Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qpFWiAdzYW98Ijrt3TO1RWEBwaE.cer
File: qpFWiAdzYW98Ijrt3TO1RWEBwaE.cer (raw, json)
Hash identifier: TZe9FVrGfgRzW/uB6zneOgGbf/wqK9e1AWv4tB9UuWs=
Subject key identifier: AA:91:56:88:07:73:61:6F:7C:22:3A:ED:DD:33:B5:45:61:01:C1:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B407C680D3E84C903C9B0DFE94C99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/ab9881-be13-49a5-92c3-85730532bd9a/1/qpFWiAdzYW98Ijrt3TO1RWEBwaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/ab9881-be13-49a5-92c3-85730532bd9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44537
IP: 91.198.59.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:40:7c:68:0d:3e:84:c9:03:c9:b0:df:e9:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa9156880773616f7c223aeddd33b5456101c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:3d:e0:54:a7:80:6b:f2:5e:45:f6:1f:bd:
41:f8:0f:12:41:7e:75:c8:07:ed:1d:78:0c:ce:2a:
ee:40:35:e1:b6:9c:6f:17:06:3f:45:29:c6:fa:69:
18:02:c8:d6:46:7d:37:f4:56:6e:c7:23:b2:8e:68:
cd:f3:49:0f:43:8b:95:98:3f:1c:20:61:7e:72:6f:
d7:b4:fc:d2:36:fa:a2:cf:06:e3:90:a1:5b:82:03:
36:04:08:ab:9b:ed:a2:e5:d1:e7:7e:ca:45:61:dc:
67:43:a8:de:e4:e5:96:99:eb:aa:dd:06:e0:9f:0c:
08:0c:cc:a0:7a:7c:f6:be:ba:b1:f0:68:64:50:2e:
ee:5b:29:52:50:93:c0:47:10:04:ce:6d:a9:89:81:
52:91:ae:80:cc:84:20:e8:b9:ca:23:2c:79:92:b2:
e3:69:c9:8b:bb:19:75:5c:d6:10:0c:bf:69:a2:b4:
0e:12:a5:8c:c3:53:e6:ec:0a:53:a7:95:42:3e:ec:
77:76:1f:12:1a:67:15:93:8a:68:98:84:6b:92:46:
92:ec:f0:5e:1f:12:78:2f:ea:22:3c:47:02:58:c8:
09:10:2e:e1:7b:05:9e:a9:dc:1e:78:b1:10:96:3d:
1a:b7:0d:83:1b:e4:1a:c4:04:b7:cc:c4:3c:25:af:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:56:88:07:73:61:6F:7C:22:3A:ED:DD:33:B5:45:61:01:C1:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ab9881-be13-49a5-92c3-85730532bd9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ab9881-be13-49a5-92c3-85730532bd9a/1/qpFWiAdzYW98Ijrt3TO1RWEBwaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.59.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44537
Signature Algorithm: sha256WithRSAEncryption
1f:d4:8b:ac:05:7a:ae:20:d7:0d:d4:b3:2b:5c:be:09:32:3e:
ee:43:a2:0e:73:44:e5:1d:35:9e:e4:a5:a7:c8:a4:2e:d2:24:
39:de:59:7f:f5:30:fa:22:b7:de:47:fc:fd:4e:1f:45:cc:f4:
94:5a:df:30:ae:ce:c7:3e:34:0f:29:6a:91:af:29:01:c5:6c:
8a:88:04:0a:61:0b:92:ab:57:cc:e9:b8:1b:d1:b7:f4:3c:ca:
61:24:e3:0e:87:e7:f5:94:7f:84:e5:89:d1:8b:4c:1a:34:8e:
60:23:f9:77:2f:c3:14:af:3f:c5:64:cf:ab:0e:98:2b:1f:e6:
81:1d:6f:2e:ad:22:c0:3a:dd:ce:9f:a5:a8:fa:30:5c:bd:91:
31:b7:8c:52:ac:9c:89:bd:a6:9d:f9:be:58:ce:0c:5e:a1:20:
96:c8:d6:1a:da:d1:41:d8:ac:c6:f0:04:16:4e:d4:f3:28:e5:
a3:a2:40:ee:2e:f5:e2:66:b9:3a:03:82:13:ba:39:01:06:d4:
fa:5c:ed:df:12:a8:3a:87:ad:3f:88:a5:25:c9:39:77:03:93:
5c:b0:64:f4:8f:1e:99:44:cd:d3:35:79:79:b3:3c:19:d7:ba:
71:f4:6a:58:98:90:14:67:af:c7:5e:00:bb:08:eb:d2:43:55:
ec:1f:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:09 2024 by rpki-client on console-ams.rpki-client.org