Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer (raw, json)
Hash identifier: h59zgH7xOrsk76z8gwW3CBav44YLKD61YM1KuGV/OgI=
Subject key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B738846EC8733472C4D54F70AE06BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.109.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:38:84:6e:c8:73:34:72:c4:d5:4f:70:ae:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:2a:e5:63:c3:6d:23:7a:1f:db:d1:d2:59:
5c:e9:b4:84:ce:c6:c9:b4:6e:71:ec:71:73:b8:ec:
1c:04:1d:e4:84:c3:46:10:6a:98:14:1c:f1:67:85:
a8:85:94:69:74:bf:98:08:9f:b4:b4:13:61:75:be:
4d:7b:f5:58:2e:63:5b:29:3b:08:e4:4e:3b:bb:b7:
6e:73:0c:16:a5:da:34:89:bf:9b:0e:a7:db:bc:35:
83:67:8e:fa:53:ab:a6:30:44:42:2f:5c:41:36:49:
33:6d:5e:66:5a:61:c8:4e:d6:d7:ac:0d:48:ed:bb:
ca:39:8d:b7:1c:8c:d2:c7:d0:06:f4:fe:7a:4e:e7:
b9:3d:47:65:0f:b5:bc:6b:79:84:64:a5:55:58:ff:
af:f5:e6:07:1f:5a:fe:6c:d0:85:18:4d:bb:35:38:
18:74:bf:59:a9:03:b1:51:12:61:b8:7a:ff:74:62:
5c:b3:98:b7:33:2a:a7:9e:0a:cf:54:d5:86:70:70:
38:27:71:70:8a:0e:0d:a5:7b:ce:b7:8f:e6:65:02:
80:db:a9:17:40:1f:eb:dc:86:74:6d:37:48:94:7d:
9b:17:cc:ca:af:34:22:67:3d:30:8f:f7:2a:96:95:
49:36:ed:a5:54:9a:c7:0d:45:27:11:0c:14:4a:c3:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.109.0/24
Signature Algorithm: sha256WithRSAEncryption
94:de:6b:82:2f:9b:e9:1c:d6:8c:a9:b8:19:73:77:c5:b9:64:
ce:4e:16:9c:9c:0b:8f:9b:1c:98:0b:39:c8:20:00:15:fb:0f:
55:a3:31:8e:fa:60:f2:3b:19:62:50:3e:84:8b:f5:99:0f:01:
7e:64:85:16:15:5a:2c:a7:3a:26:65:d7:30:7a:b0:2e:a1:bc:
f9:67:14:54:0a:b1:02:51:18:35:85:9d:47:f4:1c:cb:d1:34:
09:30:42:b6:e4:94:05:9f:66:69:07:4c:c5:ec:56:09:c5:e6:
57:72:06:e6:57:16:1e:b1:1a:e4:cb:ea:7d:c5:17:6e:a2:61:
ae:ea:27:ed:98:75:06:d9:00:c1:79:5c:4f:dd:61:89:e6:a6:
34:6f:f6:15:7a:4a:20:9e:7f:9b:6f:1b:56:2f:60:d2:61:0f:
b8:ed:e0:ac:00:c9:96:b2:da:a9:e8:c2:3c:2a:64:6d:aa:07:
0b:0a:30:b0:e3:ee:ea:17:1b:a7:be:ee:74:86:c8:28:8d:13:
eb:06:27:64:69:57:56:d5:33:52:e2:6c:a9:cc:df:9b:f6:5c:
e5:0f:a5:90:0e:4c:b4:65:f9:ff:27:b0:64:84:33:88:8f:9f:
b1:05:ec:d9:ac:e5:c0:ff:d8:8b:46:e5:01:c7:83:c3:98:03:
ed:f4:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:01 2024 by rpki-client on console-fra.rpki-client.org