Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
File: JOmh8SqE1TJSY3_4XW646xY2OT4.cer (raw, json)
Hash identifier: yRIEuIvAWceoZOpVe9kFjMe92cgCbpNMXNPHMc29Fgk=
Subject key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500F21496794FCE62FEAD4F3829DA92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198354
IP: 37.19.0.0/21
IP: 185.214.160.0/22
IP: 2a00:6240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f2:14:96:79:4f:ce:62:fe:ad:4f:38:29:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:5b:b5:fb:70:41:0d:27:84:c9:04:da:95:
9d:a8:75:1c:e7:f5:b3:c5:cc:e8:2d:f3:ae:e9:09:
c7:ea:4e:30:66:25:14:4e:11:d9:5c:f2:94:51:a1:
a5:a2:1e:d8:02:f2:59:61:8b:d8:76:8f:2b:ca:7b:
a2:1b:fb:b8:95:84:39:30:66:83:c4:4b:8e:47:d2:
5c:9c:f5:c6:14:10:27:dd:70:c1:e7:6f:45:51:29:
db:01:4d:ad:27:30:b9:c0:e7:38:eb:5b:0b:d6:c1:
54:cd:34:78:1e:f9:2e:12:0d:6f:92:20:31:d7:45:
8c:ed:c5:87:2a:86:d0:24:a2:93:60:24:9d:1f:b4:
99:36:46:5b:1b:ba:87:44:3d:8b:8a:35:d7:82:a6:
99:f5:7a:68:c7:fe:cf:72:c4:80:d2:15:93:e3:a8:
2b:4c:de:94:69:a8:91:08:ca:a5:97:dc:23:25:67:
19:bd:8b:dd:8a:92:46:98:6b:26:72:7e:ff:8e:bd:
04:96:08:55:f1:a8:44:3f:ab:a4:ef:63:b2:68:3f:
4e:83:12:15:b8:a1:aa:ac:74:bf:c4:e3:c7:2c:a2:
37:71:41:59:28:f9:e3:f6:1c:74:47:62:75:78:20:
ba:b4:73:c0:1f:e4:0c:78:27:c2:40:ab:66:f9:b2:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.0.0/21
185.214.160.0/22
IPv6:
2a00:6240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198354
Signature Algorithm: sha256WithRSAEncryption
b0:0a:ec:64:88:41:a4:97:f0:63:0e:a8:bd:d3:e8:d3:34:b8:
25:d9:9e:ff:5e:d6:4f:11:42:76:f3:70:5a:42:05:e8:8a:16:
ed:4d:8f:e4:e4:07:25:9d:13:ff:cb:c5:3d:fc:07:2c:83:98:
3f:77:7e:35:fb:0f:50:fc:5b:e6:df:e0:bb:59:cd:5c:c8:fd:
7c:7c:2a:a9:10:0e:c5:13:b0:ac:90:83:d8:96:ef:13:54:08:
d3:59:8e:48:f2:ef:44:f8:01:61:c4:f1:44:69:08:eb:82:fa:
1d:1f:bc:ce:5c:aa:9a:ae:25:70:ba:4c:57:96:53:15:22:96:
b9:60:df:f0:42:d4:e3:49:1b:8c:33:1f:43:e0:d8:3b:fd:bc:
cd:c8:ac:56:6c:98:60:80:d7:de:cd:1b:f1:6f:4b:b1:c8:4a:
4f:34:b2:e9:e4:1d:9e:4a:ed:df:23:98:64:b0:ed:60:aa:71:
96:6c:27:95:ba:10:2c:20:50:bb:3a:10:ad:56:ec:99:0a:5d:
1b:a9:9e:ac:d9:a7:89:36:a8:eb:3f:71:e2:f7:2c:eb:b2:95:
1c:e4:6c:e4:86:27:93:ca:64:f6:1e:1a:9e:bc:3a:ab:cd:5c:
92:39:43:48:ca:8a:f9:b6:29:d2:56:33:ec:32:43:a0:33:8d:
db:c7:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:06:56 2024 by rpki-client on console-fra.rpki-client.org