Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JmQ9Xo5785a-PNTesdkvYBtRFp8.cer
File: JmQ9Xo5785a-PNTesdkvYBtRFp8.cer (raw, json)
Hash identifier: E9vO8gO4PLUz8F8wl4WPu+2wdOqTWAVnsWH+yjJfFJs=
Subject key identifier: 26:64:3D:5E:8E:7B:F3:96:BE:3C:D4:DE:B1:D9:2F:60:1B:51:16:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42486F576C4862E1E43B1CDB4446D25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60403
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:86:f5:76:c4:86:2e:1e:43:b1:cd:b4:44:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26643d5e8e7bf396be3cd4deb1d92f601b51169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:19:f6:9f:fd:37:03:38:1c:2a:4e:ac:ba:
06:23:3c:01:58:03:62:8b:25:a4:cb:bd:5e:c9:b4:
67:74:54:ed:e7:8c:fd:21:da:c7:60:fd:b4:50:92:
25:30:fa:f3:f6:dc:41:47:d4:12:e9:38:44:fd:48:
3f:52:31:0b:e2:45:99:a9:de:28:b8:59:68:6f:1f:
ef:35:da:30:d2:a7:c6:b7:47:82:5d:76:ec:a0:bc:
ae:a5:3e:e2:40:5b:b7:ff:1e:cf:9e:bf:73:25:b5:
50:96:4e:29:79:e4:f4:ce:93:2f:63:31:25:ce:aa:
28:da:70:ad:71:e8:e4:27:14:d4:8c:02:2d:50:58:
06:49:22:47:cc:42:c4:e7:ad:65:25:05:c8:c7:3c:
f5:7e:30:15:f1:3b:6d:76:8d:ff:f9:ce:c3:ff:35:
a8:31:d7:79:5c:66:8f:a6:d7:b3:b1:cd:b1:ae:d5:
e2:e8:4b:24:b7:54:27:33:a9:d1:d0:08:cc:7b:13:
37:8e:63:ad:3c:5e:de:62:9e:c4:b3:dc:f3:96:1a:
de:56:8a:ce:97:21:71:70:71:f0:7f:11:87:15:76:
1e:b6:76:77:7a:31:f6:f2:4e:9f:8d:91:d3:e9:b5:
43:1e:e9:c7:70:03:e3:3c:3b:6d:b6:dc:2d:39:49:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:3D:5E:8E:7B:F3:96:BE:3C:D4:DE:B1:D9:2F:60:1B:51:16:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60403
Signature Algorithm: sha256WithRSAEncryption
87:16:89:d9:5f:09:07:e3:9d:f9:b1:85:33:06:9c:0b:74:77:
2c:88:68:07:e9:dc:1f:15:53:46:2f:53:cc:9f:c0:b8:ad:08:
0e:2d:6b:13:63:b4:47:92:c1:fe:6d:11:05:39:1b:22:9d:c6:
0e:2e:46:3a:64:1a:4d:c0:eb:7d:48:c1:2a:1c:e9:09:ae:66:
52:58:16:5e:08:e5:65:fe:05:db:e0:30:93:0e:fd:79:6f:1b:
d5:39:15:57:ca:03:15:da:b4:71:69:86:53:0b:ca:de:68:7d:
11:3a:0e:7c:d5:77:94:fa:2d:ec:0e:27:e3:58:58:e3:ee:a4:
09:7c:16:49:01:f3:16:45:34:5c:aa:bf:d6:88:df:64:bf:68:
49:5c:65:c3:9c:3f:68:5d:60:cd:11:9d:13:a0:e7:e5:6a:0e:
d0:47:b0:09:77:ab:89:e6:61:24:0a:75:0a:66:cf:e9:01:d7:
a8:5b:95:c2:86:f2:a4:da:51:32:ee:f7:50:8c:55:68:58:11:
69:07:c4:58:8c:e2:1b:9f:c9:c9:ec:32:b8:86:4b:19:1e:70:
d4:4a:da:09:b5:fe:72:ec:ed:82:a6:6b:92:ef:fe:e7:c4:33:
3f:bc:bc:ce:d8:7f:29:22:55:e2:86:b7:14:05:55:b0:a5:89:
34:72:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:04 2024 by rpki-client on console-fra.rpki-client.org