Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer (raw, json)
Hash identifier: WNFkOYVEYWboK1AuW4HoxYfiB+KHLSUBO+YpqPYD61c=
Subject key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4DF5603E235E9A35DA3422346495
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.111.24.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:f5:60:3e:23:5e:9a:35:da:34:22:34:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:61:73:bb:e4:07:96:8d:de:4a:18:d1:bd:
c5:f0:fa:d4:63:3c:5e:e1:30:69:e9:65:c6:d2:57:
6d:97:9d:a3:93:8e:eb:36:a1:73:22:dd:21:eb:d5:
44:af:9a:a2:af:b1:0b:fa:46:d4:97:e5:22:8b:66:
00:44:20:a7:4d:5c:5b:33:9a:cb:7f:7b:6f:ce:00:
f2:fb:94:f0:27:0b:24:71:14:e8:88:5d:e8:df:ce:
29:97:f1:6a:13:a8:0d:7d:10:39:9f:d9:ec:3c:38:
c9:a0:7b:1c:f6:f0:2a:13:67:dd:3d:e5:86:c8:49:
12:ef:cd:5a:41:7c:05:74:c0:89:a6:05:16:96:15:
97:cf:73:a2:08:fc:15:2a:77:e8:63:26:6f:c3:90:
64:ef:9d:b8:2d:03:1b:af:34:8a:6a:84:18:72:cf:
56:ae:f5:f8:2c:dc:a6:1b:6c:65:36:82:04:c4:3a:
d7:07:43:75:6b:27:29:09:65:eb:64:19:ab:08:a9:
d1:a2:6b:bc:b0:73:91:0d:61:39:b6:08:5b:36:5a:
cb:27:ae:79:24:ca:04:2d:69:3e:35:83:0c:de:7d:
85:0a:35:c6:01:3f:1f:32:91:28:98:1b:42:d6:dd:
f8:f0:46:f2:29:92:55:e9:83:c2:ef:a2:7c:21:f5:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.24.0/23
Signature Algorithm: sha256WithRSAEncryption
33:95:c7:95:53:de:73:8c:68:d8:48:27:71:f3:d5:0a:22:dd:
79:d5:d7:a4:c7:11:66:7e:c7:b1:94:a2:c6:0b:67:88:99:4c:
74:ab:eb:80:0b:a0:14:0f:ad:7c:f7:29:2a:a3:e5:2f:07:ce:
1f:11:62:85:1d:37:52:7f:6e:3a:80:fc:30:84:39:12:65:62:
30:af:01:7f:dc:30:af:30:ac:57:69:06:9b:e1:36:10:69:96:
eb:6f:50:20:1e:86:25:b5:01:18:f2:20:98:5d:29:9b:a3:be:
05:d5:41:ba:f9:40:0c:3c:38:d9:c6:11:f0:d6:4d:43:88:42:
86:80:f2:83:3b:18:2b:1b:4f:4a:a6:66:af:f6:5c:c7:2e:d0:
f7:20:e9:02:78:3d:7e:eb:f8:6b:8c:74:63:16:79:76:90:5c:
58:ff:ba:32:48:f0:40:7f:2c:e4:65:ec:32:58:98:2f:cc:91:
47:34:ff:5b:b4:9f:93:9a:53:66:f3:f9:f4:37:32:09:db:8e:
7e:69:11:61:57:88:e0:ba:e6:3c:ba:61:46:59:71:9e:d2:bb:
e5:85:65:25:ec:f8:e0:12:9f:0a:c2:93:89:87:0f:ad:d9:3a:
c3:94:1a:8c:5b:80:62:37:f2:23:52:04:e9:79:0c:ad:71:cb:
3d:5b:aa:de
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzCbU31YD4jXpo12jQiNGSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTI2YzEzOGFmYTQyYTdkNjVjYzc3NjFhYzRmMTg2ODM2NmZhN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5hc7vkB5aN3koY0b3F8PrUYzxe
4TBp6WXG0ldtl52jk47rNqFzIt0h69VEr5qir7EL+kbUl+Uii2YARCCnTVxbM5rL
f3tvzgDy+5TwJwskcRToiF3o384pl/FqE6gNfRA5n9nsPDjJoHsc9vAqE2fdPeWG
yEkS781aQXwFdMCJpgUWlhWXz3OiCPwVKnfoYyZvw5Bk7524LQMbrzSKaoQYcs9W
rvX4LNymG2xlNoIExDrXB0N1aycpCWXrZBmrCKnRomu8sHORDWE5tghbNlrLJ655
JMoELWk+NYMM3n2FCjXGAT8fMpEomBtC1t348EbyKZJV6YPC76J8IfVTJwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCUmwTivpCp9Zcx3YaxPGGg2b6fjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0Lzg4NmYw
My1kYzkxLTRhNzQtYjAzNC1iMDYyMjhmY2YyYzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvODg2ZjAz
LWRjOTEtNGE3NC1iMDM0LWIwNjIyOGZjZjJjMS8xL0pTYkJPSy1rS24xbHpIZGhy
RThZYURadnAtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwW8YMA0GCSqGSIb3DQEBCwUAA4IBAQAzlceV
U95zjGjYSCdx89UKIt151dekxxFmfsexlKLGC2eImUx0q+uAC6AUD6189ykqo+Uv
B84fEWKFHTdSf246gPwwhDkSZWIwrwF/3DCvMKxXaQab4TYQaZbrb1AgHoYltQEY
8iCYXSmbo74F1UG6+UAMPDjZxhHw1k1DiEKGgPKDOxgrG09Kpmav9lzHLtD3IOkC
eD1+6/hrjHRjFnl2kFxY/7oySPBAfyzkZewyWJgvzJFHNP9btJ+TmlNm8/n0NzIJ
245+aRFhV4jguuY8umFGWXGe0rvlhWUl7PjgEp8KwpOJhw+t2TrDlBqMW4BiN/Ij
UgTpeQytccs9W6re
-----END CERTIFICATE-----
Generated at Fri May 3 02:51:47 2024 by rpki-client on console-fra.rpki-client.org