Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer (raw, json)
Hash identifier: jxCDdONy5JeGtwIdQpm9DSFhmGv2b0GiGaYhUVMOWxA=
Subject key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348CBDE7941C6EC79A37DA1A954658A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13303
IP: 185.62.112.0/22
IP: 2a04:d080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cb:de:79:41:c6:ec:79:a3:7d:a1:a9:54:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:9c:1f:01:d3:10:1b:e7:35:56:ae:21:42:
52:bb:3b:7d:2b:e9:57:04:d7:e6:17:7d:93:b2:e8:
8b:1b:a4:f9:76:fd:89:52:fd:a1:7a:29:5f:db:a9:
0f:9a:bb:1f:45:73:9f:cc:33:e2:53:f8:2a:cd:cd:
1d:3d:4a:21:00:70:cb:b2:be:e5:3b:ac:49:5a:73:
27:d8:34:da:df:34:c8:db:ab:38:2f:e9:ff:7f:be:
4e:36:22:c9:8d:21:67:9b:6b:94:ff:58:16:a2:4d:
d7:c7:f9:73:d7:e6:86:05:1b:31:b6:de:d6:01:92:
a6:52:c8:18:da:b4:9f:b2:2f:e2:0c:76:05:3d:ef:
88:eb:98:ef:ed:b5:31:6d:3a:48:43:4b:41:4b:9b:
15:a7:98:c8:c9:35:8d:bc:69:29:22:e4:3d:76:32:
60:e7:74:2c:27:45:49:a5:1c:a7:05:7c:df:ac:7a:
bb:cb:46:5a:b0:fe:59:64:10:2f:00:10:92:92:9a:
0f:2f:a9:c7:31:4c:e8:af:44:47:7f:ca:f1:09:74:
5b:cb:33:57:38:93:04:54:b9:9f:ce:27:ee:54:e2:
99:0a:f2:37:0e:ce:71:03:55:ed:ef:03:62:9e:c6:
fc:88:a8:aa:8d:a2:b7:c3:c3:b3:a7:74:12:67:81:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.112.0/22
IPv6:
2a04:d080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13303
Signature Algorithm: sha256WithRSAEncryption
6e:1b:9d:15:0b:b5:1e:59:3a:51:65:71:df:31:de:d7:75:d9:
45:ea:ab:25:e6:7e:e4:a9:e4:0b:7a:24:0f:8d:a9:c1:75:d4:
e7:53:7b:df:cf:63:20:64:d3:77:fa:ed:e8:cd:a8:8e:f2:91:
16:3f:70:14:2f:a7:05:12:38:3f:ba:1b:95:ce:46:26:12:34:
63:3f:25:03:3f:a0:9f:31:21:3f:77:9a:fa:e3:df:a1:8c:13:
4c:81:b3:cd:9b:f4:83:c8:73:df:69:a5:2b:e7:67:a8:e7:c9:
a3:46:13:7f:b9:c6:89:f9:b3:42:cc:97:38:7d:75:8c:de:3e:
f7:f0:a0:6c:4a:13:fa:04:af:b0:06:96:6b:14:14:b2:db:e8:
d7:d8:b4:5b:41:64:35:68:94:9c:21:e5:f0:54:20:50:55:00:
49:2b:f2:be:a0:26:8f:cb:ca:49:52:27:77:0a:2e:47:1c:99:
3a:8e:88:f8:e7:46:45:97:d9:7d:5b:cd:04:ce:2b:c8:a2:1b:
d3:4c:b9:a6:de:4b:41:94:74:35:f2:fb:92:45:2c:c9:62:a6:
11:3f:9e:db:a0:2a:d2:26:ef:93:3a:7e:0a:df:a2:ec:b8:e7:
c6:10:a9:e8:4b:7a:6f:1b:2e:f1:6a:97:d9:a3:f5:d0:b8:c7:
b6:eb:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:03:29 2024 by rpki-client on console-fra.rpki-client.org