Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer (raw, json)
Hash identifier: z0kqE+7pH4h+Pl4nRvQNOQ9evODv7gVEExlMv3TgEto=
Subject key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E45A1B565F8AD700B5421CD99C2AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 157.190.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:45:a1:b5:65:f8:ad:70:0b:54:21:cd:99:c2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:65:63:e2:fb:68:d6:f2:50:e0:fb:63:7c:
c0:14:f3:bf:cf:fb:07:82:3d:4a:cf:b6:cd:6d:0e:
95:77:4b:cb:a7:f0:7c:98:53:25:91:9e:7a:0e:9d:
05:13:a2:25:96:69:fa:73:93:6e:5f:28:f8:62:5b:
67:ac:27:68:85:33:eb:f8:d9:ef:26:45:92:55:c2:
17:6f:89:ef:de:45:23:b3:68:a0:38:68:52:8b:da:
90:ac:2e:ca:25:ba:f3:77:bc:b9:f3:d7:16:e9:5b:
c7:41:cb:c4:19:96:71:f6:84:a7:7c:b6:dd:f5:55:
45:bc:1e:30:01:96:ea:8b:c9:77:62:f2:65:86:eb:
24:a3:25:42:28:b0:32:e0:90:28:30:90:de:37:b4:
cc:22:1b:ac:95:ea:c5:2a:33:42:e9:d1:b7:0a:3e:
34:dd:98:2f:e4:a1:94:1a:b5:9b:34:09:a0:02:8d:
b4:f7:7b:ca:f1:cd:22:54:22:0d:93:33:d5:98:48:
d4:3c:eb:ea:0f:38:02:1a:94:f2:05:17:03:99:a1:
d5:70:bc:f9:59:f1:ae:5b:9f:61:61:2d:d8:8d:c9:
7e:35:ad:2c:6d:17:8b:f7:be:26:50:0b:f8:2a:f1:
70:04:27:37:f6:4d:8f:98:d3:83:a4:b6:b6:36:41:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:75:05:ba:3f:44:e0:f9:b6:c5:ea:fd:43:47:5d:f1:52:c2:
77:c9:eb:d1:eb:79:5f:c5:b6:58:41:c4:67:28:e9:c9:85:5c:
df:d1:28:cc:24:3a:fb:72:21:9c:24:11:b5:d2:38:38:52:2b:
d8:b4:2a:37:f5:59:1c:ac:59:9b:73:97:dc:68:8c:66:02:a3:
75:7e:50:54:c1:d4:97:e4:08:36:2f:fd:0f:bf:1a:6b:c3:f7:
f8:af:a3:e9:e3:6f:53:8b:0e:c3:9b:d9:e4:8d:ef:3a:43:60:
3a:b9:d2:44:55:c2:f9:f6:76:38:26:27:5c:dc:20:ac:ef:90:
a6:8a:4a:cd:52:c1:d1:86:17:f0:11:6e:0c:a1:74:7b:13:d0:
39:61:90:91:23:a4:35:00:b0:c7:51:58:d0:96:b2:8a:d2:5c:
2a:fd:26:e9:c5:13:41:d2:92:09:06:5a:3e:92:eb:ca:ed:43:
7e:a1:7f:e2:a9:94:a8:1e:e2:f3:03:cd:8f:a4:63:42:a4:5f:
0e:10:1d:ea:d6:23:86:29:f4:3b:ae:ee:19:2f:61:46:95:b0:
5d:56:5b:b7:a3:6a:af:fc:49:09:35:41:01:2b:cc:5a:69:f1:
0f:fd:87:c4:e7:f5:f0:a7:55:67:7d:9c:36:76:8a:7d:cd:2b:
3b:c1:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:10:16 2024 by rpki-client on console-fra.rpki-client.org