Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JulM4LSVQQixXE8pWTj4wa8HJ8Q.cer
File: JulM4LSVQQixXE8pWTj4wa8HJ8Q.cer (raw, json)
Hash identifier: 0tiGllkXXQVZvvOWl4KDimJS/X87SBQWg3EpKl2cD0k=
Subject key identifier: 26:E9:4C:E0:B4:95:41:08:B1:5C:4F:29:59:38:F8:C1:AF:07:27:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B8B4A2A9B5184BE88821D395A3689
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/JulM4LSVQQixXE8pWTj4wa8HJ8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.28.134.0/24
IP: 2a12:58c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8b:4a:2a:9b:51:84:be:88:82:1d:39:5a:36:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e94ce0b4954108b15c4f295938f8c1af0727c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:72:ac:17:b1:a8:b0:10:b8:c4:99:3e:98:
4f:1f:c9:e0:a8:d7:c0:9b:1f:93:07:65:17:fd:62:
e7:8c:38:81:4e:57:cd:9a:e7:0f:70:41:2a:da:4a:
7c:1e:ef:6a:22:51:2c:bd:b0:8a:ed:e4:49:fe:01:
03:45:aa:0b:6f:e9:82:5f:1f:08:45:14:49:cf:30:
6f:03:7b:1a:3b:88:c5:1e:c4:71:ca:0c:8c:3a:d7:
c1:84:0a:32:03:a0:fa:95:3b:9b:24:87:16:b8:61:
50:66:4c:85:63:ff:0f:2a:f1:15:c8:da:90:9e:4a:
70:05:a0:a3:f2:56:4d:5a:c2:7c:44:4d:3a:8f:53:
4d:c4:ed:9c:88:be:34:3f:28:b6:da:21:89:b8:80:
25:56:74:0d:af:d5:c2:e5:2d:23:98:e5:fc:6c:e0:
65:de:38:8d:33:6b:c6:77:77:c4:19:78:72:a8:ff:
8b:d6:40:2d:3c:57:81:d0:d5:d5:89:4e:2b:c0:5a:
e7:59:fb:14:c9:58:18:3a:ba:5e:d0:79:26:77:c8:
54:92:32:fc:59:3b:15:27:56:af:10:20:57:0c:e0:
91:df:b7:ba:51:44:aa:bd:61:1f:ee:12:78:46:6e:
00:36:3d:26:8a:dc:c0:bb:c8:04:1a:8d:ec:07:0a:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:4C:E0:B4:95:41:08:B1:5C:4F:29:59:38:F8:C1:AF:07:27:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7dc391-6bb9-4fff-92ee-a616f02772e6/1/JulM4LSVQQixXE8pWTj4wa8HJ8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.134.0/24
IPv6:
2a12:58c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:4b:aa:64:37:bf:fa:f7:91:38:8c:04:fb:86:84:c8:a3:37:
26:16:15:d3:69:94:b8:2a:b4:58:c2:ec:76:f1:49:fe:15:8a:
b7:ad:21:0c:67:8b:ab:a6:22:8e:b3:5c:8c:f0:67:6d:36:bc:
ce:fc:1e:38:23:a2:d5:36:c5:dc:3b:cc:c9:03:5d:00:b2:3d:
d5:34:62:16:cf:8f:09:42:bb:26:bc:59:16:4f:4f:61:69:f4:
07:7c:2c:62:97:71:62:f6:5e:03:d7:6f:93:02:0f:2b:47:a0:
73:75:38:6f:51:df:36:62:65:b6:3c:be:ea:a6:6e:08:7c:3c:
b1:60:e7:da:bb:51:88:43:6d:38:92:88:74:73:ba:51:70:11:
7b:72:81:e9:b0:9d:1d:3b:0e:0c:23:30:53:f2:2a:26:6d:01:
6f:1f:40:2c:e0:d6:4c:ff:59:1e:84:a7:8a:36:03:cd:21:81:
5a:61:d4:5c:b8:e9:bf:0d:21:d0:64:63:3b:2a:84:62:8e:e4:
27:e3:d8:b6:75:31:6b:3a:0d:c9:09:3c:2c:77:86:77:99:8c:
a2:8c:56:90:fd:54:8c:4e:8c:ce:56:a4:74:19:f2:65:c5:c8:
56:62:0d:b7:f4:1f:1b:55:cd:73:29:16:9d:79:63:1e:24:fc:
af:09:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:14 2024 by rpki-client on console-fra.rpki-client.org