Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.cer (raw, json)
Hash identifier: Wy8TD+PX/LJrV8hByMalcHK89SUePqk3aCwlfIgdpw0=
Subject key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9265DD8EBF4869F6BCC5C69460B2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8982
AS: 34960
IP: 5.149.0.0/21
IP: 185.120.92.0/22
IP: 185.122.48.0/22
IP: 194.126.144.0/23
IP: 212.120.0.0/19
IP: 2a01:48c0::/32
IP: 2a03:2560::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:26:5d:d8:eb:f4:86:9f:6b:cc:5c:69:46:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:d1:10:e5:6e:62:90:d9:48:af:e1:4a:24:
f5:6b:be:da:c2:7a:f2:00:c3:d2:b4:16:45:02:c8:
2d:e7:36:7c:3a:10:bc:c3:73:47:a2:24:d5:39:c6:
49:ca:86:21:cd:28:ba:3d:e0:b0:cd:72:06:2f:d0:
68:cd:08:42:3a:f9:b4:dd:1f:0e:d3:bb:c5:bf:47:
a6:a1:51:20:a6:92:96:42:40:60:96:d5:04:d3:2d:
fb:e6:8e:35:d4:6f:f5:50:43:f5:46:7b:e2:b5:4b:
57:1c:f7:ca:a8:fe:53:5b:78:de:08:d6:9f:3b:06:
c0:9c:e4:6d:9f:ee:3d:1c:fb:69:45:d1:b9:b8:94:
61:1c:e2:4e:50:ea:e3:30:e0:95:47:a2:bc:b3:69:
84:5d:7f:bd:e5:6c:c3:53:9c:d8:cf:25:dd:15:49:
42:4f:a6:62:af:4a:f6:84:43:ac:80:fe:53:f9:23:
39:6d:89:bd:31:c6:64:af:a8:8c:1f:65:2f:6a:18:
e2:16:75:be:84:c5:21:05:b7:e4:e6:f9:2b:6e:76:
d3:a4:90:e3:2a:04:95:f8:6a:36:ad:e5:62:ac:51:
4c:02:7f:ad:67:1b:a0:d2:c7:c2:95:e9:46:b1:a5:
a9:d1:48:d1:5d:37:b3:0b:69:7f:4f:c1:95:fe:ea:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.0.0/21
185.120.92.0/22
185.122.48.0/22
194.126.144.0/23
212.120.0.0/19
IPv6:
2a01:48c0::/32
2a03:2560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8982
34960
Signature Algorithm: sha256WithRSAEncryption
53:9a:58:43:1d:a5:cf:8b:ff:14:33:cc:ba:58:c1:16:9b:94:
e2:2a:41:2a:42:c5:46:28:3a:f8:63:ba:f8:53:23:8e:f6:df:
6c:e3:72:35:cb:e7:dd:32:9c:db:5f:e0:56:7e:1a:86:1a:0f:
90:94:c5:44:02:d6:db:5c:fe:29:55:28:c8:c5:07:b1:53:ab:
ff:34:ab:8b:57:00:75:92:d6:03:61:75:7c:80:1e:78:f6:c3:
a7:d8:66:f7:ee:65:1d:99:68:43:29:9e:db:bd:48:ad:7c:7c:
bf:eb:3b:88:08:63:7a:c6:72:3c:d0:4a:c6:98:87:c7:d1:55:
4c:54:b3:8d:bd:9e:8e:4e:6f:62:84:fb:44:71:fb:26:c5:44:
0e:94:16:3b:9c:da:5d:06:9f:32:10:5b:1a:c2:24:84:ab:0a:
e1:03:71:b8:a4:bc:7b:89:47:cc:b6:63:7a:e8:6a:8f:b9:70:
81:1f:c5:0e:89:50:2c:38:b9:41:bf:de:a0:c9:ab:c3:ab:c0:
f2:d8:83:5e:fc:0b:4a:10:f2:69:44:15:5a:cc:b2:38:97:ee:
96:0a:4f:d0:36:be:af:85:7b:ff:78:24:00:65:b4:8f:6e:eb:
00:3e:c4:10:b4:5a:f1:12:c4:73:69:14:02:e3:cb:04:13:8e:
bb:71:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:31:08 2024 by rpki-client on console-ams.rpki-client.org