Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer (raw, json)
Hash identifier: yYUpKa3wWNvXmVM43kqUn9S9iEY3mjlK7ffKf1r/ULE=
Subject key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4936663B48A86374CFCBA6192BA29E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201455
IP: 185.170.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:66:63:b4:8a:86:37:4c:fc:ba:61:92:ba:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d028470604336fdb9308e51ba53e951ae2e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:7f:05:74:d6:43:f7:f6:40:00:f3:c8:17:
e9:17:26:e7:89:25:9f:93:e4:04:f0:f4:7f:87:43:
00:54:dc:6e:68:14:10:a5:31:ef:64:2a:d7:2c:3b:
32:b2:d0:e9:d8:43:ce:b8:9a:f0:94:53:05:28:5d:
85:b4:a5:a3:35:09:56:94:0a:10:8a:59:84:57:36:
e4:70:38:d9:81:39:cd:6b:c2:f6:83:79:3c:d3:21:
47:80:47:c8:32:1a:a2:ae:1b:9c:7c:9d:6d:a6:8f:
a5:5d:3c:0c:93:1b:4f:9d:64:a9:b9:38:6c:46:73:
62:c7:0b:8d:81:7f:11:ba:7d:27:6e:51:7b:4f:d2:
04:16:3e:05:01:15:8e:e1:f9:21:f9:d2:84:e6:ba:
06:84:b4:c3:78:11:21:d8:f5:ef:c4:40:7d:26:92:
01:29:41:c1:cd:f1:f0:f1:96:1f:e5:bb:67:e8:97:
71:85:6d:b8:fe:28:e0:8c:ca:36:15:90:a8:d1:70:
e4:c9:25:b2:61:12:a2:96:bf:c1:ab:e9:cf:e8:8f:
ff:c3:22:33:6a:2d:87:f3:d6:c1:1e:7f:f1:25:b0:
d4:cf:68:a4:c0:29:51:c2:1f:30:49:0a:99:a0:9e:
89:59:c3:58:72:fc:ab:70:37:2f:27:35:0a:55:88:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201455
Signature Algorithm: sha256WithRSAEncryption
26:3f:78:70:47:cd:d9:5a:a1:e1:5f:7f:70:33:14:ea:9a:93:
0c:82:5a:49:cf:6c:25:32:d2:3b:cb:b9:8c:00:44:74:48:ff:
cf:c0:e0:ce:2d:7d:43:b5:3c:be:b5:ac:3d:44:ca:5f:fd:82:
70:85:23:66:25:20:4e:eb:36:58:13:96:5a:c1:4d:bd:c1:a7:
dc:57:e5:a9:8d:b3:9b:d5:63:f5:d8:58:64:d5:7f:fa:e1:db:
c2:17:8c:ca:b4:42:a7:03:d7:42:48:1b:c2:78:3f:9c:57:77:
41:e1:87:92:7e:27:03:a8:46:b6:72:8d:1c:e7:96:ef:d7:ba:
c8:ce:e7:94:85:e0:29:c7:83:d2:c9:2f:10:84:33:6d:6d:ac:
a1:0b:04:17:02:64:e1:dd:db:49:81:77:cb:98:45:61:af:ad:
be:b6:05:81:d4:93:82:7b:62:5e:84:f0:28:8c:9d:f8:d3:95:
a0:9a:a9:2d:9f:ea:10:95:b3:4e:fd:14:44:be:43:84:9d:e7:
c0:9f:f5:2d:e8:34:bf:37:2c:6f:08:79:a4:c2:69:63:d7:5f:
98:7f:a0:75:55:22:31:a4:84:69:70:58:32:d5:ca:98:8e:bf:
c1:86:f4:a3:5c:e8:ca:36:53:aa:c5:17:a6:d4:5c:d7:9c:65:
0e:8e:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:51:33 2024 by rpki-client on console-fra.rpki-client.org