Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.cer (raw, json)
Hash identifier: FR9NYwHfzF74RuJbwNMXPU4ZwRI0L5wJP+pIf7nvfhE=
Subject key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01944AD541D080A95A9F710701438A5F18F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jan 2025 11:31:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60624
IP: 91.236.84.0/22
IP: 185.28.248.0/22
IP: 2a04:3c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:d5:41:d0:80:a9:5a:9f:71:07:01:43:8a:5f:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 11:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:26:a9:0d:d4:0d:b1:f7:ba:33:d5:0c:81:
9d:90:03:cc:21:ba:48:32:e6:97:79:6f:e8:45:2d:
a2:c2:50:12:52:78:0d:9a:35:be:2e:55:d2:98:dd:
d8:9e:f4:0e:b6:67:61:52:34:3a:38:af:f9:66:0e:
eb:d3:ec:7d:dd:82:18:2a:b7:47:57:04:8b:1d:92:
7a:df:de:9d:8a:2a:40:95:26:ce:95:d0:24:f4:32:
64:ec:dc:f5:69:7d:1b:b2:b3:5d:04:63:49:9c:6d:
4a:13:57:b9:0e:04:51:04:e3:f3:00:49:23:bc:f4:
1f:1a:12:c8:63:5b:45:bf:70:86:41:28:9b:54:e8:
2d:c4:88:2e:26:91:05:6f:ff:de:48:a3:22:95:2a:
3e:50:89:fb:4a:32:94:a9:b1:e5:99:a4:09:b1:08:
8a:55:ab:36:28:2a:60:d1:38:60:3b:56:f4:15:6d:
dc:e0:d7:5f:fa:04:35:86:68:b6:e7:ac:bb:f0:2c:
70:42:3f:b1:31:3f:9f:70:7f:76:86:a0:33:82:e4:
b9:26:7a:b3:d5:1e:9d:43:ad:47:36:4c:5a:b2:6a:
dd:b4:0b:b4:d1:12:98:91:f3:78:05:1d:a3:dc:06:
5b:e1:b3:94:0a:ae:ae:19:d4:c0:77:a6:00:f3:29:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.84.0/22
185.28.248.0/22
IPv6:
2a04:3c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60624
Signature Algorithm: sha256WithRSAEncryption
79:cd:ea:bb:f2:5d:f8:49:82:48:c2:e4:fc:46:51:b5:f5:a4:
b1:5f:8e:03:93:ab:ef:aa:8e:7d:07:ba:cc:52:8d:c5:9d:d8:
5f:b4:86:ad:02:11:f1:a2:30:91:cf:72:45:2e:15:91:49:67:
e3:47:d6:f4:d3:35:98:4e:be:75:10:eb:12:65:43:e9:3d:3a:
5c:07:25:5d:1d:f3:04:b6:3f:e6:a8:6a:3d:25:50:3c:de:3e:
6c:d0:47:b5:4e:96:0a:e6:bf:65:6d:39:23:92:e7:6f:e4:24:
d4:51:d5:01:cd:2e:ea:a8:9f:2a:9a:8b:f8:46:31:09:db:a4:
95:70:ab:ae:0e:78:c9:14:ae:ef:35:45:ea:e9:e8:d5:f9:ae:
60:0c:8c:83:f3:6e:09:7d:cb:fd:ad:21:1f:d1:a7:c0:b3:8d:
01:8f:f8:d9:e8:8c:c1:74:75:fd:a7:44:16:19:08:8c:cd:49:
0c:e1:cb:57:2c:1b:1f:01:bf:8c:76:71:72:6e:a7:a2:4a:60:
24:cb:74:87:3b:14:e5:cf:0c:64:d6:30:b2:f1:48:87:e2:94:
ab:fc:57:28:0b:c2:9e:ed:aa:1f:15:2b:cf:ce:60:f3:cf:1a:
de:2a:11:11:ae:47:40:01:08:84:c0:ff:ee:97:1a:80:5c:8a:
40:f5:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:33 2025 by rpki-client