Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer (raw, json)
Hash identifier: Kh9mFOy1mj/WOU7RMQ/CUpms5EOpt0oF8EZ99GWtDmE=
Subject key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CF545164DBA2BE31CCC82968BE728
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57597
AS: 200588
IP: 176.221.80.0/21
IP: 2a03:63a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f5:45:16:4d:ba:2b:e3:1c:cc:82:96:8b:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa8551e851e69db165c6c632af45f21715512939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:21:e6:e2:5a:98:88:54:b1:05:2c:c1:72:
42:99:db:91:0d:46:6f:e9:ce:0b:8a:d6:bc:66:e3:
26:77:f6:5b:72:7a:d6:c4:7e:72:fa:fa:f7:c3:bd:
b4:64:aa:8a:6f:96:6c:0e:b5:be:b3:18:94:b0:44:
64:0e:1e:06:84:f4:82:5d:61:2b:69:bd:50:91:ca:
66:e9:ce:e3:1c:bd:cd:eb:7d:79:a3:79:16:2a:4c:
41:89:bc:f2:ab:32:d1:5a:f1:5a:c3:15:79:2d:bf:
76:7a:7e:5c:b0:33:68:80:f9:ea:d9:18:1e:e7:05:
2f:c4:0e:9c:95:e2:5d:06:8c:43:a3:c5:e8:a7:a8:
ea:f8:e2:00:ca:a2:fd:75:18:04:71:1f:28:4b:8c:
51:60:f6:f9:f2:3b:4b:47:f5:17:d3:51:62:b0:de:
bb:4e:ab:24:37:9f:7a:3f:0e:c0:ed:02:69:ed:70:
89:f8:4a:ad:c7:9a:a7:b9:c3:a5:5d:c5:3d:36:2e:
de:f4:e4:7d:02:e9:99:e9:c1:23:1c:c1:b0:79:48:
b8:de:72:65:e4:f1:17:fb:08:9a:bf:8c:e6:4f:a0:
b1:7c:72:43:db:7a:85:09:c7:b3:fb:1f:76:39:80:
75:db:8a:8f:85:4b:17:7b:df:0f:cb:74:32:bd:be:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.80.0/21
IPv6:
2a03:63a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57597
200588
Signature Algorithm: sha256WithRSAEncryption
6c:d4:52:46:54:df:7e:82:e5:66:50:3c:de:f3:d8:83:b7:6b:
21:51:87:28:f3:f9:1e:a0:02:74:68:72:b5:78:e9:b6:7d:5b:
f4:c5:dd:d2:73:0d:4b:1f:1c:6a:b5:3c:61:8c:c5:aa:8f:fa:
41:ff:ee:82:80:ed:77:cc:1f:3e:4b:d8:82:29:aa:3e:bf:2e:
83:48:db:b2:87:39:59:2c:22:2a:7b:99:46:fb:20:06:27:29:
fc:fa:90:1e:ee:ef:fd:fb:72:15:49:5a:5e:64:34:7b:0a:33:
d8:0c:2e:79:ae:5a:51:30:65:a6:44:34:e0:5f:3d:7f:9e:e0:
b7:31:ba:50:97:26:aa:cf:30:86:96:05:a4:b3:9d:a7:8a:0e:
61:d9:88:29:f3:3c:ea:a3:ea:13:73:f7:58:29:88:da:ba:da:
ef:24:8c:96:96:37:d5:08:77:56:79:d6:2d:4d:79:bd:9c:60:
f5:df:57:8e:71:47:09:09:28:6e:e8:e6:ae:9e:8e:f8:16:7f:
c2:22:37:af:66:9e:fd:8c:22:24:ec:76:8b:4a:b5:95:e5:2e:
1e:bf:4d:7d:a3:42:11:ff:10:2c:6d:28:2c:87:0f:d1:ad:3d:
dc:c2:79:50:f3:1f:c0:3e:7b:12:a9:8c:5f:40:cc:3a:7c:08:
ea:9d:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:02:52 2024 by rpki-client on console-fra.rpki-client.org