Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.cer (raw, json)
Hash identifier: 6LnjBpsmsioa5mFoaf5H3Uz+khhQ+M9z+/jr4IocSII=
Subject key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01902BAFB51F9C0E9004D78D623DD0AC46EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Jun 2024 14:10:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 203.56.112.0/22
IP: 2a14:3e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:af:b5:1f:9c:0e:90:04:d7:8d:62:3d:d0:ac:46:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 14:10:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:f2:47:eb:61:14:63:fa:80:13:ec:99:6e:
46:79:56:d7:6e:9e:eb:2f:e0:e1:20:e3:c5:16:94:
e7:e4:c6:74:ed:bb:2d:a3:0f:c3:32:46:90:98:fc:
64:c6:3d:77:33:bf:4f:5c:48:44:f9:54:fd:24:a7:
ea:ee:9d:77:a5:00:4c:cd:c6:93:b3:b9:d7:f9:0f:
61:cb:97:1b:f6:13:69:ff:2f:44:d5:5e:d1:3c:34:
e6:22:d2:6a:c1:53:d2:4a:e5:07:5e:fe:d4:d8:a2:
94:3b:ef:46:4b:6b:63:0b:37:42:c8:8e:3f:07:c9:
d8:78:85:80:ee:f5:79:f2:cc:f9:fc:21:03:86:55:
bb:34:ca:4b:21:83:fd:fa:b0:0e:c6:ef:b1:ed:19:
0a:99:1f:5f:55:6d:9a:ea:e6:97:a5:a1:1f:00:f2:
53:8a:7b:f0:47:14:20:0a:3e:ed:4b:4a:de:e6:b4:
0b:90:90:50:4a:bc:3a:cb:47:70:8d:78:dc:da:a4:
3e:72:0f:19:a9:02:26:92:4e:92:f9:a6:9b:7d:87:
1f:1a:10:4e:5e:03:57:3b:f5:17:8f:f9:d2:1d:d3:
d6:c9:b3:78:d5:0e:5c:cb:0a:5f:67:82:69:4a:4c:
a5:1b:6c:48:ae:77:2e:e5:52:98:c3:a8:d5:11:43:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.56.112.0/22
IPv6:
2a14:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
24:92:a6:b2:f0:f3:20:c0:18:fe:eb:e9:e5:b2:fa:e3:4e:8e:
6e:de:b2:1d:aa:41:44:2e:15:1b:23:7d:fb:9d:3a:cf:b9:ed:
b8:ee:46:4c:9a:5f:2a:31:27:e7:0a:24:a3:43:ac:f7:8b:ac:
92:d6:93:ef:8d:f0:12:33:7c:7a:7b:70:8d:5d:fa:12:2d:d7:
0d:bf:ba:5f:cf:f8:58:03:99:d3:4e:66:e9:e7:f4:a5:a3:23:
79:f8:b9:77:85:f5:f0:70:d5:bd:96:a8:e0:29:85:65:f2:a6:
39:39:2d:c7:f7:3b:38:c3:b7:9f:7f:de:6a:ec:2a:30:fa:b1:
9a:1f:b3:88:f4:42:30:0b:42:a3:86:42:29:ac:19:50:55:22:
23:93:77:dc:20:5b:c3:05:f5:18:a6:e4:19:dc:06:c4:ab:5b:
4d:4f:67:cf:44:3a:e5:7d:aa:c4:8b:d8:f8:25:f2:d8:66:61:
49:d1:85:24:03:59:bd:20:de:38:6a:84:ee:7b:95:bc:3c:55:
e7:a2:f7:03:43:47:3e:7f:69:cb:55:6c:ca:30:61:41:b1:3e:
ba:a5:3a:39:73:91:88:d4:e4:05:73:5f:5d:ed:e4:a2:d0:31:
bc:40:35:5e:5d:ac:db:1e:39:43:1c:3b:1b:3f:74:d2:1c:22:
e1:e4:a8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:39 2024 by rpki-client on console-fra.rpki-client.org