Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer (raw, json)
Hash identifier: 9bWBJU/gvlhcfMaunFmLJkG8oKby7Im30gRtUa4r4O8=
Subject key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190E7990933C392E0F266FC82F88C0B75FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jul 2024 01:54:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60809
IP: 91.205.20.0/22
IP: 91.206.180.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e7:99:09:33:c3:92:e0:f2:66:fc:82:f8:8c:0b:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 25 01:54:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:b0:86:fc:ee:57:44:26:f1:a1:e5:21:ff:
df:ec:dc:fa:9f:e4:18:49:55:c2:b2:53:a4:64:36:
9b:f0:5e:69:e2:86:b8:2d:39:27:16:de:8c:96:0a:
92:1f:b7:8c:48:86:22:6f:ee:27:8d:e8:d3:83:3f:
c4:a8:c9:fb:da:fe:ec:9f:14:8c:dd:8f:46:aa:b4:
51:fe:06:e2:af:15:2b:48:7b:4a:dc:2e:f4:8d:5e:
34:ee:16:88:98:b4:f2:28:95:76:1c:f2:b2:8b:33:
d8:f5:65:c0:06:f0:b3:25:63:8c:dc:4e:b4:4c:7e:
a7:63:44:79:20:ca:ef:bf:40:7f:f7:94:ef:20:43:
68:0e:ce:db:f9:f9:a5:b8:9e:b6:7e:62:d8:80:9b:
ff:f3:e9:02:b4:47:44:72:c4:0b:2c:19:a9:f4:c9:
78:f4:c0:7c:32:f7:ff:c0:fc:b8:cd:0e:b8:f4:ba:
70:dd:6e:97:6c:32:c7:91:c3:52:b7:b6:9a:83:46:
f0:b9:c3:93:73:3a:56:57:93:c4:f8:6d:8f:3c:37:
72:a6:72:2d:ca:80:15:05:0d:54:e3:22:4f:c1:8b:
d3:3e:95:de:68:da:c5:fa:82:79:8c:7f:b1:7a:60:
03:86:41:70:3b:2f:2b:fc:03:be:ab:b3:ff:78:78:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.20.0/22
91.206.180.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60809
Signature Algorithm: sha256WithRSAEncryption
72:e8:8f:9a:57:4e:2b:ce:dd:81:3d:2b:1b:4e:46:df:c8:a9:
39:47:69:dd:b5:7c:ed:da:00:4c:5a:a7:4a:2c:06:e3:45:18:
00:aa:04:a8:d3:74:45:7b:14:40:a1:17:3d:16:0f:5f:af:9e:
cb:a5:84:29:86:1d:d0:b9:4e:c8:f4:8e:bc:74:d3:7b:fd:3e:
6a:28:e0:f3:e1:70:95:0b:a1:a2:72:a6:2d:c1:e6:0a:89:97:
6f:01:cb:06:11:8e:62:61:3f:5b:18:cf:8a:69:7e:4c:d1:1c:
cc:dd:b0:49:4a:3e:2d:0a:8b:ed:96:7a:e2:ab:32:32:35:25:
26:a8:ef:d6:c1:36:e5:28:a9:1e:92:cb:e9:e6:d8:d7:a6:d9:
b7:e2:b4:54:9c:5c:55:05:87:ff:9c:72:26:e6:bd:d0:21:58:
ba:f2:7b:92:22:63:19:90:56:89:1c:3e:af:20:5e:33:a1:5e:
e7:6d:00:db:66:57:a5:2f:59:50:72:9f:4b:0a:95:31:5e:0f:
d4:dc:b6:5d:ee:b9:e2:18:d2:1a:f4:db:bf:19:d8:1a:af:ca:
96:34:a4:01:79:97:b3:5b:8a:0f:4f:ee:96:c4:6e:98:32:7a:
2e:00:5c:95:e3:cf:50:88:f8:5b:3a:af:cb:77:55:07:16:37:
05:5c:f2:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:42 2024 by rpki-client on console-fra.rpki-client.org