Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.cer (raw, json)
Hash identifier: lDEjyWow/kt4KMijlrzdTI1ZaSZlYs/cvdUdOYz2WrY=
Subject key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56F058A4F4D88226A3A77D16076C3E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.245.64.0/22
IP: 2a0d:4d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:05:8a:4f:4d:88:22:6a:3a:77:d1:60:76:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:27:5e:ca:0a:c5:16:58:f8:65:f3:f9:49:
a5:3c:6d:33:5f:48:22:f9:94:68:97:09:24:94:33:
27:d4:a2:7c:f2:ca:f3:7f:04:67:32:71:94:3d:10:
48:1f:5f:d3:fe:f4:12:4a:c5:76:e2:96:57:42:35:
79:59:9c:d4:26:1a:bf:a3:3c:5b:22:cc:21:fe:a5:
30:80:6a:83:1e:55:77:ab:ca:72:60:38:01:fe:f7:
7f:28:84:53:08:5d:82:f0:de:c4:c5:4b:4c:ba:0a:
ba:0a:16:6e:09:79:d5:c2:e6:ee:3d:e6:4c:4b:30:
7f:f9:90:aa:be:86:08:99:e3:91:02:ff:86:07:35:
44:50:f4:bc:0a:25:3f:23:92:b3:cc:3b:c5:19:37:
41:02:44:3a:e2:b9:c9:a6:50:a3:07:69:97:08:bc:
0e:5e:b2:19:cc:ba:06:44:d9:d1:50:9f:e6:71:0a:
9f:38:4d:cf:ab:64:0c:0f:ec:ac:69:93:48:b6:28:
d5:0d:a8:9a:97:e6:5c:6c:18:7a:28:08:0a:1a:ef:
e8:22:d8:6c:75:b2:e9:66:b5:47:e8:95:33:69:b0:
0d:29:e8:bc:11:cd:c2:f8:c0:86:da:fe:48:74:63:
61:c2:2c:00:1e:d9:da:d0:4f:98:c1:e5:76:3f:74:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.64.0/22
IPv6:
2a0d:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
34:48:bf:08:7b:d8:1c:12:d6:3c:a1:26:b2:94:32:96:2b:88:
e9:9d:82:75:61:c3:e2:36:65:84:de:6f:e5:c7:81:08:38:2a:
09:79:25:c7:ba:5d:ab:12:04:9e:2d:57:cc:10:3c:21:45:36:
ff:71:fb:56:00:d6:9e:fc:41:10:cb:19:fa:78:81:47:19:1e:
c4:13:c4:de:db:0b:5c:54:7e:1b:87:a0:b9:75:cf:03:3c:77:
51:6c:33:42:74:ef:d0:13:28:31:2d:c0:f8:c4:39:e0:14:f1:
45:aa:60:34:ba:8b:8e:a2:ed:dd:62:05:dd:88:05:e9:a3:7c:
f9:76:40:46:9a:b8:d6:fb:87:ee:d5:1d:1c:2d:4a:f4:47:7d:
63:02:11:32:f0:17:64:64:e9:91:eb:1a:a7:25:c4:60:05:5f:
e2:36:f1:53:88:d2:6d:ad:ca:b0:9b:60:b8:22:c3:12:2b:5a:
94:3f:42:fc:5a:f1:ff:17:f0:3c:3a:a4:95:8c:8a:d0:d2:6d:
1a:c7:bd:49:9b:55:f0:ae:5d:13:d6:68:8e:ee:84:ae:29:98:
47:c1:f5:38:dc:4c:78:ea:0f:ef:25:f5:f2:f7:ab:9e:de:ff:
56:61:fd:15:0e:b0:e9:4c:2d:2b:09:e0:43:e0:39:b4:23:e1:
c2:59:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:55:32 2024 by rpki-client on console-ams.rpki-client.org