Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
File: JVnpvh-9HmkJoL6akLOA-CT6saU.cer (raw, json)
Hash identifier: lxDJkggcnIImR3Po5OBv2Nl4JdzA9XhsJDZWgiEkpn0=
Subject key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF47D628A5A9B70D094AA966FF44553AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 10:51:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202837
AS: 215403
IP: 185.198.4.0/22
IP: 2a0a:81c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:7d:62:8a:5a:9b:70:d0:94:aa:96:6f:f4:45:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 10:51:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b3:82:c4:a1:21:19:1f:49:27:44:84:4b:53:
5e:53:5e:06:05:be:72:26:c4:c4:71:32:41:65:10:
6b:a4:37:7f:72:98:c5:e1:13:5a:df:d2:2d:2b:31:
86:32:93:0a:89:cc:f2:78:93:63:8a:d7:be:ad:2b:
fc:33:cc:f7:07:e9:e8:e1:55:9e:e5:5c:68:8c:cf:
17:8e:2f:ee:5d:37:66:4d:2c:83:b2:8b:b0:b5:90:
bc:f3:0c:e6:50:97:ae:79:64:e5:bd:e7:8b:98:32:
76:9b:2d:d2:7b:fa:15:b6:0c:40:1c:f7:ae:77:f3:
68:f2:15:e6:bf:62:4f:b3:5a:7d:7f:f0:4c:e5:89:
29:ce:26:1c:1a:e9:ea:0b:d2:47:94:d2:72:3e:cc:
33:5a:4a:7e:1c:f9:ca:0e:5e:35:13:40:d4:34:20:
37:77:56:57:fc:bb:2e:f0:10:53:47:08:e5:2f:2c:
27:dd:5d:ab:6e:06:3a:cb:f0:83:1d:e0:66:1e:c9:
c1:48:ad:ab:18:49:c8:b2:14:85:2e:f5:c1:55:c9:
5d:26:5c:6e:b5:0c:e2:b7:2d:2e:da:56:bd:3e:4f:
2f:54:b9:d8:bf:d8:fb:86:31:5f:9e:bf:a5:83:d8:
ba:e4:78:97:a0:bb:6c:32:d4:b0:ab:d7:ef:ce:99:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.4.0/22
IPv6:
2a0a:81c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202837
215403
Signature Algorithm: sha256WithRSAEncryption
10:05:5b:63:f9:ae:cf:3d:16:d1:85:3c:78:2b:c7:d1:a8:33:
b2:bd:20:4b:f4:46:83:51:fc:80:39:72:48:c5:19:d2:79:a8:
c6:ec:24:54:34:e6:77:3f:76:8c:1d:66:9f:e7:c5:91:98:5e:
fa:9c:92:22:b0:d9:4e:b1:b6:69:44:13:31:ce:ff:68:7f:30:
02:b7:52:a7:de:ed:72:4d:31:39:2e:d0:02:09:8b:d8:25:82:
e9:04:6e:7d:2b:f5:7d:2d:da:aa:71:5b:10:11:2b:d0:09:72:
93:8b:e9:9d:fe:9f:71:c4:38:7e:75:6c:fe:5d:91:94:29:36:
f7:84:21:d3:77:ba:fe:2b:0d:cf:66:fb:b8:94:69:0c:9b:10:
d2:fb:27:16:c5:3b:89:c6:2f:a5:31:55:f5:ce:09:1c:6d:92:
e0:a1:12:b7:f0:df:fc:44:a7:78:d9:3f:cf:72:a0:35:96:a9:
61:9d:bf:b0:3e:0c:24:a8:e3:7c:b0:ae:b0:bf:8c:ba:8c:5a:
ef:41:d9:9b:8b:a2:e9:60:1f:4c:95:79:df:6a:be:63:5d:ad:
c9:11:09:ef:f0:9c:cb:40:18:9b:15:5f:3b:58:6b:64:a0:5d:
9c:a2:a7:28:8e:14:91:55:aa:82:29:59:75:17:04:99:a4:38:
b2:8b:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:48:17 2024 by rpki-client on console-ams.rpki-client.org