Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.cer (raw, json)
Hash identifier: iTLsbxJ5qomeYQny3+J+EvL7wp40jynhXaIEL8Pgl10=
Subject key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000F6DCFA7AA25F7BA63A59D262DEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20792
IP: 185.95.192.0/22
IP: 213.216.0.0/19
IP: 2a02:13c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0f:6d:cf:a7:aa:25:f7:ba:63:a5:9d:26:2d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2457027e3a087b65f968b535e415f67432695876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:55:63:cc:ab:94:e8:d0:a2:b9:f3:66:cf:
c4:f1:3e:21:4e:5b:12:eb:c2:74:bc:a6:78:77:d8:
3a:1b:26:52:af:d0:af:8c:32:af:aa:0c:5f:e7:47:
36:c1:5e:91:ab:fa:56:91:a4:ed:39:e7:5d:9c:4e:
2f:f2:12:9a:f6:40:83:c2:2a:ac:d5:2a:50:b2:81:
51:12:d9:42:fd:ae:dd:d9:7f:72:c2:08:bf:0e:2d:
d7:42:58:db:25:01:c1:fc:2a:09:82:d5:48:97:20:
cf:ca:e9:5c:df:a5:a2:01:56:7d:b8:30:36:d9:93:
6d:f5:06:45:92:15:ec:45:0a:63:ba:00:b5:2f:f1:
7c:77:cb:95:b5:e0:05:88:28:c4:2d:35:2c:62:59:
db:cd:94:06:6e:6f:9f:18:bb:56:60:68:29:8a:d8:
fa:aa:fc:3f:7f:08:76:19:b2:1a:f2:39:27:6a:43:
da:04:e5:16:30:7b:50:12:fb:3a:c2:0c:38:27:ae:
59:82:b9:38:05:1b:02:fc:20:ee:bd:80:de:b9:c7:
2f:80:4f:eb:4a:58:d7:00:fb:0c:ff:da:a8:80:17:
96:ea:a6:92:ae:c3:fe:32:83:69:fb:81:1a:d6:e7:
b6:3e:63:6f:8d:7f:26:a3:a2:1f:1b:c3:1a:57:61:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.192.0/22
213.216.0.0/19
IPv6:
2a02:13c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20792
Signature Algorithm: sha256WithRSAEncryption
42:99:e7:0c:3c:a3:f7:18:0b:0f:98:11:ab:ae:12:8d:78:10:
a2:38:62:c6:3a:3f:6d:32:79:d9:e0:e5:a6:f6:1e:91:c1:b3:
87:a1:e7:f2:56:9d:a6:c5:e1:04:f4:ce:65:d2:2c:c1:db:4d:
78:b7:1c:53:90:5d:a2:67:95:b9:3a:b8:f2:ea:6c:92:4e:0b:
1b:59:ea:9b:1e:54:3d:67:d0:b3:83:36:62:91:ee:50:9c:28:
82:e7:58:60:70:9a:11:b1:a3:a4:e1:d8:b5:14:bc:7b:c8:60:
ed:60:99:5d:7f:31:1f:99:f0:70:99:1a:94:d8:e5:ab:7f:0a:
4a:a6:ca:53:06:a7:0c:d5:5e:b6:7d:e9:93:e7:c0:e5:f2:4f:
d4:57:f0:83:cb:a1:28:53:93:01:78:05:2f:fd:c4:13:5e:6a:
57:b4:60:07:73:52:d7:ab:fb:18:4a:4f:56:44:72:2b:42:b0:
16:3c:1c:6b:72:9f:3d:27:f7:e2:b2:a7:92:25:94:08:8b:b0:
54:bd:4f:c8:b5:cb:81:ba:65:c2:1f:32:6f:1e:cc:8c:c4:e1:
fc:a3:20:70:28:53:c2:12:52:40:a8:d9:95:42:26:be:36:be:
4f:cc:63:63:ea:c2:af:52:2f:eb:85:18:58:87:8e:15:3b:b4:
3c:6f:13:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:55:21 2024 by rpki-client on console-ams.rpki-client.org