Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
File: JcX73HIgV6ZfqduxF_xL33LtwKc.cer (raw, json)
Hash identifier: NgIXCBUCjHl3syDRblyaRK3W3bEqXxOSJcOdifCI5yc=
Subject key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E278FF221380250FD42BED881D08B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.212.92.0/24
IP: 193.37.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:27:8f:f2:21:38:02:50:fd:42:be:d8:81:d0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:f1:ab:d3:95:8c:05:00:cc:40:64:40:6f:
bd:f9:fb:58:3a:40:ad:e6:e6:60:27:28:d5:7a:91:
8a:02:24:15:fb:1e:6b:b2:fa:ab:26:4a:32:9b:01:
e0:f2:5a:db:38:de:e4:2a:07:23:d0:f4:e5:98:f3:
50:f9:d6:f6:c4:a6:9b:81:a3:a9:e2:aa:d4:63:a4:
ed:63:42:82:f9:a1:1b:eb:62:61:f2:9d:ca:ba:cf:
bc:66:8d:ba:88:0e:f6:6b:b7:eb:9c:a9:27:02:d8:
87:37:14:3a:c2:fa:87:e1:62:ad:46:48:03:87:57:
7c:2c:b9:d9:d9:35:31:2c:d8:1b:15:18:70:7d:cd:
9e:bb:20:40:8d:a7:19:30:05:ec:21:3b:f6:d2:96:
c2:0c:f7:d1:a9:01:46:ab:3e:20:b5:f4:6b:3c:42:
a0:6d:6c:ae:03:17:95:fa:0f:7c:7e:90:a2:d7:19:
78:81:09:22:2c:0d:ca:b3:f2:08:2b:33:54:5c:7c:
f0:ff:76:2d:5b:64:e4:ad:ac:37:b6:5d:41:0d:bb:
d6:00:a7:63:61:b0:b0:b8:c1:51:94:21:b6:69:f1:
7c:49:1f:b2:e1:8c:02:94:db:af:17:8a:72:8c:bd:
44:74:2b:dc:88:f7:b9:d8:10:f4:6e:97:78:55:f4:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.92.0/24
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5d:5f:4e:e7:8b:04:6e:33:af:ec:cc:55:17:54:04:fa:23:
d3:39:d4:ce:5b:5d:e4:2e:a2:a8:6a:c0:f2:34:07:6c:8e:c0:
47:20:84:76:a7:a7:a7:9e:a9:10:cc:c7:b7:40:89:e1:dd:a3:
b9:8a:67:bc:d3:ea:7c:58:3f:ab:b4:12:69:aa:9b:06:3d:83:
00:32:4d:92:a2:37:29:80:4c:5f:d6:b8:2f:83:ee:c9:2c:92:
d0:85:9c:57:59:b2:1d:b0:dc:ff:14:cc:5a:4b:49:a6:ef:9b:
59:77:46:9f:ed:52:00:9f:9b:b2:00:6c:02:b4:b7:5e:0b:ec:
bb:ba:b1:ab:e4:8c:de:5b:f9:b7:f0:91:61:d1:4e:97:b7:9d:
8a:27:9b:b1:a8:a4:52:09:a7:92:4e:7c:3f:30:7c:40:e5:8c:
29:5d:9b:41:d5:2a:9c:b0:96:5f:e8:d6:1c:3b:54:80:62:35:
86:a5:ed:10:06:e5:92:98:a0:95:e0:5a:1f:3b:f7:00:23:35:
44:ee:03:b3:b6:22:75:2d:7d:66:66:25:46:a1:88:ec:b5:0e:
32:a7:44:93:b2:b4:a0:59:a0:86:a3:6a:13:62:3a:ee:53:db:
11:9f:8e:cf:02:d7:bf:b6:4b:7f:db:82:0e:6b:94:d6:60:8c:
47:41:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:40:18 2024 by rpki-client on console-ams.rpki-client.org