Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
File: Jo9QG7-eE83S64mdlxIfZpqikTU.cer (raw, json)
Hash identifier: om5L54w4sPjTnFYtJhH0T5HAYQwqMgz8q91aBqkvEs8=
Subject key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC622E245728BC714C6E130AA25FDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.234.36.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:62:2e:24:57:28:bc:71:4c:6e:13:0a:a2:5f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:20:11:e9:31:0d:75:62:88:e4:33:4b:42:
4e:41:8f:f7:e8:cf:9a:fc:8c:c3:0e:dc:27:06:53:
b0:4e:0d:25:03:5b:cf:3c:d0:08:3a:34:5d:7c:e5:
97:d4:5d:a2:94:93:94:7d:42:cc:d3:4b:bd:20:b1:
9d:53:d1:b6:53:a0:ba:3a:c9:08:21:09:27:f7:81:
bd:59:8c:e8:3b:7a:01:a7:b0:2d:db:31:c7:1a:18:
9d:2b:31:26:67:0f:16:e9:ee:20:c9:c0:0d:6e:65:
02:36:cd:c8:bc:26:ea:e8:65:aa:cc:4d:92:85:28:
d0:ed:36:60:76:a9:37:73:15:c9:d4:ce:ab:d3:aa:
6e:91:73:07:94:22:d7:33:b8:b1:f0:f2:f5:47:9e:
43:1a:70:76:44:12:b3:2f:65:e0:fd:41:55:b4:0b:
48:e9:d0:8d:84:86:3f:f0:8b:89:2c:08:fa:f3:a6:
d4:f0:45:e7:be:d9:7d:4d:6b:6e:e8:4b:05:7c:ad:
1a:26:56:ce:94:4c:6d:5a:8b:48:a9:cd:62:59:38:
18:e5:9e:79:aa:7d:14:1a:ae:13:12:30:b9:b7:d2:
ce:61:7b:20:de:b5:bd:14:46:3b:de:ef:f7:ad:73:
6a:7c:03:8b:96:36:bc:3a:ee:44:66:1b:39:f7:23:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f7:30:ca:39:d6:2f:83:e1:dd:1d:06:a5:a5:49:bf:12:89:
fa:81:c7:9a:52:f0:fc:fd:85:19:74:05:1a:be:f0:fa:40:0f:
4f:5d:6f:cc:ab:81:21:9b:1a:50:33:a7:dc:18:84:65:0a:0b:
f5:5a:77:e7:90:0b:d7:bc:57:85:3d:93:23:9a:3c:21:09:1d:
c7:de:a8:f5:d4:e4:b3:89:21:ae:83:93:ac:ef:9c:08:06:7a:
df:0b:09:d9:8e:d0:99:79:1e:0f:65:71:13:f0:e2:94:fb:32:
77:cd:23:df:3e:42:9e:92:41:79:24:b9:5f:b0:9c:c2:e4:51:
1a:1b:c5:8a:cf:27:b5:18:26:17:1b:64:e5:a3:3c:b4:33:76:
fa:7a:ef:dd:56:8e:b9:2a:6f:61:5b:6b:4f:fe:f9:05:07:9b:
e8:49:78:53:1e:20:f3:f8:3b:53:d6:e5:fd:9d:52:be:7e:c4:
90:f1:6b:21:fd:83:23:c4:7e:85:87:11:b9:93:5c:97:63:7d:
cb:00:85:87:d5:89:e5:0c:ed:c5:78:7b:c1:b8:a8:67:f3:c8:
7b:fd:0f:87:e4:f2:a4:f3:8f:c9:07:71:55:2f:5d:a7:a5:1e:
9a:d0:6e:69:0c:67:f5:19:97:0f:4d:9c:2d:85:23:78:5d:54:
e3:59:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:41 2024 by rpki-client on console-ams.rpki-client.org