Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.cer (raw, json)
Hash identifier: WhOkZPrwyuRagE1nstZ+49Ly2ALGBaNUKSERv/JTloI=
Subject key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6CA09BA55AAB8AB1AF91507FC5DD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209026
IP: 185.253.236.0/22
IP: 2a0c:42c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ca:09:ba:55:aa:b8:ab:1a:f9:15:07:fc:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:30:cf:3d:0a:6e:33:60:3f:e9:c0:8f:83:
61:6a:7e:e3:99:60:54:74:1b:e0:a3:cb:31:73:d1:
61:8f:bb:37:ac:fa:2b:3d:fc:3a:81:eb:af:9c:34:
89:70:07:48:70:4f:2c:95:47:29:12:82:ee:03:10:
aa:c6:51:29:6c:de:2b:48:b9:b6:9d:b6:c7:d6:ac:
a0:00:4d:ff:6b:1f:b5:2d:6b:1b:b0:4a:41:a1:77:
d8:de:3f:2d:35:39:57:75:44:bf:67:cf:fc:c2:f7:
05:3d:57:a1:ac:ca:ba:66:85:44:82:9c:f6:09:4b:
6d:bd:f6:ce:47:75:39:f5:c1:05:69:1c:7c:4f:5e:
ed:e7:2d:ba:c7:e1:21:91:ba:9a:01:b1:b4:bb:1b:
e5:15:dd:10:aa:14:7d:2d:5d:84:68:d8:88:d7:8c:
c6:df:f1:52:2d:ae:5a:ab:6a:27:fa:c8:c9:41:3b:
dd:3c:5a:c4:be:fe:4e:66:bf:e4:c7:cf:e4:60:63:
60:02:0f:ab:40:51:34:37:78:68:6e:e4:e5:97:44:
17:d8:6c:48:39:f5:ab:85:9d:d7:ca:35:dc:68:16:
eb:80:62:cf:79:d3:69:9e:71:50:fe:9d:a3:82:f0:
9d:c1:41:77:77:2e:d2:3a:c2:e9:3c:b8:cb:89:83:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.236.0/22
IPv6:
2a0c:42c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209026
Signature Algorithm: sha256WithRSAEncryption
5d:7d:90:06:b1:31:5e:dd:23:23:b7:a1:ca:7c:d2:e3:24:3f:
fa:8f:e1:4f:d0:94:2c:56:3f:db:89:59:d7:c6:c8:04:93:d5:
a3:5f:dc:7c:ce:33:fd:88:4c:8b:c5:ed:c9:5e:fc:3f:2a:b0:
77:27:50:1d:c5:e1:88:9c:1f:90:d3:3e:37:a5:38:92:f8:43:
57:1d:46:e6:b6:01:0d:43:ea:3c:c3:8d:69:44:ec:d2:c1:b0:
f2:54:b5:d4:fe:5a:ef:b2:00:d2:98:82:39:c0:4c:be:27:9c:
22:55:ce:28:22:79:8c:b5:7c:13:e7:cd:63:10:82:78:9f:32:
85:3b:8e:cc:ec:af:e4:7d:b5:98:12:e1:43:06:3f:df:e7:8b:
ae:0c:5c:dd:02:e2:e7:de:a2:e9:b9:c0:d8:31:ed:a6:5f:0c:
8e:0a:c2:77:06:39:c3:4b:ac:df:7e:13:01:6c:36:a7:36:fb:
9c:66:93:23:04:3b:bd:3b:17:ef:f7:58:13:cd:80:96:2a:dc:
f4:ab:c4:6d:3b:22:9c:9c:f1:1e:ea:16:89:00:bc:bc:11:2e:
f8:9c:af:ac:1b:2d:9a:e0:59:2e:b7:47:09:00:26:76:4c:74:
ef:fe:2b:cc:bd:4d:8c:b3:44:7f:58:c2:e5:46:08:ef:5c:64:
96:9e:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:40:04 2024 by rpki-client on console-ams.rpki-client.org