f3:b0:c0:f3:c6:5b:a3:43:68:26:03:5f:ba:bf:f4:
2c:94:07:8d:47:19:e7:7c:24:e6:f5:31:a9:ae:e9:
33:32:bb:2e:03:e9:b4:2f:a8:ae:53:51:d9:a5:b9:
bd:cb:27:2c:ae:d7:26:15:8e:9d:d7:9c:aa:66:ca:
04:1d:a7:22:b7:c4:15:23:4b:ab:91:07:5c:7e:d6:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.108.0/22
IPv6:
2a14:680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208320
Signature Algorithm: sha256WithRSAEncryption
7e:f1:a4:a8:71:82:75:eb:b2:00:4d:3b:d5:5c:4a:bd:5a:cd:
54:0e:76:8a:08:01:bc:03:f4:4d:46:f1:ca:b5:ac:f5:5c:74:
10:83:c3:bf:a3:a4:5d:7b:53:b4:81:ec:b3:62:68:f6:e1:6b:
9e:cd:24:5d:83:ea:a3:67:fc:ba:ff:22:70:af:d3:d4:d9:41:
91:0d:59:6f:3d:b3:26:2e:4b:02:26:b4:34:ef:72:16:2f:97:
e8:e7:ea:f9:73:36:89:61:a5:57:5c:78:95:f5:08:ed:8f:ae:
bf:12:0f:fd:7d:84:9f:8b:8c:f9:2f:db:15:a9:f9:43:93:8e:
b8:c6:ad:e7:8f:93:7c:23:82:b3:e3:c6:88:e5:f1:83:02:8d:
75:dd:90:3e:bb:ad:ec:88:ab:90:ca:93:68:d8:0c:31:7a:5d:
27:4c:25:1a:71:9a:93:96:d6:5f:27:a5:72:5a:b5:bd:c6:62:
17:ca:f5:15:14:82:d5:17:8a:bf:2d:82:8b:0c:97:20:85:00:
3e:78:17:51:9a:27:d8:7f:da:5d:a7:b2:a8:b8:53:0a:db:9f:
34:ee:c4:8e:1a:39:51:9d:61:02:0e:5b:a6:a1:45:15:68:91:
1a:cd:e5:ce:bd:07:22:aa:f7:33:10:8b:3b:35:7f:91:78:77:
4b:a4:4e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:07 2024 by rpki-client on console-ams.rpki-client.org