Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
File: J5O96Uauk208rME2pfMjnt8kMfQ.cer (raw, json)
Hash identifier: kzTfZktBo3wC6QNkLAzHUtUGqD8umC4h3bafHvnItOw=
Subject key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428243A297DBE0765E6296E963D101F18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 81.31.198.0/24
IP: 91.188.252.0/22
IP: 2a0b:8dc0::/29
IP: 2a0f:6840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jan 2025 05:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:3a:29:7d:be:07:65:e6:29:6e:96:3d:10:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:dd:ee:9c:6c:3c:d8:f5:1c:a3:f8:37:f3:
51:84:26:01:ec:90:03:b0:79:e3:75:8e:89:33:84:
15:0e:24:ac:5e:ac:5e:d5:4f:a9:35:23:ce:2d:f1:
55:d1:d0:51:c5:55:9f:b3:27:c7:82:d3:07:ef:52:
4a:6c:1c:46:e1:3b:5d:a3:d3:60:1a:02:51:bd:ff:
91:92:a8:1e:22:76:f8:40:c1:f5:41:eb:15:3f:5c:
0b:c0:01:e1:df:86:72:99:10:a0:99:5a:ba:f9:89:
53:0e:5d:ab:1b:df:fe:ae:24:29:a5:60:b6:46:20:
67:58:e3:53:bc:04:6c:d9:12:64:53:12:68:ca:76:
dc:a5:72:b4:78:1d:05:e9:9c:64:95:dc:c5:8c:16:
15:1c:fb:85:68:43:8a:56:f0:4a:d5:2e:15:bb:96:
c6:2f:c9:74:fd:d6:ea:ac:24:85:90:55:e1:d5:72:
fc:91:c5:52:f9:24:cc:88:98:37:3a:78:32:f4:d6:
b2:38:0b:cb:4c:e1:5d:9b:2d:2e:50:6f:5e:27:50:
07:34:c2:be:4a:32:53:3b:5d:dc:c8:98:15:1d:5b:
e6:14:6a:74:e8:93:a4:a8:84:ba:74:a0:34:2d:4b:
97:e8:89:e3:e9:35:a2:50:ae:e4:c5:75:58:6f:5f:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
91.188.252.0/22
IPv6:
2a0b:8dc0::/29
2a0f:6840::/29
Signature Algorithm: sha256WithRSAEncryption
2f:5d:c1:3b:ea:73:b9:9d:bb:17:97:3e:24:fb:e8:ce:55:bd:
7f:a4:df:24:e6:ae:ba:5a:05:75:be:af:e4:bb:bb:08:10:29:
a1:25:82:f5:df:a7:3d:f7:f1:ff:1e:93:bb:de:4f:79:6b:92:
d9:19:fa:ea:b1:1d:76:b0:df:c0:d8:35:17:87:be:0f:72:ce:
e6:23:a7:8d:25:0a:53:b0:49:45:73:78:8c:5d:f0:8d:ba:9a:
6e:de:8d:32:0a:5d:16:fd:92:1f:bf:60:b2:38:a2:32:d7:61:
37:dd:22:a7:56:b5:d7:f9:52:67:8d:81:28:a8:e1:c6:a6:d8:
d9:e6:c2:ba:8a:1d:41:1c:be:62:6d:3a:3b:24:f9:e2:58:2f:
0f:58:be:5e:49:b3:bd:74:b2:90:85:06:a0:f6:d6:91:4f:a5:
07:f2:ea:54:be:a9:83:25:90:13:b6:07:71:96:ce:c7:21:32:
88:c0:29:1c:40:6a:d8:f8:e8:35:3b:66:2a:ad:2d:df:21:19:
6e:b4:2d:6e:ed:40:18:e9:1a:15:c8:c7:bd:44:e3:65:f7:ff:
7f:54:9e:0c:08:b8:2c:0e:9d:c6:d1:fd:aa:07:a5:61:fc:9f:
e8:9e:47:56:73:4c:4e:0b:8b:f5:9d:c0:29:c3:25:d3:f5:a3:
88:59:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 19 10:27:47 2025 by rpki-client on console-ams.rpki-client.org