Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
File: rQVANtrTLReoyRbcLfuzzoo2RSw.cer (raw, json)
Hash identifier: qX34PSPKGMxMrT94h2m/76VYvYAUvZCL/9bE6XC/ty0=
Subject key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D061B3CD27314CA98832DD0C80D2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13278
IP: 195.234.165.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:06:1b:3c:d2:73:14:ca:98:83:2d:d0:c8:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:59:21:42:e7:84:26:c1:da:87:ba:0f:18:
ef:98:cb:32:35:81:f0:a6:11:b8:82:67:ef:4f:1d:
2c:a7:6f:e5:63:55:96:ab:d9:d6:ea:ef:9e:d0:b2:
6d:df:05:0c:f3:da:e7:40:e4:bc:a5:d3:d4:d7:91:
b7:2d:1f:c2:45:3a:7c:60:25:73:a3:6b:f3:c9:c0:
4d:66:2d:f0:32:da:e0:c8:33:84:6f:d4:27:1e:cb:
6d:d2:56:3d:dc:7d:72:c8:ae:25:b8:0d:61:60:28:
dd:02:0c:19:35:87:90:8e:16:8b:b4:e4:29:bc:5a:
da:90:b2:46:82:c8:90:31:ae:3b:00:c1:7a:8e:45:
90:8f:76:ee:3a:80:1f:1f:45:3e:1f:5a:2a:0d:fd:
ba:fc:36:8b:3d:4b:4f:01:1a:5f:d3:33:54:c8:88:
2c:cc:3f:75:2b:42:a8:a3:66:26:ef:86:e4:da:f0:
20:63:b1:cd:ac:c2:40:c7:bc:67:83:f6:ab:bd:3d:
3f:ee:47:8b:ec:f4:a3:82:41:0d:d9:32:18:8a:a4:
d1:c0:35:d4:03:7c:2c:4a:ab:88:54:df:a9:9b:b2:
c4:b4:19:a5:f3:65:12:fd:61:ad:ab:6f:69:ec:c6:
2c:16:b1:bf:bf:9c:9f:3c:4f:1d:0f:5d:02:18:61:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.165.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13278
Signature Algorithm: sha256WithRSAEncryption
32:8b:ca:e4:77:65:70:e7:c3:46:4b:a0:62:44:ac:53:44:de:
8c:83:a5:5d:1f:53:dc:29:5c:0e:1c:a7:60:aa:ca:03:e2:c9:
95:46:6a:bf:94:af:d0:d6:a7:cd:67:47:f9:14:20:43:7b:d5:
5c:16:e6:7b:cd:ca:45:39:46:27:71:d6:66:74:31:9b:b2:59:
11:8c:e5:24:09:3a:b3:b8:f3:06:d4:1e:0e:58:48:48:ce:39:
17:02:5d:57:ec:5a:d7:d0:61:b7:8d:27:1e:be:4d:c7:8f:1c:
82:cf:a8:46:62:1f:a4:77:46:f9:37:41:97:32:65:4b:bf:d0:
20:5b:89:3d:46:e1:b6:26:b6:4f:95:82:3d:a0:50:e9:64:f4:
50:6e:4d:a1:90:81:4c:fa:03:3e:df:b0:b8:63:26:7c:02:60:
13:c1:54:e3:80:f1:fa:b8:c0:db:cd:f4:73:2e:b5:54:af:be:
21:ae:e7:e3:1f:41:85:d7:b0:38:45:5d:02:b7:bb:fe:a6:fd:
75:8c:22:54:05:ca:1b:23:4f:7e:4c:66:68:78:3a:ed:2f:47:
9e:a5:c4:7f:78:c3:47:47:b9:96:f4:fe:77:1e:ee:90:2e:45:
52:d2:2d:4e:8c:e7:ac:0d:de:38:2b:fa:e0:b0:50:36:24:19:
81:52:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:02 2024 by rpki-client on console-ams.rpki-client.org