Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
File: JY9ajila0de0ih4RlYeQBStXolM.cer (raw, json)
Hash identifier: DEqTsJvacpH1J2leenCS/RU9jQe0dJwBAwrP4o2VXKo=
Subject key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6269A9652D0A57155C23A74C42CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8255
AS: 25117
IP: 145.226.0.0/16
IP: 185.228.228.0/22
IP: 2a03:7780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:62:69:a9:65:2d:0a:57:15:5c:23:a7:4c:42:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:d2:58:c8:ff:cf:85:c1:81:c5:3e:cd:64:
4b:e7:f9:c1:28:6d:03:9b:57:67:8e:be:f9:1b:1b:
0f:7d:90:6d:23:89:ce:c6:58:73:47:98:93:cb:1f:
e1:15:3a:56:95:ba:b0:bb:89:72:dc:fd:0e:90:b0:
cf:27:6f:3f:4e:f2:6d:be:ee:c6:1e:25:75:70:07:
43:8a:87:dd:58:70:13:7b:24:0b:dd:ae:c6:a7:87:
bb:ac:28:7a:de:ab:ee:04:d6:30:e4:6d:ea:52:d6:
65:df:ae:36:81:f4:fd:18:53:55:9c:38:b4:16:7a:
e7:b8:40:78:8b:ca:c6:f5:b8:18:5a:b3:09:ee:a2:
65:9a:fb:78:8b:10:22:61:2f:91:4b:f4:97:89:b7:
2c:d4:a5:48:ae:bd:f4:d3:05:3b:5f:6c:ae:cf:fa:
6c:c2:60:a1:3d:23:6a:d3:39:f4:89:21:18:df:81:
de:1f:f6:0f:21:e9:b5:7e:3c:b3:05:63:81:e7:af:
ab:a3:95:bc:22:03:32:51:ea:55:b1:d5:91:7d:d4:
75:c0:08:89:f7:ae:12:57:51:b4:18:69:7d:bf:d5:
36:f0:b1:d4:ea:4e:2e:72:ab:d8:2f:1b:a1:65:63:
72:a4:b1:04:37:93:fd:7c:9a:6b:d9:99:37:c6:5f:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.226.0.0/16
185.228.228.0/22
IPv6:
2a03:7780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8255
25117
Signature Algorithm: sha256WithRSAEncryption
3a:e0:39:cb:d5:ef:c9:8a:31:3f:73:54:8f:83:55:49:1e:f9:
a5:04:50:28:21:9e:6e:1a:cb:b9:9d:71:64:50:30:c3:46:38:
91:32:34:81:0c:aa:c0:ef:48:d3:87:ca:a9:51:a5:3b:df:cd:
74:51:6f:5f:c9:23:3f:d3:dc:ec:88:71:bb:71:4b:2e:4e:a1:
b3:cd:93:c0:4a:2b:2f:f0:8d:9a:5a:f8:44:7b:da:0d:73:14:
c3:8a:21:14:e7:1a:12:59:42:f4:3d:17:d8:11:39:59:28:c5:
e3:29:d1:6c:ea:8b:66:d5:39:3e:34:9f:d9:2b:7c:51:07:98:
ac:30:87:5c:d2:f0:0a:31:98:8e:db:c2:85:7c:9f:20:31:08:
6d:09:41:81:53:09:fc:47:36:f1:8e:52:54:e1:9a:cd:9b:00:
03:78:8e:1b:c0:ae:c3:1e:ef:a2:38:b4:95:d7:05:c7:10:dc:
5a:2d:c8:a9:3c:9d:94:ab:81:00:01:af:e7:6c:21:d3:0a:77:
66:68:5f:8d:f5:31:1e:7a:c3:81:b4:2d:c1:ab:74:ed:34:f8:
98:8c:c0:55:de:99:7f:7a:12:41:86:f6:f5:32:fb:17:a5:92:
ed:64:30:3c:16:a9:3c:ac:53:34:d9:9d:39:3d:73:34:49:d0:
87:54:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:27:56 2024 by rpki-client on console-ams.rpki-client.org