Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
File: JpildU3unu9vIkViy4I5rIvbBbg.cer (raw, json)
Hash identifier: vrlI1bkn9hbh6olnTYr66gOIEv3Sq3Wc8nx60OqUJTc=
Subject key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC501542A48EFD23DEA185731F419B2E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.167.80.0/22
IP: 2a0b:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:2a:48:ef:d2:3d:ea:18:57:31:f4:19:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:f1:4a:ab:9a:46:71:e3:7e:e1:3b:41:4c:
5f:7e:7a:92:e1:9e:03:b4:54:99:ed:bd:67:1d:84:
65:85:6a:24:51:6b:07:cf:8d:02:0f:6f:54:f5:72:
98:01:63:0a:76:ef:c8:34:c2:69:df:7e:44:60:62:
92:be:8a:96:78:d2:4b:ec:17:3e:65:19:a6:b6:17:
0b:f3:38:d2:8f:bd:41:66:a4:06:29:03:1b:6c:a2:
48:99:38:9c:e9:be:77:68:15:2b:aa:85:da:6a:44:
7c:85:d6:e2:0a:4a:84:90:ee:bd:4d:24:01:5b:b8:
20:3a:2b:be:70:85:ed:bd:93:22:47:d6:0b:c8:cf:
d7:1b:88:f6:67:37:14:25:1f:e2:21:77:d2:39:bc:
93:4b:82:51:a7:ef:97:55:11:99:ae:f4:f4:c1:77:
ae:bc:8d:a8:ef:d4:33:ec:af:57:67:c1:d4:76:66:
03:53:77:a7:46:ef:d3:96:24:aa:c0:07:b3:0a:77:
3e:45:59:31:94:7e:a2:ad:10:1b:f8:81:20:c2:88:
fd:63:20:6c:ac:66:73:c4:a5:df:22:e7:50:ff:e8:
c0:c5:38:22:31:d9:94:c0:77:aa:df:89:fa:a9:c1:
12:80:de:82:bc:31:dc:a4:73:12:e9:02:a5:01:ba:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.80.0/22
IPv6:
2a0b:5200::/29
Signature Algorithm: sha256WithRSAEncryption
8f:df:81:4b:fa:de:cd:31:66:ed:65:8e:a0:7e:61:8f:02:36:
6e:76:ab:79:72:d5:3d:39:36:8d:83:1a:68:ac:7d:6a:90:f5:
9a:71:56:c5:e0:bc:19:9d:27:8b:3d:6b:56:64:e5:a2:21:f8:
9f:0d:2d:63:32:1c:de:a1:13:4f:7b:cf:dc:e5:e0:e5:4e:eb:
20:52:51:e9:35:12:38:3b:ea:67:ed:1d:5a:ce:ec:af:58:fb:
84:b8:06:fb:50:ce:76:f5:d1:64:57:31:b5:73:dd:82:4c:9d:
69:70:ed:15:b1:87:b2:7c:f7:59:b3:66:87:7e:16:79:e4:3c:
4a:cb:2a:81:e3:5a:6d:3f:46:1b:52:49:68:d1:77:24:49:0b:
98:ea:02:b3:b3:71:23:42:ec:e2:14:63:2e:d7:b7:5c:20:13:
aa:3e:0f:4a:20:ec:b4:e0:9e:2a:70:99:37:59:be:ad:96:da:
7f:42:41:b3:d6:62:b0:b8:0b:b9:74:4d:b3:b1:38:3f:64:cc:
23:d3:7b:4c:61:50:5d:7a:83:62:45:1a:86:b7:f1:95:f8:18:
5b:3c:8d:2e:9e:a9:e8:5e:e0:4b:5a:ed:63:ef:6b:48:ec:13:
3a:45:b9:22:f0:bd:e6:b4:cb:13:ec:2f:6e:76:9b:38:59:20:
e9:43:39:dc
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFAVQqSO/SPeoYVzH0GbLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk4YTU3NTRkZWU5ZWVmNmYyMjQ1NjJjYjgyMzlhYzhiZGIwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfxSquaRnHjfuE7QUxffnqS4Z4D
tFSZ7b1nHYRlhWokUWsHz40CD29U9XKYAWMKdu/INMJp335EYGKSvoqWeNJL7Bc+
ZRmmthcL8zjSj71BZqQGKQMbbKJImTic6b53aBUrqoXaakR8hdbiCkqEkO69TSQB
W7ggOiu+cIXtvZMiR9YLyM/XG4j2ZzcUJR/iIXfSObyTS4JRp++XVRGZrvT0wXeu
vI2o79Qz7K9XZ8HUdmYDU3enRu/TliSqwAezCnc+RVkxlH6irRAb+IEgwoj9YyBs
rGZzxKXfIudQ/+jAxTgiMdmUwHeq34n6qcESgN6CvDHcpHMS6QKlAbqylwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCaYpXVN7p7vbyJFYsuCOayL2wW4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzdiOGI2
Zi1lNDRjLTQ5Y2ItOGM5My0wZjA4NTU5ZDdkMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvN2I4YjZm
LWU0NGMtNDljYi04YzkzLTBmMDg1NTlkN2QxOC8xL0pwaWxkVTN1bnU5dklrVml5
NEk1ckl2YkJiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuadQMA0EAgACMAcDBQMqC1IAMA0GCSqGSIb3
DQEBCwUAA4IBAQCP34FL+t7NMWbtZY6gfmGPAjZudqt5ctU9OTaNgxporH1qkPWa
cVbF4LwZnSeLPWtWZOWiIfifDS1jMhzeoRNPe8/c5eDlTusgUlHpNRI4O+pn7R1a
zuyvWPuEuAb7UM529dFkVzG1c92CTJ1pcO0VsYeyfPdZs2aHfhZ55DxKyyqB41pt
P0YbUklo0XckSQuY6gKzs3EjQuziFGMu17dcIBOqPg9KIOy04J4qcJk3Wb6tltp/
QkGz1mKwuAu5dE2zsTg/ZMwj03tMYVBdeoNiRRqGt/GV+BhbPI0unqnoXuBLWu1j
72tI7BM6Rbki8L3mtMsT7C9udps4WSDpQznc
-----END CERTIFICATE-----
Generated at Fri May 3 10:08:10 2024 by rpki-client on console-fra.rpki-client.org