Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
File: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer (raw, json)
Hash identifier: VPBx9tAP8ODaICT6LTLkne3g+yRPZwyCtGYitSPr86M=
Subject key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D308E78891B39C111261E884420378E37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jan 2024 09:44:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 95.128.196.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:8e:78:89:1b:39:c1:11:26:1e:88:44:20:37:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 09:44:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:ca:78:fa:ae:36:b3:38:31:33:b5:88:c7:
66:ba:35:f2:f2:fb:fc:e2:86:20:35:92:47:e7:ba:
43:da:53:40:66:ca:d2:95:72:1b:58:c5:4b:ef:ce:
46:2d:dc:3d:10:08:58:46:3d:e3:06:a2:56:ec:a5:
7d:ec:9f:aa:fe:5f:e6:35:0c:4f:e0:50:08:a9:25:
e9:3b:f6:a2:69:91:63:fd:ca:8c:b9:eb:be:20:27:
13:68:a8:6f:af:fd:d2:3d:f7:48:46:39:d6:1a:b3:
7b:62:61:10:44:95:10:e7:cc:86:4c:fc:ac:0c:05:
7f:98:1e:c5:99:b5:09:05:b5:21:e9:1a:b9:1d:c1:
35:98:68:8a:2c:e3:27:fc:52:bc:1c:59:0b:98:b3:
14:dc:8f:56:c2:97:f3:1e:22:3f:44:c0:1c:41:fc:
fb:51:0f:1e:61:cf:bc:48:4f:00:26:aa:6a:55:10:
94:5b:df:48:29:e9:c2:27:4c:f7:05:5e:8f:1b:2b:
e6:32:9f:cb:78:6a:c4:23:d2:e0:da:4d:1f:37:76:
6e:57:56:0e:84:af:41:ed:e1:7d:73:8a:36:f6:96:
9f:b3:d3:45:4b:f8:2c:67:3f:fc:a8:23:ff:05:02:
4f:26:ba:69:9f:a4:09:84:03:79:de:d4:4f:db:9c:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.196.0/24
Signature Algorithm: sha256WithRSAEncryption
59:28:9b:84:f8:a8:a8:d0:56:2a:b6:d4:08:b8:41:d1:0a:72:
8f:bd:ea:8c:87:7a:90:ec:ae:96:dd:42:bd:f1:45:fc:2e:ab:
56:a1:37:1d:bb:2d:23:52:6a:cf:49:20:ff:74:d9:fa:15:ff:
8c:70:cb:38:70:74:2f:06:09:1a:48:33:70:f8:84:0e:25:70:
ad:19:96:65:04:b5:74:21:79:bc:f5:d0:08:81:17:96:bf:48:
a5:95:a1:b3:6b:7b:e7:11:6d:88:18:8a:75:26:fd:35:6d:b1:
bf:c2:ce:67:1a:c0:a8:93:79:0c:48:fe:40:cf:7a:f8:16:9b:
c2:53:c2:30:05:1b:05:bd:16:6f:1b:4e:3f:02:e8:2c:1d:87:
8a:20:11:5e:46:89:bd:3f:85:c4:c8:5b:81:a8:cb:2c:1d:1c:
33:c9:93:a2:67:65:d9:87:63:2a:df:0f:b1:7e:4d:1e:45:e1:
d7:d8:5f:76:5f:07:b5:e4:45:44:3f:12:3e:26:03:fb:43:3a:
25:87:9b:b9:fe:6b:5b:8e:cb:cc:f2:02:40:71:8e:98:0b:90:
c3:8a:83:4c:e8:ce:ee:d6:dc:7a:c9:b3:84:46:9a:bc:47:43:
af:5b:b2:ed:15:aa:b1:bc:f7:89:a7:66:01:1a:05:db:91:79:
3e:74:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:27:40 2024 by rpki-client on console-ams.rpki-client.org