Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqOHEyLZtabonXHMF9JcLzMQqnQ.cer
File: JqOHEyLZtabonXHMF9JcLzMQqnQ.cer (raw, json)
Hash identifier: FSGRNaao9E2o9DCzccKY4xOXx/KW0UKExY9bQu8flMs=
Subject key identifier: 26:A3:87:13:22:D9:B5:A6:E8:9D:71:CC:17:D2:5C:2F:33:10:AA:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF9A3BB4B4ABD6C7DEE7489EE1B12BB19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/JqOHEyLZtabonXHMF9JcLzMQqnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Mar 2024 10:51:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.59.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:a3:bb:4b:4a:bd:6c:7d:ee:74:89:ee:1b:12:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 1 10:51:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a3871322d9b5a6e89d71cc17d25c2f3310aa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:e9:ac:9a:ad:fe:6e:c8:e1:d9:35:27:7e:
f7:9a:c2:19:14:f9:b6:d5:8d:99:53:58:54:4b:b7:
62:ba:e5:49:3d:ec:f4:f1:e8:5d:4c:7c:43:ac:eb:
d8:17:50:98:ce:99:ed:bd:e0:52:0a:3c:9b:be:42:
2d:b2:1b:66:04:26:ab:a4:c6:ad:d6:a5:42:f5:66:
0e:e2:9f:8f:87:27:66:ac:6b:6a:4f:8f:bd:fd:01:
45:7f:25:f0:30:7b:2e:14:1b:ae:7a:9a:dc:08:70:
ca:eb:5f:38:e7:a6:ee:0e:79:ca:6f:95:c2:55:ae:
46:97:0b:33:63:25:7c:3a:11:07:ea:60:6a:5d:d7:
02:71:83:46:13:ae:f0:f1:51:76:79:a4:92:1f:a4:
ae:53:ca:fa:5c:c8:3f:24:8c:7e:09:e3:25:42:a7:
39:ce:c0:a6:53:e9:bd:4c:81:2d:e1:2e:0b:5e:34:
04:6c:a2:dc:4b:84:c4:ed:cb:50:f4:67:23:c1:e0:
af:44:a8:bd:35:7c:95:1c:ae:c0:8b:78:f2:3a:9b:
63:83:b7:e2:ae:77:84:f6:fb:7b:5b:73:71:28:cb:
ec:7f:24:6d:62:94:ab:4a:27:e2:51:4e:8c:86:91:
f2:ef:55:03:3a:bc:24:0d:f6:d9:8f:87:c5:2a:89:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:87:13:22:D9:B5:A6:E8:9D:71:CC:17:D2:5C:2F:33:10:AA:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/JqOHEyLZtabonXHMF9JcLzMQqnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.183.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1a:3c:c0:f7:3a:95:4c:58:77:b3:90:90:26:e6:1c:5f:88:
1f:90:c4:31:b6:e6:02:b5:3d:07:62:6f:15:c0:82:e0:31:10:
77:db:ef:1c:e2:21:46:b0:fa:a8:80:3e:1e:72:e3:ba:52:d5:
8c:b0:39:56:72:54:e4:26:85:35:26:45:52:53:65:bf:5a:55:
f4:43:5a:3c:6b:a3:08:ed:21:e8:27:fb:0b:16:ed:4e:96:00:
41:14:d8:b5:28:96:17:36:91:81:ef:ca:b7:fc:92:e0:c3:5d:
12:ae:33:ba:c3:b6:76:3b:1a:eb:6f:e6:d6:f1:e2:0c:e5:38:
92:5a:3d:54:b9:ce:2a:16:02:2d:a1:91:07:a7:e7:39:b1:12:
20:95:21:5e:37:b5:9d:ed:2f:e5:b3:4c:c4:ea:49:db:82:88:
c4:df:64:a8:62:2c:b6:b9:6e:25:b3:d4:6c:c2:02:be:5a:fa:
d2:b5:88:42:b0:38:08:96:95:fb:84:2b:2d:2e:df:03:e4:c8:
23:ef:75:80:28:93:1f:0c:38:c8:77:8b:35:9c:95:7d:83:be:
5a:47:79:32:5d:00:82:27:51:66:47:53:ee:73:c3:5d:a6:48:
fd:d3:f9:2f:65:ce:11:d2:a4:3f:3a:88:e6:f9:0d:56:2e:08:
83:0a:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:10 2024 by rpki-client on console-fra.rpki-client.org