Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
File: Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer (raw, json)
Hash identifier: 1giL9EjKIQNnYSdcvxWfyTaDiTdb30/jOjv3J+3gWDE=
Subject key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A16A7D413E4B8FB714D0FD84C5EC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47482
IP: 45.66.32.0/22
IP: 2a09:61c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:16:a7:d4:13:e4:b8:fb:71:4d:0f:d8:4c:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:ea:44:e3:36:7e:0f:21:cf:ad:f4:67:2b:
50:2a:03:35:65:50:f1:f2:c0:31:74:6e:17:28:8a:
86:22:d7:b9:1d:fa:84:6c:8b:f0:2f:de:ec:fc:df:
e0:fc:05:a1:52:95:f6:68:95:02:8a:0e:81:b9:ba:
03:02:31:35:8d:13:e3:7a:7b:85:49:f0:79:7d:b9:
4b:af:54:d7:87:f6:4a:0b:d4:e9:2b:88:51:60:fd:
0f:23:c3:35:8e:35:3a:cb:95:84:0e:da:90:df:26:
bd:13:d1:cc:71:f7:5e:8c:42:9c:fa:6d:cc:ff:72:
7b:ed:28:74:52:0a:e0:ed:d1:91:ee:73:82:c4:d2:
a7:c8:16:0b:1c:22:92:cc:8e:f6:a2:2f:00:b7:d9:
2f:80:9d:bd:1e:e2:55:dd:e6:d4:81:ef:87:ac:48:
12:0f:7d:a3:d2:ad:99:c6:2c:ce:d3:29:65:cb:38:
ee:03:66:d2:40:eb:72:dd:2e:40:1a:90:59:5e:e4:
2d:7b:0e:f4:dd:7d:da:97:77:9e:19:d2:0f:74:7c:
e7:80:19:42:00:83:8c:ba:fd:aa:69:95:87:25:79:
d5:e4:5e:71:80:f0:fa:00:85:61:d8:32:a4:ff:0a:
76:93:28:2d:13:11:f0:7d:06:56:c8:2b:f4:1b:9a:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.32.0/22
IPv6:
2a09:61c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47482
Signature Algorithm: sha256WithRSAEncryption
6e:e0:aa:11:19:b6:99:e4:62:fb:69:ad:52:2f:ed:52:5c:cb:
eb:97:6f:e8:e0:38:54:fb:41:6c:ce:24:f8:c4:a3:d9:3b:4a:
de:1f:6d:04:16:cd:66:a2:e0:7f:56:50:fb:39:a0:11:1f:82:
51:9b:96:c8:ad:67:93:74:e7:8c:8e:9a:a7:45:50:cd:05:d2:
56:c4:f7:d5:7a:97:ba:c3:e9:b8:16:46:ec:db:fd:ac:50:67:
62:e4:14:22:a5:59:dc:f2:94:eb:94:9d:47:2f:21:de:96:16:
07:fa:e9:aa:19:0f:4a:bf:6a:f1:6c:7e:3f:29:d3:f2:60:ad:
45:e4:ae:bb:80:49:17:21:41:2a:09:66:d1:8c:b8:b3:65:ec:
1c:2f:6f:68:bb:00:19:4f:de:29:79:e9:44:53:ca:8b:c8:ed:
5f:00:f5:26:ac:44:45:9a:f8:dc:f8:63:49:7b:fc:a0:08:f9:
d7:a2:13:21:2a:2a:05:ee:bf:f3:47:b3:e6:b3:50:99:ee:af:
fd:28:60:33:ca:76:de:bc:72:ed:64:a0:13:5f:bc:37:0d:cd:
73:f6:d4:25:4f:d4:67:f8:bc:ec:18:1c:89:55:a9:19:97:b3:
53:9c:3a:dd:03:2b:6a:57:f8:38:90:7c:64:dc:62:75:8e:ec:
a0:38:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:39:17 2024 by rpki-client on console-ams.rpki-client.org