Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer (raw, json)
Hash identifier: IpwNQO67XJfGYDccWK/I+CivBXsZXWPPjG25u5Wecys=
Subject key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4933DE817BB39C00968F571E9F3B288
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16184
IP: 193.109.124.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3d:e8:17:bb:39:c0:09:68:f5:71:e9:f3:b2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:43:19:b6:62:40:0c:fa:e7:ea:ed:c1:23:
1e:89:84:e7:93:5a:24:b3:c1:6c:b0:fc:43:a4:5d:
85:60:da:17:29:99:5f:a4:8b:4c:32:29:44:2b:a1:
d6:90:af:ba:a2:18:03:f4:a3:c2:46:42:e7:a5:91:
3c:e0:08:db:4c:a1:ef:36:4f:65:21:86:7d:7c:67:
64:d7:79:70:14:e0:f6:4c:5a:64:04:a8:50:42:52:
ae:7d:aa:fe:29:7e:cc:a6:42:9d:e3:70:08:5a:37:
5e:7f:f9:16:6b:f7:c2:9a:e9:9a:29:00:39:82:2a:
2e:ef:b1:c4:61:34:f1:a4:10:ba:6a:2a:1a:1c:3b:
d1:6a:e7:4e:2e:ca:6f:7a:6f:b5:56:34:a9:f5:46:
b6:38:08:cb:2a:b7:bb:e3:c9:54:76:54:d3:5c:a1:
18:fa:cf:05:63:63:25:7a:aa:a9:67:ac:91:a0:28:
bf:f0:5b:06:f7:06:0f:cc:20:82:a4:e3:fd:a2:fb:
85:a8:11:08:d5:18:a0:f4:1b:45:38:85:aa:b0:ea:
8f:12:8c:77:61:88:ac:21:08:36:84:af:ec:ed:1f:
6d:8f:9a:91:dd:f9:95:ad:f3:36:d1:a7:df:b9:a3:
1d:8d:87:c5:0f:9b:18:c9:6e:24:63:65:54:0c:ee:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.124.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16184
Signature Algorithm: sha256WithRSAEncryption
4f:04:ea:3f:f5:47:e8:45:05:29:e7:ba:2d:3f:d4:6c:fd:93:
25:4b:fa:20:47:c0:77:4f:aa:0c:f4:74:c3:be:e0:24:ff:55:
df:65:e2:fa:01:58:a9:f9:54:5e:44:34:7a:bd:d3:2a:2a:e5:
f6:b1:6b:8b:89:06:b5:14:04:32:ce:4d:34:5e:ee:d9:da:50:
7e:ef:85:9b:8a:38:80:b5:26:f2:96:d6:40:a7:0c:65:b1:65:
dc:81:a5:47:e8:47:6d:9c:23:26:44:3f:13:5d:f6:38:49:83:
f5:06:b5:f3:fb:21:79:ed:46:16:30:7c:93:e1:91:2f:51:11:
67:43:9b:83:89:02:2b:3d:24:17:34:f1:d8:57:c5:de:d6:ff:
16:3e:45:d9:c6:9a:7f:61:be:aa:b5:1e:c7:fd:c0:57:43:2e:
b4:db:95:83:b9:3e:51:e7:96:ab:c8:c3:e9:95:c6:de:c9:07:
3c:48:30:fd:d6:e6:0d:89:d1:0b:7e:91:a5:1d:a1:8e:d1:8a:
37:d0:89:59:00:d1:0b:55:fd:35:dc:6b:09:02:15:4f:0b:5c:
69:2e:b3:aa:66:5c:dc:79:33:73:bb:6f:b5:ab:74:dc:f9:48:
e1:20:2b:3c:d0:94:9c:88:25:ef:15:8d:89:93:6d:4c:29:c1:
c6:28:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:01:33 2024 by rpki-client on console-fra.rpki-client.org