Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
File: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer (raw, json)
Hash identifier: xy/I5wa5YkOmOGud7Mx8+srVmj8AuPZhJEMescNxoTc=
Subject key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F779906F20467EE2E2A77E4562F4CE398
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 May 2024 14:54:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199548
IP: 185.64.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:99:06:f2:04:67:ee:2e:2a:77:e4:56:2f:4c:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 14 14:54:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=265e85f8262888b54a849bdcf4cec50316911a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:42:be:45:dc:91:0d:0a:1a:a9:bf:90:9e:
36:fd:6d:7d:b2:7f:12:3a:f5:45:51:04:73:c1:82:
c3:e6:1e:c7:04:18:91:e6:ee:a4:e6:2d:ae:c2:d0:
3c:aa:be:68:9a:4b:b5:81:55:5d:0c:db:2d:63:0d:
9e:12:06:43:17:fa:63:92:8a:42:64:89:1e:94:b5:
28:f4:e8:5d:13:f2:06:58:29:a3:03:80:ba:c9:71:
a4:57:02:47:a6:6b:a8:7b:40:a2:84:34:8a:3d:3c:
8d:2d:e6:ec:8d:b8:59:28:0c:5a:0f:d4:ca:f0:d3:
6f:8d:95:ad:8e:b0:ff:b1:3d:5d:d2:0e:e7:79:5c:
9d:9b:4c:43:22:ce:ba:6c:fc:2e:59:f5:a0:b7:2a:
8c:ee:c8:e7:df:22:a9:f4:17:9b:8c:08:5a:70:3e:
06:5c:b7:06:f0:a1:67:bb:5a:c1:ba:f6:de:7f:74:
72:4d:46:2a:7d:36:72:0c:20:2f:76:c3:70:2f:24:
ae:c9:59:a2:bb:2c:dd:61:5a:93:87:d9:fc:3a:12:
7b:2e:a4:8f:09:6f:8f:cf:87:ef:a3:26:24:ab:ad:
92:2d:11:a8:9a:3e:74:8c:77:ca:77:ee:de:19:31:
90:23:22:95:b5:da:1f:6d:8b:da:e7:31:9e:4c:44:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199548
Signature Algorithm: sha256WithRSAEncryption
13:8a:fc:8e:f4:de:a2:50:b2:47:fd:cc:e1:94:c6:b4:06:e2:
71:d3:ad:9c:01:ec:46:26:eb:0b:72:9e:c1:fc:36:2a:74:b2:
54:20:44:e4:0c:3b:44:1c:6f:c0:ee:cf:c3:13:7c:d3:9b:6a:
5a:57:1a:46:c4:df:8a:30:f1:ff:35:5c:91:7e:aa:56:c6:25:
6d:e1:21:c5:73:72:c8:ca:24:9c:ce:f3:9e:e3:e8:92:cf:c2:
d7:54:6b:5a:0c:a3:0a:46:d0:2f:ac:f1:45:ad:f6:c5:2d:b2:
5a:29:32:09:f5:df:fd:da:e5:44:26:33:a7:e2:a8:1c:33:22:
28:ea:7f:bd:7d:7d:38:ae:54:99:21:42:48:5a:05:6c:f1:93:
86:f7:34:b0:fa:5f:49:12:11:30:3c:9d:34:02:1e:af:ce:0d:
c5:3d:6f:74:1c:c7:25:69:42:f9:99:fa:f4:bc:7f:d4:7b:2a:
56:87:43:c2:e0:9e:67:28:c4:23:2c:dc:f4:89:a8:8a:b5:04:
97:69:f1:b3:a1:ba:a6:c8:8e:78:18:db:44:66:a8:07:87:fc:
10:df:b1:3c:6d:8b:0a:6f:b7:5c:a4:41:65:2b:26:1b:74:fc:
93:bf:66:a1:4f:61:c5:67:e5:81:c5:fd:ac:de:d0:3b:de:4d:
d2:04:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 04:48:28 2024 by rpki-client on console-ams.rpki-client.org