Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.cer (raw, json)
Hash identifier: hbU92ReY7Vxv+P2UneNvuRAYqpd2QrkTC4Nge0E/DAI=
Subject key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99AAE2CE2035C6A607B637A9A9B2AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.236.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:aa:e2:ce:20:35:c6:a6:07:b6:37:a9:a9:b2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:51:ac:81:78:e8:34:21:87:94:b8:8b:d1:
e1:3d:28:33:4d:a2:c1:92:cf:8d:20:94:14:ac:1b:
d9:d7:85:35:9d:5b:4a:7c:87:a3:2b:34:b2:f8:31:
85:ad:db:4b:6a:02:90:cc:b4:8a:91:aa:9a:f4:21:
fa:e5:03:8b:7b:a4:be:44:5c:35:77:50:5a:4e:c3:
f7:38:56:df:0c:8f:1d:ed:e5:7b:a8:d1:2a:97:3a:
b6:7c:e3:f7:15:5a:52:c8:62:11:8a:3c:d1:51:3a:
9f:bc:43:07:d3:11:99:26:29:4a:e6:c7:20:c6:8e:
e7:fd:d7:2f:a1:7d:a6:c4:b2:80:55:fb:5f:cb:88:
c0:3c:b1:c3:26:38:71:71:71:cb:b8:93:cb:29:da:
3b:6a:63:06:fd:fe:7e:79:ed:d3:df:bf:13:8b:cb:
31:df:c0:b9:da:b9:ba:bb:7f:bb:cf:89:7f:85:bc:
c6:ad:d3:43:a1:d9:c9:cf:7c:63:25:dd:0c:3d:91:
a7:f7:fd:1c:d4:1f:f5:40:11:b0:75:72:20:57:b8:
31:fd:6d:dc:f1:0e:9e:88:9c:cc:94:d5:80:53:28:
be:f9:fa:18:be:36:78:34:14:dc:7d:7a:9f:4c:9c:
a3:31:d6:38:63:be:73:af:2e:04:8a:64:b0:f6:14:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.183.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d1:0e:34:1f:78:2c:e1:dc:6d:01:2a:b4:5a:49:cb:e6:57:
da:52:29:f6:64:67:f9:17:29:b6:86:0f:64:22:34:9a:e9:06:
e2:16:3a:1f:8c:b6:5e:c9:0a:3c:e3:39:54:eb:c8:dc:ec:74:
d5:fa:de:4f:ad:4d:40:bf:bd:59:a7:66:b3:39:95:70:8d:08:
b6:7b:f7:c1:a9:d7:93:4e:b8:85:94:1a:26:c0:09:ae:3f:15:
bc:2d:55:3f:c0:e0:31:60:81:56:a9:02:05:cb:a9:57:8b:06:
92:3a:dd:c1:6a:0a:47:1f:2a:ff:ea:57:c3:c5:c6:c0:c8:96:
46:af:ec:bc:24:1d:e6:27:64:77:24:c5:f0:99:37:b2:22:b7:
b4:45:28:c8:1d:72:86:ad:1d:32:10:1e:9e:ee:90:58:dd:d4:
d9:21:4f:9f:a1:1c:69:24:60:ab:1c:99:46:cf:95:52:7b:0f:
d0:7d:26:e7:05:af:15:82:ef:e9:d7:eb:2b:35:21:7a:2e:e7:
7b:e5:f5:21:f0:22:97:58:45:dd:0b:18:47:98:c9:b6:68:f7:
15:8d:11:ed:b2:eb:38:a5:ed:e7:64:12:15:80:07:ed:3c:2d:
ec:d5:2d:1a:a9:0d:18:e3:b8:62:5f:b9:d0:26:aa:b0:a2:de:
60:4e:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:43 2024 by rpki-client on console-fra.rpki-client.org