Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer (raw, json)
Hash identifier: mHIP5UjcCJ6SbTy9eX3cat2Os/1hBOUBH31JIxIeBbM=
Subject key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F048DDBD0A8E3E8CE269953D16603FFC8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Apr 2024 06:45:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.147.232.0/22
IP: 194.5.90.0/23
IP: 194.5.126.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:8d:db:d0:a8:e3:e8:ce:26:99:53:d1:66:03:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 06:45:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:0d:a7:e0:aa:86:be:e9:6e:de:ff:24:20:
c7:7d:d7:c4:b7:1b:a3:fb:3a:f5:1d:be:52:63:4f:
85:02:65:98:01:af:b1:5c:7b:74:5a:77:88:76:7d:
3a:0f:97:13:21:c0:59:8a:a1:73:23:fe:a3:8f:80:
3f:0c:13:a5:35:c7:39:7a:1b:18:80:8a:7a:0e:5f:
57:88:af:90:67:21:44:33:ee:4f:d5:54:56:b6:e3:
c8:02:3c:99:e2:1e:a7:97:26:97:fc:db:c6:32:88:
ad:43:4a:d8:e5:56:62:b6:a1:26:cb:0b:e4:00:c6:
e1:b7:24:7f:83:ad:5c:27:68:d1:ac:4c:d6:6f:10:
9e:6d:64:6c:70:37:dd:68:33:de:4a:07:0d:8d:7e:
ae:b1:5f:95:42:4a:48:d4:d0:29:f8:9f:f0:d9:69:
e8:50:7a:01:ec:12:63:a0:14:f6:e1:c9:60:b9:55:
9b:7d:cd:0c:4e:cc:2b:a7:59:50:12:3d:8e:e4:3d:
78:62:ed:98:10:01:65:0f:a0:74:0d:6f:83:60:b8:
4e:9c:ce:8d:bc:52:9e:8e:05:80:cb:7c:f7:5e:a8:
d9:58:22:58:47:57:db:54:46:69:4b:5a:5f:fb:1e:
57:1a:41:c4:98:2c:ab:c4:f9:f9:3f:b9:74:f1:5f:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.232.0/22
194.5.90.0/23
194.5.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:6e:3d:0a:34:c2:76:d8:bf:97:d9:2d:da:d9:24:db:f3:ee:
37:a9:84:9d:58:21:56:45:49:1f:5e:c8:94:bd:88:a5:78:bc:
db:ee:f6:c4:59:d9:2f:94:7f:a7:4d:a8:0d:92:31:e9:11:8b:
6e:10:c6:f5:be:b1:88:fd:0d:ca:61:3b:bb:de:a9:7b:34:ae:
47:01:6d:81:74:43:f1:f7:0c:f0:75:9c:b6:a1:a8:a9:ce:03:
01:9d:06:f1:6c:cc:64:f8:4c:47:08:ac:3a:26:5e:36:3b:5a:
d2:01:4b:8e:9e:4e:18:eb:f2:8c:a2:7f:e4:2f:d0:75:8e:4b:
3a:ac:15:80:21:ce:09:80:83:a7:34:04:aa:49:35:f7:db:4a:
57:3a:d8:52:20:db:f4:a8:4c:ae:58:4c:44:68:33:86:87:05:
6e:d2:61:9a:eb:35:84:7a:58:17:fc:5a:ee:53:93:f9:aa:48:
78:d0:a4:2d:26:40:45:b9:04:07:c4:21:92:a3:94:2e:bd:04:
b9:30:55:9e:12:7a:1c:e0:9d:35:ed:73:38:f5:4d:44:b8:49:
09:97:3b:af:58:47:2d:48:0e:82:4e:6b:18:4d:7d:a8:a4:c9:
ce:d4:09:9a:cb:51:a3:ff:f1:1f:e8:ee:62:cf:5a:fc:2e:1e:
a5:6f:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:53:50 2024 by rpki-client on console-fra.rpki-client.org