Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
File: J0hJVnNlSeqzsG4jqricpZk6gHY.cer (raw, json)
Hash identifier: NrJYGQg4HOO/7R7gTmdmB8LvAdoyxVpPhlW0aenu3xo=
Subject key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6FDF4886DBBCC62DDB77337A77D78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.84.100.0/22
IP: 2a10:3b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fd:f4:88:6d:bb:cc:62:dd:b7:73:37:a7:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27484956736549eab3b06e23aab89ca5993a8076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:64:2a:2d:e1:26:50:a2:dd:5f:7e:be:29:
78:66:19:c6:03:6f:6e:a8:75:f2:c5:4f:45:a6:c7:
d5:9c:8e:f0:22:7e:80:1e:f2:ac:a9:1c:7a:aa:88:
60:2d:86:09:9e:e9:ae:a6:c7:cc:7c:0e:c9:37:c7:
7a:cf:88:04:ea:d4:b6:11:36:84:ad:3e:5e:a7:a0:
16:5b:2a:2a:df:b3:35:a3:88:7e:2b:5b:52:e0:60:
cb:76:c3:c1:54:db:30:90:f1:06:88:4d:27:bf:3a:
2a:cc:10:2e:d8:62:5d:04:b8:08:ac:70:33:69:22:
d7:0d:c0:bd:ba:c5:ec:5d:db:58:6d:85:f4:ed:05:
44:22:0a:ff:bd:09:89:23:d0:cd:ea:ff:f6:00:02:
da:39:f3:d2:46:db:98:48:94:fc:1d:08:ff:1d:b2:
76:e5:90:76:70:81:32:62:7d:d9:77:18:64:98:70:
91:82:93:ee:e7:4e:a9:71:fa:92:40:18:79:05:af:
7c:c5:51:af:47:1e:6f:64:aa:83:e2:94:95:7b:86:
6b:8a:58:af:aa:b2:52:10:43:00:2e:23:af:68:f2:
f5:81:c5:52:a7:1a:06:ad:8e:40:a7:9e:82:ac:41:
62:52:4e:e2:4f:c3:d1:0e:d0:03:14:39:ac:6e:22:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.100.0/22
IPv6:
2a10:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
7b:dd:d5:aa:c7:df:3e:d1:65:92:c4:97:1a:5c:b7:17:38:df:
9e:a5:17:de:18:8c:a2:5d:81:74:4d:79:3a:a6:fd:c7:e0:4c:
63:cd:1e:3b:85:ef:eb:e1:bf:30:6c:f0:64:2c:ad:52:3a:60:
ba:87:1d:02:6d:be:a6:72:51:ef:08:81:c8:96:42:e0:d6:26:
78:4f:ed:75:cd:00:88:a4:e8:ea:ca:a7:d2:e8:54:65:70:8d:
06:25:69:9c:6a:03:67:20:ec:d2:97:81:81:d4:75:2c:18:1b:
a5:ed:25:a7:53:e8:84:62:8f:60:e1:5d:01:1d:e9:cb:89:3c:
5c:d4:b6:1f:04:22:3a:02:6e:94:c5:67:18:3c:e0:61:2e:77:
9c:b4:d2:63:55:2b:7a:ee:fb:7f:c8:0c:5f:24:c4:03:be:e5:
42:da:c6:fa:74:ba:4c:2a:31:84:74:07:17:f1:61:8c:13:20:
d7:0b:04:6f:62:88:6c:9d:18:f0:67:b0:03:41:42:46:5f:09:
6e:91:09:58:4b:55:d1:11:27:ad:6b:0e:de:b9:d2:e4:40:1b:
81:f9:80:c3:ba:7c:2a:d6:19:da:89:0d:1b:63:32:22:56:ed:
6a:85:61:04:8e:fd:36:df:65:96:6b:29:ce:88:21:02:0b:c2:
6f:f0:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:38:56 2024 by rpki-client on console-ams.rpki-client.org