Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
File: JR54cf048t-RgkLdocb8NWiEI8o.cer (raw, json)
Hash identifier: R8n2kk4XtKH2vBzH5Ccwb3Vb7Ru13caHl30mVUGnFwo=
Subject key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC21C3BC89E4079871E65475393E1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:c50::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:21:c3:bc:89:e4:07:98:71:e6:54:75:39:3e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:2a:b1:46:79:93:be:54:2f:ec:7c:32:67:
a3:94:86:4f:00:6e:08:73:8c:10:10:61:73:0f:78:
0b:c7:bf:22:18:65:f5:d5:13:2b:04:f9:4d:cf:af:
42:7c:95:c4:52:46:0c:cf:50:ca:cf:a2:1e:3d:76:
ed:da:24:e9:3b:07:4e:f9:c6:f8:21:fa:08:f9:5a:
00:73:09:72:83:26:4b:45:f7:50:cd:25:97:84:5b:
ac:56:a9:f2:3a:70:36:8f:a5:c5:fd:65:24:c7:e0:
f6:70:bf:59:d0:01:21:24:cb:91:7b:6a:68:09:28:
c8:c6:5e:b9:8c:54:20:77:46:ac:c3:de:16:20:67:
3f:a6:90:77:bc:ab:89:f8:31:8e:d9:a0:5b:d2:c0:
b4:2b:70:fc:f1:c0:55:e8:e1:ca:58:85:c7:78:39:
b8:7c:e8:6a:c9:83:66:08:9f:85:af:14:5e:ed:da:
f7:65:07:32:21:e1:97:45:25:7c:13:0f:39:62:73:
47:dd:92:08:51:95:4d:9b:65:9c:f2:03:8a:3d:3e:
d0:02:8c:ba:ee:5e:62:40:ae:e0:4f:78:ba:91:15:
09:b1:1e:29:69:ee:17:2f:c2:ba:e3:f3:25:c5:dd:
2f:f5:ae:44:75:71:be:a7:84:35:4f:93:9e:e2:c3:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c50::/48
Signature Algorithm: sha256WithRSAEncryption
1f:cd:bf:0d:e7:23:61:fd:00:e1:dc:10:1d:18:7b:2a:39:9d:
09:bd:98:8a:2d:d3:4c:a7:90:02:60:37:88:39:d5:c3:55:64:
39:4b:06:ca:0d:e0:39:d0:a6:0c:24:4a:01:dd:9d:5b:fc:5e:
c8:d2:85:bf:69:24:89:49:d9:e7:90:bf:8f:3e:bc:61:ca:26:
e3:4b:4c:1f:ad:a1:45:65:e9:0d:e4:bd:46:00:75:77:c9:97:
ad:3f:05:ca:81:4f:f2:1c:25:76:e6:d9:e7:2d:8d:ba:65:2e:
62:bb:ee:f7:46:85:6c:35:22:0d:43:85:da:df:45:70:c5:14:
18:2f:e4:ee:90:dc:d2:39:db:f7:4f:49:87:2d:9e:03:5b:2d:
25:a8:fd:2c:b6:5a:a7:9d:8f:7c:80:08:87:6a:7e:59:d6:b9:
59:41:6c:d0:a6:fa:82:c1:43:79:4f:3a:b5:79:22:bd:ba:4d:
6e:ef:9e:35:fd:ec:bf:69:0d:c2:13:27:bb:9a:04:b7:40:c0:
0f:12:31:f6:0e:fe:0c:2c:07:73:eb:71:13:de:1d:49:9a:ab:
c2:93:f6:69:a5:94:e7:0a:d4:0d:9a:7e:87:6f:ef:bc:2e:34:
fc:e4:79:fb:49:7d:0d:61:16:15:eb:b0:b2:94:4c:a3:cd:88:
40:cb:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:28 2024 by rpki-client on console-ams.rpki-client.org