Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
File: JI9eJvHAj0SGyZEci2Cerotst00.cer (raw, json)
Hash identifier: ly203b6qlzVI67wu+gz9InqhdSYzY99Vn7E9ALPCJIg=
Subject key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B835C8597BD0E7B1C4B67CC5B8D067
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15985
IP: 193.188.192.0 -- 193.188.194.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:35:c8:59:7b:d0:e7:b1:c4:b6:7c:c5:b8:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:8c:98:10:4b:90:5c:b8:3f:01:f7:0a:92:
4f:e2:44:9d:53:b7:1d:ed:45:e5:9b:02:e3:8a:7e:
09:3a:79:5a:c9:05:01:92:22:c0:bb:35:54:0d:6e:
ad:7e:6c:f9:3d:e7:18:cf:2e:99:80:4e:87:b5:80:
91:a4:67:9d:c7:76:f0:bd:6c:8c:ea:83:37:02:ee:
56:40:40:e8:b5:56:bc:f5:dc:17:28:83:74:97:c9:
fd:43:3e:54:3b:bf:6b:ba:d2:11:9b:0b:17:70:e8:
37:13:2c:c1:d6:2e:69:82:08:39:60:0a:50:ec:b1:
d8:ba:b6:09:7d:7d:fc:15:0f:bc:94:d8:30:a6:fe:
ca:2d:15:72:06:7c:7c:24:b9:4c:11:50:13:8c:02:
90:81:c2:04:91:5f:12:04:93:eb:14:ed:d9:d8:6e:
d9:f9:3a:8c:0d:51:84:3a:8e:1a:00:29:91:e0:da:
aa:25:f9:fe:ec:77:46:26:bb:66:1d:9f:88:cf:ea:
f9:75:f2:62:93:5f:c7:97:c4:b4:75:71:6b:b0:6d:
4a:16:44:a6:74:57:9c:93:11:1e:28:47:96:b2:49:
31:37:29:e0:0c:ba:33:fe:3c:cd:47:77:e5:1c:7f:
f7:8d:a3:ba:08:c6:19:55:76:6b:2f:57:84:d6:02:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0-193.188.194.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15985
Signature Algorithm: sha256WithRSAEncryption
a0:af:ed:65:18:2c:0e:72:ac:71:38:59:4c:d6:bf:bd:24:c3:
ea:6f:1b:13:b9:63:cd:33:a5:62:90:08:54:75:07:98:ff:2e:
26:be:18:2e:19:06:ff:a3:8d:d5:a1:28:65:28:d4:13:97:1a:
dc:b5:af:85:8f:a6:34:49:50:46:3f:a6:81:21:9a:54:12:07:
c8:cd:84:68:e7:ee:47:7b:8e:43:fc:6f:e1:a3:e4:5b:55:fe:
51:84:b1:14:e0:18:b8:13:a8:3a:4f:47:7d:7b:a7:bb:ee:94:
9e:9f:91:cf:a4:8a:97:1d:50:77:0a:e9:8a:29:e0:f1:da:94:
96:36:5a:dd:08:24:66:0c:86:48:0d:36:38:3c:81:32:a3:cc:
87:e4:f7:ba:43:a3:ef:4a:6e:18:8d:e6:b0:b4:8a:c4:ad:19:
14:00:2c:78:f5:9d:42:af:fc:c2:c1:e5:2a:a0:2b:da:7d:fd:
63:b4:92:70:0b:14:e8:be:b0:a0:10:27:4f:e6:22:51:ce:ac:
9b:c7:1d:12:f5:69:b7:46:bd:9e:c8:9a:be:b3:fc:59:da:eb:
b2:1b:46:f3:b1:1a:08:d4:82:71:1d:1f:6e:a9:59:58:24:cd:
d6:28:b1:3b:bd:ac:4e:8c:35:a8:a4:fd:e6:ce:f3:f8:38:42:
f6:31:16:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 4 11:11:58 2024 by rpki-client on console-ams.rpki-client.org