Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
File: JSxOK_XyE4Ri70pdng9uenY1MP4.cer (raw, json)
Hash identifier: 8HzennXDYx16QIfzLFXsEk5VSFi6v4Rp60nbk9XqDZY=
Subject key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FD3E20724265CA4DDC9CF3FD93407
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211987
IP: 185.234.102.0/24
IP: 2a10:da80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d3:e2:07:24:26:5c:a4:dd:c9:cf:3f:d9:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:64:23:fd:fd:09:cb:b9:66:c8:c9:d4:76:
a1:e7:ff:e0:2c:93:7c:c0:1a:41:26:e8:87:31:84:
6a:71:9d:2a:79:cb:17:00:04:25:92:df:88:7d:80:
2d:2a:b3:c2:a6:95:49:51:95:dc:29:dc:a3:d2:4b:
a7:8e:3f:41:1b:00:ba:c5:cd:c4:28:5e:b1:29:21:
65:cb:7d:74:7f:d4:2f:9b:12:cf:5e:f3:c0:e6:e9:
f0:c4:92:f6:a5:c4:9f:e4:11:66:fb:ef:2e:53:53:
52:27:10:d5:a5:fa:02:e4:bf:f1:e8:e4:8a:e4:af:
a7:0c:4a:59:9b:07:eb:e5:04:9d:81:15:48:d5:fd:
6f:10:95:d3:31:ea:0a:fd:ba:c4:35:75:80:ad:ca:
25:f2:76:cf:77:48:dd:91:d8:08:ed:13:c7:8c:73:
63:eb:0b:4a:bd:0c:2f:e4:78:5b:1c:27:9f:69:0e:
98:0c:85:9d:19:7c:89:c7:04:be:ae:35:a3:64:c7:
85:69:6b:3a:5d:e3:21:64:fd:c4:af:9a:7a:d1:54:
c5:0a:9a:58:58:c6:6f:cd:38:46:de:2c:4b:cb:a4:
52:bd:40:a7:66:50:0b:99:eb:b6:0b:fe:66:5a:8e:
b7:c5:d1:1c:7c:ea:dd:d8:5c:dc:9c:1c:9d:9c:4a:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.102.0/24
IPv6:
2a10:da80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211987
Signature Algorithm: sha256WithRSAEncryption
18:f4:40:0e:7b:c4:6c:2f:27:05:d1:40:6d:8a:35:ce:bf:6f:
83:5e:f3:b6:12:3f:b8:6f:45:25:59:e4:e8:50:20:51:5f:85:
d5:08:3f:e1:38:32:c3:b4:3e:9e:62:f6:4d:0b:cd:d4:ac:af:
0c:8c:ba:32:a8:b6:23:c1:99:b8:30:ca:7f:71:ed:7f:a1:0e:
c8:79:1d:96:f8:71:cc:57:c2:31:1d:d3:86:aa:f7:de:80:3b:
a9:a9:4c:62:28:e0:99:7a:99:50:25:e0:64:f2:52:6c:91:b6:
96:bc:81:0b:29:58:3c:20:7b:1f:9a:33:3c:38:ba:46:39:55:
44:82:98:4e:d7:aa:9d:48:a3:64:21:40:93:e9:fd:22:1a:ae:
1a:29:69:53:bd:93:e4:c9:b3:2b:23:47:79:9f:04:db:1c:9a:
5b:91:cc:33:f0:c7:ee:31:dc:b4:cd:ad:65:f5:69:84:d8:9b:
a4:55:eb:a4:8d:c5:66:6a:36:de:09:14:0a:b9:77:22:52:b8:
66:78:bd:fa:ba:13:6a:b7:3c:a3:84:1f:ce:78:02:95:2c:30:
eb:5d:e1:c3:c1:4a:45:9a:e0:a6:38:51:b3:73:63:0d:34:14:
b9:7f:cc:90:14:22:d5:6b:1c:6a:45:c8:87:6f:cc:d0:40:66:
76:d1:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:09:53 2024 by rpki-client on console-fra.rpki-client.org