Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer (raw, json)
Hash identifier: AjdfAsZGpOWU5vzaJuq5kHCOZTNO9b70nVeVGSCPje0=
Subject key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A7F7BFD9A3207876A9A4198FC80B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.254.184.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7f:7b:fd:9a:32:07:87:6a:9a:41:98:fc:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24d906b90c1d856673e414f39805be583d230ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:9d:23:ed:5d:b8:1a:c8:bc:41:fd:62:e6:
25:94:b4:f4:ee:16:e3:91:78:4e:9c:34:c8:99:e5:
f3:e2:51:6d:e6:6c:f9:bd:59:fb:6b:b5:be:ad:12:
da:1f:a5:bc:3a:b1:16:11:78:bf:fe:1c:c3:15:0d:
29:1c:6c:be:77:1b:ea:78:7c:45:48:99:5f:d6:db:
a6:95:da:0d:c1:11:64:ea:01:c8:ba:74:6b:16:fe:
e3:63:19:6a:d7:2e:8b:31:30:8d:6b:36:90:07:de:
91:64:8c:b5:0f:80:e3:17:bb:14:36:9a:33:27:c4:
5e:00:c4:c2:93:96:c0:63:b9:85:19:af:5e:0c:d4:
59:64:74:70:33:1c:aa:d3:c3:9e:b1:ed:99:21:d8:
40:df:79:f9:96:c9:fe:16:ae:b9:ee:4c:25:4e:40:
9b:b4:a9:13:69:b8:a4:08:3e:bd:17:42:96:f5:57:
bb:ee:e2:db:0b:ca:0e:c1:62:a6:f9:cf:a3:fa:7a:
3f:33:26:a3:9e:e3:a1:9b:53:ba:35:6e:1c:45:54:
d1:ed:49:3e:43:9d:08:be:01:82:fd:aa:9c:cf:af:
1a:c5:86:e6:7a:cc:e5:4a:5f:60:e9:1d:59:e8:d0:
37:37:ed:86:3b:3f:f3:c8:b5:bc:a8:36:98:75:e5:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.184.0/23
Signature Algorithm: sha256WithRSAEncryption
08:5d:35:62:12:93:08:87:25:95:db:c4:f1:5d:37:bd:7b:17:
b8:5e:40:47:5c:1b:7d:18:35:7e:0f:9d:2f:2d:fd:01:fd:81:
ce:24:ee:cd:20:f0:2e:ff:ec:c8:18:bd:83:fc:1f:d3:cf:ab:
9a:8b:37:ae:80:60:0f:ba:a7:f6:dd:39:8f:d0:92:b5:21:08:
df:28:9c:9a:6f:e8:0e:e5:38:4f:d0:33:99:25:cd:f2:9f:c3:
15:c9:a7:6e:6f:ab:06:cd:d7:ce:39:dc:7d:bf:8a:8d:d5:6e:
01:0c:c4:24:05:fd:f5:e7:46:f4:74:fc:b8:74:65:f2:3b:a6:
d9:ab:b0:4c:6c:9f:57:04:2b:98:fe:0b:4c:5c:a7:2e:6f:0d:
1a:da:5b:a8:6d:11:73:fc:48:8d:83:fd:89:ff:3f:87:6d:9a:
73:41:99:2c:ed:44:4d:81:0a:0c:96:6a:49:9d:f7:1f:90:c5:
5d:2b:c8:1c:b3:6f:02:53:58:ed:94:3f:b6:d6:7c:c8:a4:75:
e8:b6:fe:60:5c:16:ae:8b:6f:d0:f1:65:40:ff:0b:9f:f0:40:
b9:9f:6a:dd:fc:49:4c:1c:bb:f7:70:6d:93:c6:74:a7:31:fe:
a0:c7:94:8a:4f:a1:4f:ab:9f:f6:f1:10:e7:6a:7e:45:c8:4b:
c8:2f:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:09:50 2024 by rpki-client on console-fra.rpki-client.org