Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
File: J5YqM_0jSHgawSOhJyKghu6Pun0.cer (raw, json)
Hash identifier: pdB6pohdpq6g7egV33Wvfr8+3mszU0qFnuCQXhP/ELA=
Subject key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DE8AF077183F4C8D12D0DF4E88BA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58081
IP: 37.75.240.0 -- 37.75.242.255
IP: 2a03:49c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e8:af:07:71:83:f4:c8:d1:2d:0d:f4:e8:8b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:d4:b8:eb:b0:fb:b0:d3:a6:8b:7d:03:75:
02:c6:c3:a3:2f:8e:49:9c:36:20:c1:97:5a:5b:49:
78:a0:9e:88:f3:0e:76:fa:0b:03:99:d1:ab:82:46:
e6:b0:e3:64:9b:3f:74:8b:2c:6d:42:15:6e:4e:0d:
18:af:2f:43:6f:79:fb:75:85:fd:90:99:f9:90:f8:
2e:2e:b2:7a:e4:74:df:4f:10:26:fe:74:8b:51:5e:
d3:07:c6:41:86:c3:fd:6a:5b:a7:d0:82:84:7c:34:
21:ef:39:f4:31:e0:a1:85:d3:1f:aa:d4:e7:56:e6:
b2:48:3a:fe:bb:f8:e6:3d:20:71:53:61:30:44:71:
b2:99:a9:16:6d:22:bb:91:65:a3:12:df:72:65:b7:
f5:3a:77:79:34:f0:d2:e3:a9:41:0f:2d:c8:04:0c:
52:ae:2b:67:a1:cc:1d:e5:f4:a7:49:c9:bd:8a:35:
ac:29:a9:71:ab:3e:4c:7b:f1:d7:a3:15:67:db:fd:
38:41:d0:14:c5:c0:29:8d:65:2d:85:7b:f5:20:63:
bb:dd:ee:61:d3:b6:37:52:64:5e:e5:61:e1:bd:85:
94:e0:aa:05:79:84:24:5f:d1:58:d7:02:85:9e:1e:
97:dc:ce:8c:06:6a:c4:58:e3:c8:fd:1b:15:2c:c9:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.240.0-37.75.242.255
IPv6:
2a03:49c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58081
Signature Algorithm: sha256WithRSAEncryption
84:db:74:98:69:90:7c:ff:7f:b3:23:c8:68:aa:b4:9d:aa:4a:
77:5a:20:06:c6:e9:5d:e2:aa:6c:86:8a:ef:b4:94:51:a0:6d:
6b:92:09:4d:5a:8c:29:7a:70:17:f9:93:1f:6a:99:05:9e:b0:
7d:b0:a5:3e:96:b8:df:cd:42:86:11:92:0d:f8:82:f8:59:03:
1c:2e:42:bc:c8:10:f9:74:fa:cf:cb:c0:cc:df:7e:19:f8:53:
22:ef:f6:7e:15:6f:67:17:29:18:7f:0b:1a:a8:db:a7:75:7f:
31:2d:e0:e8:0e:8b:4a:e4:8a:da:ce:a8:13:70:05:df:10:22:
30:a5:db:64:5c:5d:e7:22:9d:c1:02:f0:3c:2c:8e:d1:01:e9:
79:9c:7c:7f:bb:36:0a:a2:47:8c:24:25:94:04:48:84:e0:f6:
97:8e:93:32:96:7e:80:9e:4f:40:50:0d:c0:5b:59:cb:2a:5b:
96:d4:00:61:a4:d2:eb:e7:14:93:74:f2:76:c2:36:b6:9f:5d:
80:d7:6f:87:54:1d:fb:a1:5e:54:9c:39:53:60:c6:76:ef:f8:
54:10:00:4a:25:4a:72:0d:f5:27:46:08:8b:8d:5d:f3:0b:a5:
90:f9:48:3d:58:d5:74:59:ef:a1:d5:85:60:4b:1e:fb:48:42:
ba:ce:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:17 2024 by rpki-client on console-ams.rpki-client.org