Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
File: J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer (raw, json)
Hash identifier: J+ceFrea6shXf3INjlv2NDFcz0G7F34W+0BhQZ19k+s=
Subject key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F3D2A879C27486786C7233E2DDC2465FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 May 2024 06:35:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57094
IP: 141.8.232.0/21
IP: 2a13:8cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:2a:87:9c:27:48:67:86:c7:23:3e:2d:dc:24:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 06:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:56:7d:76:f3:25:7d:bf:13:b8:5f:4d:2e:
7c:93:90:c2:0f:f5:6a:57:df:04:94:57:e2:3c:8e:
c6:4c:b9:58:bd:4d:39:a2:55:0b:c6:66:fb:1e:42:
c1:54:ac:d9:e9:bc:b3:26:b0:84:e5:d4:67:fa:23:
ca:72:c1:42:89:5d:1a:b4:61:db:b1:4b:99:ea:d0:
4c:23:1f:6a:2d:fd:30:1f:8f:36:32:0e:7d:a0:d9:
66:6c:f1:fa:19:e0:de:0e:72:07:1d:23:53:1d:15:
31:3e:8b:da:74:38:1e:cc:8d:c6:a2:79:5a:db:82:
22:ae:b0:3b:c8:03:e1:b5:4c:29:70:c4:81:6a:61:
da:cf:b2:ce:ba:d2:cf:f5:38:5e:1d:3a:ce:a3:d6:
7e:38:a8:99:b1:d3:0e:40:1f:c8:11:5b:89:a8:f1:
ca:0a:e0:00:68:72:bd:8b:36:06:4c:00:0d:9b:83:
ef:8a:f4:f6:fa:0a:cd:98:63:f8:24:22:d4:9c:b5:
6c:91:13:46:df:06:87:59:30:94:93:96:a9:48:e2:
2c:66:f9:9e:16:ab:5b:6d:74:20:4b:c6:54:6c:50:
93:56:8f:9b:8c:bd:d0:4c:67:7b:ba:a4:4d:9d:1b:
fe:57:b4:11:8d:e7:41:bf:c2:22:2c:1b:8b:30:8c:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.8.232.0/21
IPv6:
2a13:8cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57094
Signature Algorithm: sha256WithRSAEncryption
66:0a:e5:94:f4:3d:3a:55:43:d0:92:8d:df:85:08:43:40:e2:
19:f0:35:65:8d:6f:68:8b:3c:ec:6a:80:5f:08:0c:14:3d:77:
e0:71:d2:34:a6:92:b6:cc:7f:81:94:23:97:24:91:a0:d1:3c:
31:c6:11:12:8e:31:04:7a:a2:46:ef:04:31:85:b2:ac:48:d0:
10:d0:31:d5:cd:6f:74:bc:37:d3:0a:48:86:15:0d:55:25:95:
af:43:11:ee:fa:9b:ba:8d:ce:06:47:c8:31:42:c8:75:6a:bf:
7c:67:fd:10:ea:6d:5b:6f:b2:41:8a:dc:a3:7e:2d:f3:b2:be:
71:2f:17:1d:cc:ef:e9:68:5a:91:51:bb:3d:21:c1:64:e0:2d:
4f:ee:51:df:f5:f2:61:43:70:10:51:11:64:10:47:5f:f0:f2:
03:1b:d6:f1:a8:a1:b3:73:2d:a7:ca:25:c3:aa:2d:2d:aa:eb:
f2:fa:80:96:d8:ef:e9:f0:fd:41:1b:c9:9e:ba:9f:57:49:2e:
0f:41:c5:27:7b:db:6c:5c:b6:2e:72:04:4c:93:fa:6b:f9:ae:
3a:a3:2f:1a:48:8d:8e:de:9b:02:cb:7c:f1:8a:57:03:1e:da:
07:ff:63:3c:13:ed:00:0b:17:68:68:b8:e8:df:19:7c:30:f9:
56:3e:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:36 2024 by rpki-client on console-ams.rpki-client.org