Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer (raw, json)
Hash identifier: F4OqUscvFV1U5sBsuKEjwF1I05o1X4u2wGjaXlD4Z6k=
Subject key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C14536E1F480EA031F3D0CC3E629B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209088
IP: 5.181.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:14:53:6e:1f:48:0e:a0:31:f3:d0:cc:3e:62:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:44:a3:7a:42:52:19:57:90:56:61:e8:00:
67:96:1d:bc:65:13:82:ef:70:b6:bd:07:0f:eb:57:
a6:ba:02:18:f3:57:ae:e5:06:b6:e8:ef:17:b0:90:
1b:ab:c6:d9:a7:9d:40:54:dc:e8:b0:eb:96:16:28:
a7:70:ca:79:ef:0e:9b:42:3b:b2:f4:47:fb:3e:02:
9c:0d:d2:61:7a:e8:54:9f:84:11:8c:7d:b5:14:5f:
e9:b4:74:f6:07:1d:b1:fe:82:61:70:d4:4e:28:87:
75:5a:14:7f:d5:6b:b5:5b:43:40:cb:8c:bc:5f:7c:
ab:a4:af:92:89:65:03:e4:61:e4:54:56:88:50:48:
1c:dc:fc:0e:40:d5:b5:fd:d6:a6:6d:e2:5e:93:2d:
ff:8b:19:18:00:ae:db:b4:01:84:b5:ba:25:8d:c3:
b5:be:3c:8a:41:f6:05:4d:45:b9:9b:ae:37:5c:a0:
27:65:a8:d0:50:72:be:33:85:aa:7d:be:85:d7:9f:
25:ec:83:a5:be:99:13:39:29:fe:26:d7:8c:aa:00:
8d:48:09:68:ef:5b:82:ff:c3:3a:30:9a:12:12:a0:
dd:03:6a:4d:ed:d7:1e:30:1e:45:b5:f1:41:1e:ba:
b4:07:92:d3:be:64:d2:5c:f8:49:92:07:8c:f8:1c:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209088
Signature Algorithm: sha256WithRSAEncryption
31:53:c9:cd:92:bf:35:58:a6:14:e0:6b:cc:9e:79:75:18:99:
bd:f6:7e:5e:19:53:a1:35:d7:0c:f3:16:11:03:f3:55:9a:d2:
87:de:41:37:d3:fb:0d:9b:c8:8c:40:c1:8b:fe:81:8a:fc:8d:
86:a3:9e:c4:83:17:d4:7c:80:02:d3:5c:16:da:94:64:bb:66:
a4:45:5a:ca:a4:39:00:c4:e7:2c:7b:b1:80:43:31:0f:f3:ec:
f1:f1:9c:64:ec:5d:cc:7c:51:3d:dd:1b:d3:0e:b8:0f:16:14:
4d:4e:ae:e7:60:39:e9:9d:e6:83:c8:e5:3a:49:54:ce:a5:e5:
33:dd:dc:5f:f4:c7:b3:74:b3:df:75:8a:51:6d:6a:28:d5:dd:
21:de:ab:54:36:d0:4a:2a:5a:1d:84:57:35:2a:94:23:bd:c4:
29:d4:8e:c3:e6:3a:ff:71:3d:a1:06:14:22:88:8a:46:4f:92:
43:f9:0b:da:c0:cc:1f:55:b9:3f:d7:9d:d9:d6:68:84:57:53:
e8:4a:91:da:4a:74:83:dd:4d:1e:0c:9e:00:26:ab:31:20:9e:
ee:e7:9d:3e:94:28:98:62:73:48:72:86:f4:8f:bb:aa:03:a3:
8b:cf:7a:e4:98:c6:9a:de:af:31:ad:56:17:ca:3f:04:25:e2:
68:18:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:39:58 2024 by rpki-client on console-ams.rpki-client.org