Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer (raw, json)
Hash identifier: dbeGF76UhIwYIOywgmvhVT3RYnTalWGNyfFYTnOE/ak=
Subject key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190E155DAE7C97BE0FEC2638761364A96B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jul 2024 20:43:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59953
IP: 91.109.232.0/21
IP: 185.78.8.0/22
IP: 185.248.220.0/22
IP: 2a0d:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:55:da:e7:c9:7b:e0:fe:c2:63:87:61:36:4a:96:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 20:43:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:f5:8a:18:16:37:12:39:36:88:64:01:20:
d9:32:4f:ee:a4:e4:30:5b:8e:61:97:db:d7:ca:d2:
7b:4a:ef:c0:32:06:92:25:6f:d5:68:db:af:3a:3e:
10:ef:cd:0a:b4:44:e1:b0:e8:db:91:e0:63:04:df:
41:ea:1b:79:2e:09:d1:b5:64:87:e3:75:3f:e3:75:
5e:f3:5b:ec:e3:4b:b7:a0:02:4f:a6:ee:ef:79:f4:
f6:99:f5:23:d8:c4:f4:64:43:aa:f8:c0:4e:71:39:
27:d4:2d:35:b3:7b:ac:02:2e:25:93:65:54:ef:84:
6d:53:42:46:2a:ba:4d:ae:7b:96:de:06:e1:34:02:
b3:23:f2:d0:c1:4e:0e:aa:20:ed:3d:79:20:f8:d8:
e0:07:df:3c:bb:02:b7:09:05:79:a7:82:c8:4e:c8:
89:61:f0:7a:71:48:de:ef:e2:33:08:de:95:fd:6d:
33:23:5b:0d:3b:02:a9:7a:ae:35:2e:90:e0:ed:c4:
8d:9a:0b:d2:3f:1f:34:be:7e:0c:ac:f3:bf:ac:b2:
a0:66:61:04:94:51:ff:a0:1a:b2:e9:17:e5:f2:58:
80:67:3d:50:f9:ff:0c:c8:b9:f4:62:00:8f:a0:bd:
4f:94:40:36:a3:d0:b2:0f:69:0e:56:fd:92:97:45:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.232.0/21
185.78.8.0/22
185.248.220.0/22
IPv6:
2a0d:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59953
Signature Algorithm: sha256WithRSAEncryption
8b:e0:da:8d:77:f4:1a:89:86:62:ec:4c:d2:7d:99:df:1e:4c:
7e:35:38:76:9f:9d:f8:25:3e:9f:09:66:73:73:87:b5:75:66:
f8:cb:79:17:a1:cc:cf:0a:77:ec:ef:6c:a4:1a:50:ee:4f:a4:
ba:78:16:d3:3f:3a:43:ac:7f:21:4a:31:33:74:fd:26:4c:81:
c8:16:1e:9e:9d:92:43:dc:94:81:18:59:e5:fb:1b:76:11:65:
80:4e:4e:92:19:d4:5b:4e:5e:85:ad:d4:f1:13:c5:5f:6a:f7:
ad:d5:6b:be:b2:50:e6:a2:c2:9e:d2:8e:80:92:2a:c4:b9:42:
e0:24:e6:42:43:bf:64:d9:dd:b5:55:00:03:bd:d8:dc:41:2b:
ef:c2:b3:23:dd:e7:b9:d4:f0:6c:92:3b:4b:3f:c1:fd:39:68:
05:fa:9e:a9:3f:55:e1:cf:8a:9a:8e:aa:a1:c6:f0:04:0f:76:
eb:55:26:a8:fb:33:9a:b1:17:dc:bd:33:c5:1d:7b:15:55:58:
48:b2:4a:bf:a0:6e:f5:c3:68:aa:d8:a9:2d:1b:45:cc:b9:7c:
ee:76:5e:dc:75:3c:10:70:06:0f:18:7a:74:55:a6:0e:89:73:
f0:49:40:7f:cd:ef:82:d4:74:10:94:96:cd:72:db:f2:8c:d2:
94:34:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:44 2024 by rpki-client on console-ams.rpki-client.org