Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.cer (raw, json)
Hash identifier: Tb6G/7xmrS62IgyQb9bqTQBGYC4RacAiTiOLtN2ObLM=
Subject key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1D3C0E2E8F016F9F4BC8C02194EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 87.252.112.0/21
IP: 185.9.92.0/22
IP: 185.178.188.0/22
IP: 188.191.60.0/22
IP: 195.189.12.0/22
IP: 2a03:4640::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1d:3c:0e:2e:8f:01:6f:9f:4b:c8:c0:21:94:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:c8:47:b7:38:24:ed:e7:0a:a5:02:ea:98:
4e:fd:58:86:28:25:1b:e0:5c:a1:40:fd:3c:21:a6:
c5:6a:27:b4:4a:f7:98:10:e5:52:3e:2d:a3:90:a7:
49:bb:cb:dc:f0:2f:18:57:00:d9:2f:ba:ad:ff:55:
3d:f8:16:cb:e1:c1:c0:12:84:b7:a4:b9:96:4d:e5:
87:97:ff:07:94:6f:6b:ec:36:db:24:18:24:90:3f:
e9:ec:9c:af:33:9c:25:09:79:17:91:c5:88:47:68:
95:2f:02:c8:d8:19:b1:85:b3:c9:e4:42:c0:b6:39:
f6:48:f9:dc:19:8f:c5:dd:20:b7:45:e9:db:42:31:
23:78:a7:25:7f:41:ac:00:c5:be:f2:7d:52:21:97:
63:47:88:63:3f:ff:b7:5d:87:4d:b2:ee:42:06:dc:
65:39:9a:dd:56:94:5a:e7:2b:fc:7b:81:90:d6:d5:
5a:d2:4a:bf:2a:b8:77:dc:b6:b3:b4:2a:55:ab:3e:
c8:4d:3f:30:56:b1:4a:27:07:60:c0:85:41:81:d6:
99:7d:05:fb:19:95:c2:35:48:13:8e:d9:77:45:17:
38:9d:74:bd:81:d7:c5:d8:7c:da:31:de:0d:01:e9:
a4:74:38:12:9d:ef:fc:4d:79:98:f1:1a:b5:08:b2:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.112.0/21
185.9.92.0/22
185.178.188.0/22
188.191.60.0/22
195.189.12.0/22
IPv6:
2a03:4640::/32
Signature Algorithm: sha256WithRSAEncryption
8d:8c:f0:3d:59:13:07:7c:a0:4a:cc:e0:a9:30:1d:bc:6a:13:
06:c8:0a:69:5c:93:14:ce:39:ae:88:55:cd:25:e7:dd:77:07:
f1:37:fb:73:b2:89:51:27:56:9f:3d:29:a8:5b:44:82:61:94:
12:c5:e4:62:76:18:6f:74:3b:19:63:7e:1f:9c:0f:e7:1e:b2:
4c:71:29:81:48:fa:3c:5f:24:45:b2:b3:0b:6c:04:c5:d0:be:
f6:20:95:36:39:bf:a3:35:ec:b6:89:ec:2c:f5:42:43:94:cb:
89:a1:b8:a8:ad:a3:bf:8f:c2:85:a4:28:c9:2a:7f:e6:11:04:
2b:5b:e6:29:e6:e4:cf:1b:d6:99:3a:27:27:c8:77:9b:14:72:
73:25:65:6e:94:63:ec:a5:f4:77:b8:02:14:6f:5b:58:85:ea:
f0:2c:cc:f9:29:a4:37:89:e2:b2:4d:88:08:a3:dc:87:9c:ba:
dd:81:6b:ea:19:0f:77:74:17:ec:1f:27:fa:4b:19:7c:d9:9c:
57:c3:0f:9e:d0:64:e1:ff:97:8a:08:7e:5b:65:45:8f:cb:1f:
15:49:1b:98:d6:d0:ad:d5:ac:a9:3b:7d:70:63:72:cf:6c:be:
36:ad:de:ea:d6:2e:3b:b5:4e:de:b5:64:94:98:6f:fa:ed:b8:
1a:8d:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:12 2024 by rpki-client on console-fra.rpki-client.org