Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
File: JG-b54PXPZWriqVGGeYPkBHATWc.cer (raw, json)
Hash identifier: 0Ij+vink50N5VEstqVl0gUwrjcwhgz78en5O37m9e9c=
Subject key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8E3E888A91C2562A800C427A51A91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197937
IP: 2a13:83c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e3:e8:88:a9:1c:25:62:a8:00:c4:27:a5:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:7e:c0:b8:8c:24:79:04:a9:81:91:b7:40:
f0:e9:49:52:72:85:67:a7:a7:a7:81:1d:3e:7c:fe:
ab:84:65:cf:14:fc:bc:0e:46:d0:09:32:d8:d3:c9:
91:cd:5c:45:30:e1:6e:87:c0:40:74:d6:d8:d3:7b:
fd:8a:ab:34:d0:be:d1:4e:9e:48:44:70:fb:5f:68:
24:af:93:cf:6e:ee:5c:c1:db:7c:fc:90:3e:cd:69:
dc:71:35:8f:83:77:f4:ef:fd:a9:26:4a:8f:e5:2b:
1d:16:bd:48:4b:06:bd:a3:ee:02:08:eb:d0:67:72:
b0:a5:1e:b8:58:6a:cc:a5:00:2c:ee:46:95:d1:a8:
ad:d1:9b:a6:5d:e8:78:46:ed:c2:98:f8:dc:0b:ef:
42:79:cb:39:a2:c6:a2:12:16:4d:67:79:48:9f:9d:
c5:02:fe:3b:49:00:0f:85:64:1a:8e:c1:47:31:c5:
37:66:c9:f8:db:d0:35:a5:9d:6d:59:f7:55:00:31:
a0:3e:6c:a2:84:54:20:b0:1f:20:a1:79:d7:1b:42:
4a:ad:a0:84:6f:88:63:5c:b7:bb:e0:54:01:fe:5f:
02:01:00:42:3b:ce:49:9f:2f:51:6a:04:42:ea:94:
e3:a8:0e:3c:03:f2:34:14:aa:ff:e6:95:77:cd:1e:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:83c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197937
Signature Algorithm: sha256WithRSAEncryption
63:b4:22:23:61:03:4a:d8:57:72:84:99:7e:8c:d7:f5:7e:05:
01:32:87:a5:17:26:36:1a:26:ac:f8:d5:49:36:93:07:2f:04:
a0:0c:ce:85:50:ec:fa:20:b1:e6:ad:b6:3c:3f:fe:4b:91:d4:
69:b8:ce:60:ef:b1:86:d6:ed:15:14:52:3e:d5:ae:d1:de:82:
4d:2d:f3:9a:65:8e:55:90:db:f7:72:d4:a0:39:8b:fe:f5:9e:
46:38:4f:e5:bb:2f:fe:bd:2e:b0:14:fe:fb:58:85:f7:6a:22:
c9:e2:08:bd:b4:39:7a:74:91:ce:b6:73:3c:fd:77:07:05:8f:
aa:d9:94:96:84:04:99:7e:60:79:9b:85:ec:b5:89:11:e8:e9:
6d:9b:76:47:aa:68:97:cf:74:3e:77:bb:43:0c:f2:e5:ea:53:
08:8e:67:7d:bd:1f:e1:04:28:88:38:23:22:6a:8f:5a:d6:c8:
a6:b2:ae:27:92:15:ef:e6:6e:99:f8:c4:d4:31:bd:19:2c:11:
31:91:8b:33:b1:54:e0:1c:71:49:ec:f0:10:94:98:d2:8a:92:
b1:11:a2:56:64:55:d7:c0:58:0b:b2:f3:5a:db:ca:c3:e0:7b:
0f:08:98:e7:9f:aa:38:80:23:b3:b5:57:5c:55:48:7d:c0:7f:
fe:89:c0:71
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYzGuOPoiKkcJWKoAMQnpRqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZmOWJlNzgzZDczZDk1YWI4YWE1NDYxOWU2MGY5MDExYzA0ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5+wLiMJHkEqYGRt0Dw6UlScoVn
p6engR0+fP6rhGXPFPy8DkbQCTLY08mRzVxFMOFuh8BAdNbY03v9iqs00L7RTp5I
RHD7X2gkr5PPbu5cwdt8/JA+zWnccTWPg3f07/2pJkqP5SsdFr1ISwa9o+4CCOvQ
Z3KwpR64WGrMpQAs7kaV0ait0ZumXeh4Ru3CmPjcC+9Cecs5osaiEhZNZ3lIn53F
Av47SQAPhWQajsFHMcU3Zsn429A1pZ1tWfdVADGgPmyihFQgsB8goXnXG0JKraCE
b4hjXLe74FQB/l8CAQBCO85Jny9RagRC6pTjqA48A/I0FKr/5pV3zR7I6QIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2JhYTM3
Mi04MjNiLTRiMDctOWFhYi1jYmJkMDFmMmI5MWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYmFhMzcy
LTgyM2ItNGIwNy05YWFiLWNiYmQwMWYyYjkxYy8xL0pHLWI1NFBYUFpXcmlxVkdH
ZVlQa0JIQVRXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhODwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDBTEwDQYJKoZIhvcNAQELBQADggEBAGO0IiNhA0rYV3KEmX6M1/V+BQEyh6UX
JjYaJqz41Uk2kwcvBKAMzoVQ7Pogseattjw//kuR1Gm4zmDvsYbW7RUUUj7VrtHe
gk0t85pljlWQ2/dy1KA5i/71nkY4T+W7L/69LrAU/vtYhfdqIsniCL20OXp0kc62
czz9dwcFj6rZlJaEBJl+YHmbhey1iRHo6W2bdkeqaJfPdD53u0MM8uXqUwiOZ329
H+EEKIg4IyJqj1rWyKayrieSFe/mbpn4xNQxvRksETGRizOxVOAccUns8BCUmNKK
krERolZkVdfAWAuy81rbysPgew8ImOefqjiAI7O1V1xVSH3Af/6JwHE=
-----END CERTIFICATE-----
Generated at Fri May 3 11:27:47 2024 by rpki-client on console-ams.rpki-client.org