Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
File: JWvhdrMT4aigUPZwr1dncbZV1hE.cer (raw, json)
Hash identifier: r0W6fXgk56pAOE/0i5iDqkfZ+zcOPE8+n5ha95A0tZs=
Subject key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7932A9E3F52FDA3DC6BB697F582CDA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.145.64.0 -- 5.145.103.255
IP: 185.74.144.0/22
IP: 2a00:d2a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2a:9e:3f:52:fd:a3:dc:6b:b6:97:f5:82:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=256be176b313e1a8a050f670af576771b655d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:21:33:28:cf:be:7f:d6:ff:60:30:7d:e4:
55:f7:f7:c8:f1:b1:d0:06:bc:eb:b2:f2:72:57:da:
45:9d:84:05:72:5e:d4:74:c3:29:f2:6e:86:b8:6f:
63:1c:a8:78:c5:49:75:a8:67:2e:92:1f:fe:71:df:
54:b7:2c:6b:a1:a1:63:26:7d:6b:ca:54:d1:93:81:
60:1f:3d:32:a6:5f:2c:8c:b4:d0:74:be:7e:ad:d1:
30:70:77:4d:ee:57:15:de:93:fd:67:4d:86:43:2f:
ba:c3:fd:54:27:cc:8e:cb:e2:5a:18:c4:c0:6e:c9:
6b:5a:56:a9:90:74:b9:19:d8:f6:0e:c5:61:1d:78:
e6:18:ad:50:bf:cc:d5:e5:06:8f:62:0e:ab:29:cd:
e4:5d:f6:0f:54:2d:90:7e:3c:5c:df:5b:dc:78:43:
60:76:c6:92:45:3d:43:26:49:d9:f5:7b:70:40:3d:
58:97:64:fe:c6:6c:66:d3:b6:de:62:50:48:a8:6c:
87:c3:07:c3:eb:82:00:05:1c:42:95:db:b4:4a:04:
ce:25:c2:ed:64:f1:e2:01:97:82:a2:9d:7f:5f:63:
c4:66:cf:6e:e1:f8:8a:7f:0b:7b:d6:59:57:e1:d6:
f9:8c:9c:4c:de:10:32:e0:72:93:d4:d6:09:bc:a3:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.64.0-5.145.103.255
185.74.144.0/22
IPv6:
2a00:d2a0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:7f:73:89:da:01:f9:46:05:d2:61:d1:28:56:1e:60:0b:3f:
6b:31:98:06:77:55:2a:37:48:54:7d:69:64:e2:36:db:c6:36:
80:67:15:63:4b:25:f6:51:01:d1:79:1d:09:4d:3c:68:83:09:
bf:c8:69:e9:f5:9e:71:68:1d:d7:04:70:ad:d0:ea:cc:41:f9:
f1:48:c3:4e:9a:12:f9:39:24:a6:5c:a9:00:39:c6:64:83:1a:
89:a2:8e:84:95:d2:74:f3:4f:0a:c5:df:dc:f6:fc:c1:6a:92:
6a:82:83:f5:87:2a:05:d0:b6:55:5e:2d:be:10:59:97:26:d8:
99:6d:8a:f8:86:6b:53:f7:f6:d8:7e:eb:07:11:55:42:35:fc:
e5:2e:9d:fe:86:e1:6c:f8:3e:88:fd:25:c8:4e:9f:5b:44:50:
cd:c8:07:5d:8f:e6:a7:2e:6c:cb:ed:07:74:bb:e7:d4:64:7a:
75:8b:3e:81:1c:76:b1:4d:e5:45:19:9b:ce:20:b0:c4:ac:5e:
40:76:61:ea:b2:78:93:e8:21:82:c6:ba:90:26:de:41:d7:18:
d0:9d:fb:d0:50:58:3a:db:36:0d:e1:9c:14:14:61:b7:bf:d8:
84:6f:70:2f:7b:9c:8c:70:fc:95:08:d6:6d:7f:e4:fd:b2:72:
dc:95:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:48:17 2024 by rpki-client on console-ams.rpki-client.org