Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.cer (raw, json)
Hash identifier: veho64i6yIaH4YxmF1P9uYlEjTMPIW+wYGNyKyRro6M=
Subject key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E31B21142449665375606F1425157
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198340
IP: 193.57.218.0 -- 193.57.222.255
IP: 193.57.232.0 -- 193.57.247.255
IP: 193.57.250.0 -- 193.57.253.255
IP: 2a0a:cb00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:31:b2:11:42:44:96:65:37:56:06:f1:42:51:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:9a:8d:d8:e8:c8:10:dc:c6:33:dc:6e:64:
ba:41:a1:57:68:27:10:dd:1b:e9:bc:c2:77:e2:c6:
1d:01:9f:4c:39:d2:f9:f0:7e:a9:2d:05:07:cf:1e:
4e:46:21:c7:82:07:24:df:8a:54:df:e0:34:64:53:
54:19:f6:e5:f6:a0:27:47:ae:c0:50:90:dc:ee:42:
e5:f7:bc:b0:86:b7:a0:bc:d3:89:3c:20:e2:78:b2:
d9:e9:10:d0:5b:2e:34:9b:7a:2b:1e:fb:1b:45:07:
b1:3c:24:62:14:df:b2:81:a8:2b:ab:20:0e:01:68:
c6:0f:9d:0c:7c:48:52:08:d5:95:45:04:22:40:f7:
cf:50:20:76:17:fb:9c:10:a4:9e:53:c6:dc:77:8e:
50:d6:90:09:cd:d3:54:29:b9:92:e8:2d:93:4f:00:
2e:51:15:22:d2:18:4a:2d:6e:f9:f0:f1:6c:7b:1e:
66:49:da:db:98:79:84:5b:88:aa:b0:20:78:cc:fb:
3f:1e:5a:76:66:77:30:17:88:98:ee:18:70:a9:39:
ae:b8:c2:00:4f:e9:4d:35:b7:27:58:54:89:8a:ee:
c4:84:47:e3:6d:6f:51:9f:56:85:b0:5e:02:9f:56:
08:93:c6:d1:a2:d1:87:35:5e:5c:43:12:aa:87:ff:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.218.0-193.57.222.255
193.57.232.0-193.57.247.255
193.57.250.0-193.57.253.255
IPv6:
2a0a:cb00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198340
Signature Algorithm: sha256WithRSAEncryption
48:90:ea:3c:b7:65:d6:b1:5a:99:60:07:48:d9:fb:30:b9:09:
11:cd:20:21:b3:df:b5:4a:fd:fa:3f:79:53:19:1b:6a:52:5a:
3f:a5:60:d2:3c:db:3d:ac:51:53:7b:6a:5a:4a:ed:97:5f:68:
34:4a:b1:73:1b:26:37:e6:77:17:b8:75:2e:0b:00:3b:c7:16:
3d:6f:51:9b:e0:0d:d5:93:e2:93:96:73:f0:a0:71:07:e8:5c:
56:43:d0:f8:de:87:5c:1e:a2:10:88:08:29:17:05:b2:7b:13:
11:b0:20:e2:0b:e6:cd:e5:09:6c:28:a6:f8:ad:db:e9:80:86:
16:3a:e5:65:d6:e7:17:f8:8c:83:ed:83:91:77:51:6d:cb:9c:
28:68:e1:a3:1c:c4:33:84:4a:b7:3b:21:b1:90:50:52:4c:62:
8b:dd:eb:f5:a1:60:d0:5f:63:da:41:fa:7a:45:31:19:94:ee:
a9:ab:76:fa:2c:04:3f:db:a2:c6:26:ad:d7:35:42:e2:4d:7e:
55:a8:d7:de:2f:8e:20:be:78:6b:51:b9:63:1e:23:69:37:74:
f6:20:3d:69:e0:71:95:79:79:70:e8:1b:d5:77:93:4f:dd:b8:
f8:f5:51:14:60:e4:fa:36:e6:dc:27:d7:c4:35:0b:5f:6b:c3:
87:5f:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:56 2024 by rpki-client on console-fra.rpki-client.org