Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.cer (raw, json)
Hash identifier: Npj3oxecB0PPXc0f4pU49vm9IscpXm35Zq8Hdq0f0mA=
Subject key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9361BB400580A3A130517170C195C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.134.16.0/21
IP: 91.192.202.0/23
IP: 2a01:81c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:1b:b4:00:58:0a:3a:13:05:17:17:0c:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:7c:7e:c4:11:a3:7b:82:fe:7f:03:3f:48:
58:be:2c:9e:be:c6:98:73:f4:fa:20:9a:77:f7:24:
8e:b2:a9:3a:31:f2:3a:0a:22:77:87:be:0a:7e:b5:
b5:ef:c4:a7:6b:40:a8:b0:db:24:9b:f3:72:d8:1a:
2e:49:bd:51:dd:c1:bd:b7:34:c1:e3:54:0a:ad:34:
91:95:55:3f:b9:60:a8:4f:6e:21:df:0e:73:da:49:
db:1e:fb:af:55:f9:28:4c:23:f8:9a:f8:54:4c:f5:
e2:5e:00:a8:82:31:ca:d5:87:ae:6c:67:a1:d9:15:
87:de:56:7b:1c:1d:8e:1f:27:b5:15:4b:31:b4:7b:
d5:fb:23:5c:8f:3b:83:af:fb:9b:d1:82:26:b0:f6:
50:42:3f:2f:ee:09:b4:da:dc:10:bf:88:0f:35:71:
f9:36:cd:d9:30:32:09:78:a0:d2:68:86:f0:5d:92:
db:df:d4:90:48:25:69:a7:f6:96:f0:ec:f8:d3:19:
c8:54:11:60:bf:24:eb:06:72:c7:98:56:22:55:51:
ad:15:b0:d6:8d:de:38:fa:54:82:e0:9a:37:00:4e:
94:49:fb:cb:03:25:aa:ef:cd:6b:0d:ed:4c:54:d5:
3a:d4:5c:b5:70:39:f6:2d:d4:6a:73:99:e3:b0:2a:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.16.0/21
91.192.202.0/23
IPv6:
2a01:81c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:c6:93:2d:1d:2b:f7:ec:31:e4:3d:14:cf:b2:26:2a:d5:bf:
82:2a:6c:b7:75:90:ff:9a:ab:dd:1c:68:3e:00:70:3f:9f:fe:
2e:31:c2:28:29:9a:1f:1d:e1:85:c0:63:ca:1d:a9:9a:a0:98:
8f:0a:db:28:18:12:b3:94:65:86:39:ba:96:67:37:37:ad:77:
af:2c:4c:ac:97:c3:25:4b:59:03:c4:b2:c5:b3:f3:7e:7e:7b:
46:e0:85:16:1e:1e:8c:42:d2:4e:56:00:8d:42:84:51:cb:99:
87:5a:2e:c5:95:63:ae:6d:11:d0:e4:03:95:79:3b:ce:25:90:
e8:d9:65:46:bb:07:22:1b:2f:b1:47:09:04:45:b0:76:ea:d8:
ae:ee:00:d1:d8:c0:9c:c6:8e:82:7d:fa:17:38:4a:6a:18:29:
67:95:d9:16:95:67:d0:fb:79:f4:57:94:d1:ff:1e:77:33:42:
7a:00:23:44:b9:9d:f5:2a:ff:18:43:91:64:bf:dd:92:70:a0:
fa:b1:92:78:15:9b:13:5e:ea:f7:c7:e5:41:3c:f4:9c:96:78:
cc:ea:17:be:3f:50:3a:93:15:f7:a4:01:99:3c:d6:88:33:a2:
f6:e7:f1:fe:8a:de:8e:5b:a2:bc:5e:58:75:d6:48:57:26:94:
46:11:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:50:09 2024 by rpki-client on console-ams.rpki-client.org