Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer (raw, json)
Hash identifier: Sackj4MXhcUBVVQBY0rKk9gFJBKzt9LHhH42ojPxH2Y=
Subject key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CA983DA120358D72FC05F5EBF30F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42395
IP: 91.192.96.0/22
IP: 91.198.46.0/24
IP: 185.90.224.0/22
IP: 2a05:e540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a9:83:da:12:03:58:d7:2f:c0:5f:5e:bf:30:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:91:8d:7d:27:97:8f:50:a3:9d:50:bb:fe:
26:f0:52:65:ad:21:02:66:97:24:b6:ff:85:09:4a:
58:e3:01:1f:92:02:99:af:12:22:c8:87:c4:ab:c8:
04:d8:e6:c7:6b:1c:56:b4:66:71:0d:70:9a:4f:6c:
93:9e:bb:55:df:e5:34:94:ea:60:45:11:71:01:ad:
75:97:4b:b4:35:3a:a0:e3:24:45:d7:42:bd:63:a1:
39:a5:bc:78:6e:0a:6f:ea:82:89:2e:87:b6:af:98:
51:25:bb:6e:78:5f:5a:0d:50:27:b8:58:64:e0:6e:
40:f8:7f:ad:dc:b2:52:51:05:f4:56:89:eb:79:ec:
4c:43:cf:f4:99:37:1f:9b:49:31:ee:7b:5d:28:88:
bb:44:56:07:a5:20:6b:eb:20:9c:f2:d0:17:11:57:
c1:0a:79:7b:bb:5c:00:1f:61:cf:81:fd:38:ae:53:
ec:35:30:5f:59:83:d0:08:87:d7:4b:cf:aa:ae:2a:
f3:ff:01:31:df:9b:4d:68:32:a4:99:4e:fc:9b:64:
2e:ec:2e:be:49:a6:46:cd:f3:ce:ce:f3:02:a4:78:
28:97:6f:58:21:3a:00:2a:1e:de:ae:e1:f6:4d:8a:
ab:9a:ef:c8:60:a7:95:3f:84:76:db:f5:74:bb:99:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.96.0/22
91.198.46.0/24
185.90.224.0/22
IPv6:
2a05:e540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42395
Signature Algorithm: sha256WithRSAEncryption
0c:63:83:4d:0f:8a:77:32:aa:35:12:08:29:b2:52:d8:80:8b:
e3:ed:08:49:b5:34:00:b1:84:e1:df:c0:37:38:2f:21:b4:4d:
f6:be:0f:39:52:1c:47:65:2f:5f:2e:f7:f2:60:81:1d:d2:1c:
1c:f2:64:d1:46:b6:b2:bc:4f:1a:68:4e:35:8e:51:ae:82:b0:
94:65:a6:0c:b9:c3:c5:51:25:d5:f5:e3:70:c5:b9:8c:6d:56:
6d:f5:57:fc:a1:73:3f:9f:92:a2:35:d9:20:8b:aa:77:a3:f8:
94:bf:fb:af:f0:61:3f:45:e3:b5:a8:83:2d:1d:e5:94:e7:a7:
89:dc:8e:70:0d:10:10:d1:71:9d:b2:d7:ee:c9:08:bf:ad:54:
14:1e:05:91:09:5d:7f:c2:4a:e0:56:49:e2:9b:7e:59:7a:8a:
ba:d1:94:93:fa:28:63:f7:e7:56:56:18:84:ba:05:63:20:fe:
90:4d:f4:c0:1b:2d:8d:77:ab:18:e0:1b:e5:00:a2:84:61:a2:
23:a3:f0:41:41:ad:b8:81:61:d6:67:60:ce:51:f3:7f:c8:02:
f6:f5:a4:ce:34:22:0f:dc:e2:7b:21:51:1e:33:06:36:8f:94:
c4:60:cc:7c:2f:59:da:e6:d2:62:b6:dd:5f:e7:b1:18:61:f5:
55:5a:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:39 2024 by rpki-client on console-ams.rpki-client.org