Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
File: J5O96Uauk208rME2pfMjnt8kMfQ.cer (raw, json)
Hash identifier: kn6jxCbrBqyHrbxKjt3SaZvjDt7KYz8/CaAiM9g8mGM=
Subject key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F03F349C431575A7996CB2A2AA7B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 81.31.198.0/24
IP: 91.188.252.0/22
IP: 2a0b:8dc0::/29
IP: 2a0f:6840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:03:f3:49:c4:31:57:5a:79:96:cb:2a:2a:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:dd:ee:9c:6c:3c:d8:f5:1c:a3:f8:37:f3:
51:84:26:01:ec:90:03:b0:79:e3:75:8e:89:33:84:
15:0e:24:ac:5e:ac:5e:d5:4f:a9:35:23:ce:2d:f1:
55:d1:d0:51:c5:55:9f:b3:27:c7:82:d3:07:ef:52:
4a:6c:1c:46:e1:3b:5d:a3:d3:60:1a:02:51:bd:ff:
91:92:a8:1e:22:76:f8:40:c1:f5:41:eb:15:3f:5c:
0b:c0:01:e1:df:86:72:99:10:a0:99:5a:ba:f9:89:
53:0e:5d:ab:1b:df:fe:ae:24:29:a5:60:b6:46:20:
67:58:e3:53:bc:04:6c:d9:12:64:53:12:68:ca:76:
dc:a5:72:b4:78:1d:05:e9:9c:64:95:dc:c5:8c:16:
15:1c:fb:85:68:43:8a:56:f0:4a:d5:2e:15:bb:96:
c6:2f:c9:74:fd:d6:ea:ac:24:85:90:55:e1:d5:72:
fc:91:c5:52:f9:24:cc:88:98:37:3a:78:32:f4:d6:
b2:38:0b:cb:4c:e1:5d:9b:2d:2e:50:6f:5e:27:50:
07:34:c2:be:4a:32:53:3b:5d:dc:c8:98:15:1d:5b:
e6:14:6a:74:e8:93:a4:a8:84:ba:74:a0:34:2d:4b:
97:e8:89:e3:e9:35:a2:50:ae:e4:c5:75:58:6f:5f:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
91.188.252.0/22
IPv6:
2a0b:8dc0::/29
2a0f:6840::/29
Signature Algorithm: sha256WithRSAEncryption
4c:95:51:a1:48:78:1a:af:11:8f:0a:86:33:ac:fc:24:3a:fe:
68:c8:30:d6:00:55:2e:ed:4f:04:56:dc:69:c3:c1:c5:c3:0d:
41:c7:d0:2f:64:54:73:ae:cd:51:7c:fb:1d:b9:c0:a4:07:44:
8f:50:87:6c:74:fb:d8:86:25:e3:9e:7b:0e:83:27:d9:8c:20:
11:42:20:6e:f4:00:d4:70:92:52:34:35:51:e0:ac:e3:24:99:
d2:eb:65:b4:92:9b:22:ef:05:d4:80:a5:82:6b:bd:d4:98:32:
3d:6d:1f:29:0c:ef:f3:58:c0:c4:7d:db:47:47:65:02:98:e2:
15:fd:f0:45:7c:0e:3c:91:37:b1:17:22:42:b9:62:eb:91:d1:
59:3a:8c:f9:68:4c:86:d8:cb:41:45:13:da:d6:b8:4b:ae:f4:
d7:a7:c0:cc:1c:35:05:04:8a:fd:5a:c7:c1:6e:65:b6:b7:74:
db:10:80:c7:03:aa:cc:2f:f2:f3:f8:b8:55:d5:ac:3d:fb:03:
70:f3:fd:86:a7:ec:ae:07:af:40:1b:5e:cf:7e:91:36:cc:df:
c8:14:aa:16:fa:62:99:4f:46:2a:f6:30:c1:c9:03:16:75:0e:
32:68:c6:00:ab:3e:17:2b:6c:26:4e:2d:5d:f5:6a:50:3f:ce:
f2:03:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:51:28 2024 by rpki-client on console-fra.rpki-client.org